Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/dc46ec-6428-4e5f-9a19-4f54ad755b20/1/RF3xPSDztXGkumELgeYwPbbQmcA.mft
File: RF3xPSDztXGkumELgeYwPbbQmcA.mft (raw, json)
Hash identifier: YNg3jchLhwwCMOGmHfdGhi4xBSPSRN4mD4Xr5izX/+U=
Subject key identifier: CD:EC:E1:49:81:69:C6:1A:51:FE:DB:1F:F6:1C:C7:A6:96:02:D2:D3
Authority key identifier: 44:5D:F1:3D:20:F3:B5:71:A4:BA:61:0B:81:E6:30:3D:B6:D0:99:C0
Certificate issuer: /CN=445df13d20f3b571a4ba610b81e6303db6d099c0
Certificate serial: 0194BCA9A6DCA643678C66818EAD71F35CB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RF3xPSDztXGkumELgeYwPbbQmcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/dc46ec-6428-4e5f-9a19-4f54ad755b20/1/RF3xPSDztXGkumELgeYwPbbQmcA.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 14:00:22 +0000
Manifest this update: Fri 31 Jan 2025 14:00:22 +0000
Manifest next update: Sat 01 Feb 2025 14:00:22 +0000
Files and hashes: 1: 6Ch2BA4EBBViUCewGb6Paaan7YI.roa (hash: WRYMr3XPQ7z0oDRXKp9hN0X+086fzEIRzfg0NuzfPNE=)
2: RF3xPSDztXGkumELgeYwPbbQmcA.crl (hash: TFOiqTHz1lqttLc20R/GeJK23GNS2i0RYBUIOZwhGdk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:a6:dc:a6:43:67:8c:66:81:8e:ad:71:f3:5c:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=445df13d20f3b571a4ba610b81e6303db6d099c0
Validity
Not Before: Jan 31 14:00:22 2025 GMT
Not After : Feb 1 14:00:22 2025 GMT
Subject: CN=cdece1498169c61a51fedb1ff61cc7a69602d2d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:fe:a2:71:e6:1a:02:4f:43:4a:1e:5f:88:94:
07:81:f3:87:64:b8:a4:e5:03:7a:7f:5c:4b:8c:79:
d2:e7:b9:95:35:59:d9:56:8e:8a:65:56:d5:dc:22:
aa:76:33:7b:d2:c8:05:3e:ce:a0:7b:3e:33:c5:5e:
38:ff:3e:c2:ee:c1:9a:83:97:fb:77:ba:4a:41:dd:
7c:e4:2b:69:67:49:f6:a9:b7:18:65:ec:46:79:59:
ce:1d:35:34:c6:c5:bf:48:4b:2b:5e:f0:40:d4:2e:
73:12:7f:b1:eb:e9:ca:73:63:7c:b7:74:0e:5c:be:
92:4b:bc:8a:ea:e6:96:39:4b:b1:21:50:02:69:54:
05:8d:49:d0:e6:81:cd:cb:99:f3:57:ed:8b:e0:90:
fb:6d:99:59:3f:f8:bc:8e:f4:14:33:dd:5b:f7:f4:
d3:fa:a0:c9:60:0b:c9:28:e3:1e:3c:e9:eb:8f:86:
f9:25:17:4a:67:52:09:70:cd:3a:63:b3:5f:60:5a:
64:83:09:db:08:a3:cf:89:2a:60:07:22:a5:9e:b4:
6d:40:04:79:aa:58:8b:dd:3d:f8:60:92:b6:b9:31:
8b:55:10:dc:e6:71:25:54:08:8e:29:59:45:3e:5e:
c6:a9:8c:6e:f6:a6:33:a8:6d:c0:d5:c0:ea:ff:d9:
87:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:EC:E1:49:81:69:C6:1A:51:FE:DB:1F:F6:1C:C7:A6:96:02:D2:D3
X509v3 Authority Key Identifier:
keyid:44:5D:F1:3D:20:F3:B5:71:A4:BA:61:0B:81:E6:30:3D:B6:D0:99:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RF3xPSDztXGkumELgeYwPbbQmcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/dc46ec-6428-4e5f-9a19-4f54ad755b20/1/RF3xPSDztXGkumELgeYwPbbQmcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/dc46ec-6428-4e5f-9a19-4f54ad755b20/1/RF3xPSDztXGkumELgeYwPbbQmcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:86:28:8d:e7:41:c0:0d:c0:c5:b6:ff:eb:c5:7e:2e:2d:cd:
95:e7:e8:b3:ef:45:d8:59:bd:19:72:41:12:c8:fc:9d:22:03:
b0:23:61:7c:e8:90:45:8a:6d:4e:aa:61:c8:f2:a6:89:60:45:
48:fb:71:74:d8:55:1c:b2:e3:04:45:06:1a:2f:f5:27:6b:e1:
53:2b:bb:d3:76:88:f9:8e:a5:4c:3f:55:13:b6:4b:b5:c8:be:
83:65:df:0a:1a:2b:d2:e6:d7:0e:61:80:98:16:72:92:07:3c:
83:2f:c1:86:1a:a7:ed:53:3d:df:a1:08:4f:35:d8:00:0c:d9:
6b:53:5f:80:a2:7c:9e:85:7b:f4:8b:23:a3:1c:b9:c5:e8:4d:
2b:06:49:24:cb:92:a6:6f:9b:cc:f0:1e:f6:25:59:d1:37:9f:
88:71:5c:34:35:b7:25:e4:88:59:93:3e:b1:df:10:9b:ac:db:
d0:b7:b4:80:1b:d9:e0:1a:ca:61:52:13:0e:d1:7f:39:72:a1:
5d:43:f2:02:94:98:c1:eb:43:24:81:24:b7:0b:a4:fe:35:8c:
42:6b:c3:84:13:69:50:9a:a0:fc:24:42:8a:8d:b5:84:9b:78:
d0:91:eb:22:b9:c6:71:8b:97:19:3d:2d:67:32:48:2b:27:5e:
cb:11:2f:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:22 2025 by rpki-client