Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.mft
File: RCbZs6eFQ7aWQzXuGUHKKXHFaU4.mft (raw, json)
Hash identifier: 514jgplykj53F7Ze+/YQOhU3ZZd50jIB3W7rESsFnGo=
Subject key identifier: 64:B3:A2:21:D1:27:EF:E6:B7:03:41:34:1A:01:1D:7E:DB:A4:90:AD
Authority key identifier: 44:26:D9:B3:A7:85:43:B6:96:43:35:EE:19:41:CA:29:71:C5:69:4E
Certificate issuer: /CN=4426d9b3a78543b6964335ee1941ca2971c5694e
Certificate serial: 0194BD4EAFB372735EAB08336C030F7B7CDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.mft
Manifest number: 0D2C
Signing time: Fri 31 Jan 2025 17:00:37 +0000
Manifest this update: Fri 31 Jan 2025 17:00:37 +0000
Manifest next update: Sat 01 Feb 2025 17:00:37 +0000
Files and hashes: 1: RCbZs6eFQ7aWQzXuGUHKKXHFaU4.crl (hash: 3SrZkVgouUG6Po5LGXHMHbFEX2gza6d83g6zXYB6Zqc=)
2: evdpU8RxaI_pbdRiidwVOCapui0.roa (hash: gmEXsktEnud6XxBSpR/JYtLPKpbESxZW8V98Ytskm+o=)
3: zC0DwQFXhSD9GmfEt7gqZels6ME.roa (hash: Cq4uPzMv6jZuo+s6z3yPpwudom0heKSg9U70MId82ts=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:af:b3:72:73:5e:ab:08:33:6c:03:0f:7b:7c:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4426d9b3a78543b6964335ee1941ca2971c5694e
Validity
Not Before: Jan 31 17:00:37 2025 GMT
Not After : Feb 1 17:00:37 2025 GMT
Subject: CN=64b3a221d127efe6b70341341a011d7edba490ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:06:52:07:57:56:4d:95:9f:cf:9f:3c:af:58:
30:f0:f5:7b:02:51:76:5b:b0:59:4b:51:ac:f6:5e:
6e:dd:ae:17:1e:aa:0d:76:06:6f:15:3c:c8:51:e7:
55:05:7e:ca:44:f4:04:d0:e9:95:b2:de:01:84:b7:
a8:a4:0e:04:6f:de:e6:f4:9a:97:c6:72:ad:12:f4:
36:82:31:a7:3f:0b:a2:ef:ac:db:bd:ee:5b:56:d3:
24:39:df:30:ad:66:06:06:9b:fa:67:12:01:b0:3d:
17:89:a8:5a:f8:c6:31:74:ad:01:52:99:bf:c3:5a:
fc:41:4c:c3:29:36:9a:66:40:f5:84:5c:cc:2a:d5:
f6:f1:5d:04:9d:fd:66:a3:64:a3:35:21:32:e7:44:
dc:5d:bd:00:f1:dc:b4:21:50:ff:15:36:41:1a:f6:
90:9f:11:9f:6f:5c:74:c2:34:76:00:a6:20:08:53:
c1:9e:a2:ae:98:1f:f9:75:ec:c5:35:56:4f:fd:fd:
1d:61:41:83:e9:a4:18:6e:ed:14:ef:18:38:6c:36:
7d:f6:7b:03:43:ba:51:e5:8d:14:b1:ea:1f:4f:57:
1b:58:68:d9:89:b6:fa:74:a4:56:68:e6:f3:38:a6:
3f:9a:36:a5:cb:44:25:3f:0d:7d:84:e5:4e:40:fc:
ff:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:B3:A2:21:D1:27:EF:E6:B7:03:41:34:1A:01:1D:7E:DB:A4:90:AD
X509v3 Authority Key Identifier:
keyid:44:26:D9:B3:A7:85:43:B6:96:43:35:EE:19:41:CA:29:71:C5:69:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:eb:86:66:a3:60:d1:d4:53:ff:ce:ca:e9:91:ca:8e:bc:26:
47:ce:73:b1:3a:fe:a0:b2:11:fe:f6:5b:94:35:2e:78:80:54:
7a:5e:21:c4:65:7c:73:ee:ff:6f:6b:f1:b6:7a:f1:94:e1:93:
fa:0a:a3:9f:bb:7d:cd:93:42:25:d2:41:05:2e:3c:c1:55:56:
eb:d4:53:59:b1:6b:2f:7b:0b:6a:21:69:f6:ff:05:dd:47:11:
48:cd:63:e7:6a:42:65:19:7e:b3:44:dd:92:0c:10:14:b3:c8:
19:f3:61:1f:0c:86:2f:c3:0c:30:47:be:ab:54:9b:f0:c7:8f:
85:fb:4b:b9:13:6a:87:d1:14:e5:e9:a6:3e:e1:29:93:74:4c:
99:87:44:50:20:bb:79:89:87:5e:16:aa:2e:ea:42:a3:74:e4:
cb:d9:38:6d:f5:bc:9a:6c:7a:b7:97:d2:dd:5f:ae:d9:2d:07:
6e:07:8f:99:a7:5c:02:a6:79:5c:c9:7c:03:81:dd:d7:ce:8b:
16:cf:14:aa:3b:eb:6f:9c:33:b5:f1:4f:5a:da:f7:d9:99:ea:
ca:18:fd:55:d2:2d:3e:0a:e1:08:01:7c:c2:f2:d9:a0:21:8c:
2d:af:ee:ad:92:63:a1:1c:63:44:a3:33:b5:c1:47:e9:9d:5d:
8b:ec:0a:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:40:14 2025 by rpki-client