Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/49a221-67f5-4edd-b00d-4d2c4c5ad14e/1/RlxixrzUz7iTO8tqYc97Pa0vsRg.mft
File: RlxixrzUz7iTO8tqYc97Pa0vsRg.mft (raw, json)
Hash identifier: TPee6RZVRPmr/BOko1BL+BlrPRVTYAC9cYWQoYrgQw8=
Subject key identifier: C6:BE:56:04:BF:2D:86:15:FF:71:01:17:A1:85:19:4C:4D:8C:27:5E
Authority key identifier: 46:5C:62:C6:BC:D4:CF:B8:93:3B:CB:6A:61:CF:7B:3D:AD:2F:B1:18
Certificate issuer: /CN=465c62c6bcd4cfb8933bcb6a61cf7b3dad2fb118
Certificate serial: 0194BD4E6AE431E89D447C46E7F1222F6467
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RlxixrzUz7iTO8tqYc97Pa0vsRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/49a221-67f5-4edd-b00d-4d2c4c5ad14e/1/RlxixrzUz7iTO8tqYc97Pa0vsRg.mft
Manifest number: 0B20
Signing time: Fri 31 Jan 2025 17:00:20 +0000
Manifest this update: Fri 31 Jan 2025 17:00:20 +0000
Manifest next update: Sat 01 Feb 2025 17:00:20 +0000
Files and hashes: 1: RlxixrzUz7iTO8tqYc97Pa0vsRg.crl (hash: ECofbeU+3WhHdX9HpFPR9QOrmZup1AhiBM250NsZdfc=)
2: egGTR94gsD7sQAhG3KJ4vP9O6xI.roa (hash: U5VvDZubZFCpTXi93NWnw4hGkgnoWx3BFWnLjsNRwko=)
3: iZoqGkHfTscgkTRCL_nQYe_AAg4.roa (hash: gZNhRS+asEm9YEfETKtD9xHhALpBNhQLktZUScrlo6g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:6a:e4:31:e8:9d:44:7c:46:e7:f1:22:2f:64:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=465c62c6bcd4cfb8933bcb6a61cf7b3dad2fb118
Validity
Not Before: Jan 31 17:00:20 2025 GMT
Not After : Feb 1 17:00:20 2025 GMT
Subject: CN=c6be5604bf2d8615ff710117a185194c4d8c275e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:d0:da:6c:79:27:53:e1:48:78:c0:84:f0:f7:
e8:5e:46:b2:51:f7:72:6d:e7:b9:2d:84:4c:40:03:
91:1a:26:4d:3e:c8:6f:80:6f:d5:b4:cf:2d:95:70:
62:49:96:76:75:39:c9:f8:70:3d:f8:f0:16:d7:db:
5c:92:d7:55:6d:03:fe:82:be:98:b1:70:4d:93:48:
3b:3d:10:02:da:55:42:6e:a3:1a:5a:f6:ff:27:40:
c3:b5:f4:6f:7a:cb:be:c3:37:10:b3:bf:b3:82:0f:
62:ed:bf:e4:55:54:57:70:05:2c:6b:fd:2a:e0:c2:
92:b6:e0:fd:b8:5b:ff:53:e9:eb:7a:82:58:18:09:
8a:0b:c4:de:de:61:96:fb:87:69:1d:80:7e:85:27:
6d:d2:90:d7:53:f6:6c:b8:f2:f2:88:96:7c:75:9e:
cb:06:1f:59:55:f3:73:b9:20:f3:06:e2:58:39:6c:
0e:2e:ea:c4:fe:2b:8e:6f:ee:67:a7:93:99:15:7c:
0f:3c:f7:6f:81:b1:82:94:56:cc:5b:33:c4:87:bd:
f8:6a:5d:22:34:c3:fa:80:4a:cc:bc:79:c3:5d:20:
a6:85:03:75:c0:71:38:c2:e5:54:e4:29:9d:be:2b:
b9:4f:aa:de:c1:f2:db:bd:9e:5b:18:6c:1c:39:cf:
69:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:BE:56:04:BF:2D:86:15:FF:71:01:17:A1:85:19:4C:4D:8C:27:5E
X509v3 Authority Key Identifier:
keyid:46:5C:62:C6:BC:D4:CF:B8:93:3B:CB:6A:61:CF:7B:3D:AD:2F:B1:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RlxixrzUz7iTO8tqYc97Pa0vsRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/49a221-67f5-4edd-b00d-4d2c4c5ad14e/1/RlxixrzUz7iTO8tqYc97Pa0vsRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/49a221-67f5-4edd-b00d-4d2c4c5ad14e/1/RlxixrzUz7iTO8tqYc97Pa0vsRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:a3:ef:a8:f1:c2:59:74:26:03:ed:05:c3:f0:5b:db:46:f5:
af:e2:1f:d8:bd:ae:71:04:d3:21:0e:24:1e:86:99:2b:c9:e5:
3a:d0:13:63:7a:a2:12:87:e5:04:3d:8a:a9:9a:3e:d7:48:46:
8d:42:6b:d5:17:63:1f:3b:8b:e6:04:f9:2a:b1:51:26:e6:29:
13:d9:01:da:51:af:0f:49:2a:1c:53:9e:31:4c:dd:98:33:33:
f7:8e:f2:ae:40:4c:c3:39:6f:77:79:03:8a:af:fa:79:61:cd:
78:df:5a:8f:e5:ec:4b:0a:90:06:12:46:5b:7e:a6:1a:cf:3b:
02:68:e4:97:a8:df:27:60:45:1d:f9:34:7f:98:2a:eb:f3:b5:
67:11:b5:d6:ec:f7:aa:3d:92:1d:04:da:d9:68:a9:e2:5f:28:
04:31:bd:2d:7a:26:a7:19:cf:6e:4b:41:82:58:e0:11:8b:2b:
3a:08:34:35:ed:1a:51:fd:6f:59:17:d7:3e:8d:f7:e7:03:c9:
5d:a0:93:ca:05:29:a5:18:b2:7a:08:4b:f2:23:09:77:74:3a:
47:40:2b:57:5b:0b:3e:2e:fd:ed:87:ba:67:c4:40:1b:6f:8c:
1a:0d:2b:bd:25:ea:38:18:7b:cc:40:59:ed:dc:60:9f:2f:fc:
2a:3b:fb:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:12 2025 by rpki-client