Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/943732-9621-4a42-87da-b2de3ebf3e7e/1/1-RqCIwAuMSTluwboLU9go3m5Pc0.mft
File: 1-RqCIwAuMSTluwboLU9go3m5Pc0.mft (raw, json)
Hash identifier: PCJ6ySfWFecj5fiQcmolP9so0znsJ4OYaE65Hm8MfHA=
Subject key identifier: 3B:B3:C3:8C:8C:0F:2F:71:06:CC:92:10:F4:4E:53:41:D3:F0:2F:DA
Authority key identifier: F9:1A:82:23:00:2E:31:24:E5:BB:06:E8:2D:4F:60:A3:79:B9:3D:CD
Certificate issuer: /CN=f91a8223002e3124e5bb06e82d4f60a379b93dcd
Certificate serial: 0194BD85B23960B5BA745E6F170085AC0ACA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-RqCIwAuMSTluwboLU9go3m5Pc0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/943732-9621-4a42-87da-b2de3ebf3e7e/1/1-RqCIwAuMSTluwboLU9go3m5Pc0.mft
Manifest number: 0EDC
Signing time: Fri 31 Jan 2025 18:00:43 +0000
Manifest this update: Fri 31 Jan 2025 18:00:43 +0000
Manifest next update: Sat 01 Feb 2025 18:00:43 +0000
Files and hashes: 1: 1-L2N1IxNmqwC6SnQGrk2zfPC90E.roa (hash: lv5rh5EEaSGLGKAlKwyPA6/B7Y5vo8o7IkiCP0ociGg=)
2: 1-RqCIwAuMSTluwboLU9go3m5Pc0.crl (hash: rKDvYlTUTG8BG+VHtzIuKmlEhvWAxAA05o2qssI51rs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:b2:39:60:b5:ba:74:5e:6f:17:00:85:ac:0a:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f91a8223002e3124e5bb06e82d4f60a379b93dcd
Validity
Not Before: Jan 31 18:00:43 2025 GMT
Not After : Feb 1 18:00:43 2025 GMT
Subject: CN=3bb3c38c8c0f2f7106cc9210f44e5341d3f02fda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:7e:23:e1:35:bd:7c:4c:ef:3a:d9:24:34:e0:
a8:bc:2e:73:48:f6:9e:e2:3a:fb:aa:98:ff:71:df:
00:23:05:f4:8b:55:79:b4:30:50:6d:79:6c:ea:0c:
94:5d:d8:84:9f:08:05:3b:a5:91:0d:1a:b5:3a:71:
42:40:dc:72:86:eb:8c:fa:17:c7:f1:9b:b7:bd:69:
90:1b:2b:72:cc:1a:c9:fb:d1:f9:f9:dd:21:2f:7f:
ba:66:15:88:f5:b2:89:2c:cc:57:aa:46:91:94:e6:
2e:a9:27:57:aa:72:17:5d:3a:46:3b:ea:ad:8a:69:
a6:da:4f:e1:58:48:ec:3d:f2:72:99:3c:2a:67:2a:
7c:b4:d8:71:4b:dd:15:e3:f4:c8:cc:72:32:77:84:
b8:bc:d8:d6:d0:9d:09:c9:64:2d:c7:34:72:15:d5:
c9:ad:c6:73:30:fe:91:05:1e:39:70:84:1e:31:44:
27:bc:27:d9:db:36:2b:58:a5:36:07:3e:c3:fd:9b:
fe:89:73:51:9a:d8:cf:5f:11:e5:4d:db:dd:a8:87:
c1:e5:18:af:15:8c:09:b1:cc:f0:6d:f4:42:49:3b:
94:e2:e7:5a:80:df:1d:83:03:30:72:87:70:41:09:
e4:2b:53:8d:a2:94:4b:bf:c9:fa:50:6e:f3:99:14:
78:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:B3:C3:8C:8C:0F:2F:71:06:CC:92:10:F4:4E:53:41:D3:F0:2F:DA
X509v3 Authority Key Identifier:
keyid:F9:1A:82:23:00:2E:31:24:E5:BB:06:E8:2D:4F:60:A3:79:B9:3D:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-RqCIwAuMSTluwboLU9go3m5Pc0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/943732-9621-4a42-87da-b2de3ebf3e7e/1/1-RqCIwAuMSTluwboLU9go3m5Pc0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/943732-9621-4a42-87da-b2de3ebf3e7e/1/1-RqCIwAuMSTluwboLU9go3m5Pc0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:f0:ce:c4:6c:c3:4a:d5:bb:f1:db:1b:95:03:c8:27:30:e2:
6a:45:c0:f0:aa:b8:cb:be:9f:c8:5f:5b:51:29:ff:8e:c4:dc:
94:a4:e4:5e:75:4b:ed:92:88:17:17:c5:a1:0e:36:7e:f5:2c:
f1:2f:00:51:9b:c3:90:68:68:c5:78:d8:10:15:c0:8d:c1:9e:
65:94:9f:81:34:7f:ae:62:4c:b6:6b:9e:be:78:5a:88:cf:9f:
e3:0e:5b:fb:6d:6c:20:c8:fd:23:27:89:f1:32:dd:0b:df:2e:
0b:dc:67:f4:65:a0:48:cf:c3:2a:2b:d5:21:38:56:0d:8e:79:
d7:20:ec:e9:3c:94:33:fd:8e:04:a0:ff:83:6f:51:67:9d:2e:
0f:0c:ae:81:4c:94:47:df:ba:13:bf:e5:f6:61:52:f9:2b:5c:
d7:c9:09:01:a4:72:83:54:15:4e:4a:02:52:a8:db:56:85:21:
63:b3:32:a8:de:80:dd:14:f1:be:68:a1:fb:14:80:67:8e:4e:
77:c6:8f:1e:f5:26:fb:9f:bb:86:78:3d:17:3a:6d:7f:47:14:
66:c2:ad:ac:a8:3f:73:aa:a2:ce:d2:d3:00:e6:8d:e0:d7:ca:
1d:cb:ae:f7:89:2a:de:2b:8a:0b:9c:97:7e:7b:36:6d:2a:9b:
04:4d:38:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:49:53 2025 by rpki-client