Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/7d7744-f367-42cc-a926-f086e6f96cbb/1/RSfyHUBiHlgT5KBpIRlH4k0A55c.mft
File: RSfyHUBiHlgT5KBpIRlH4k0A55c.mft (raw, json)
Hash identifier: UlRWvRNzJGdkiHCrMObqGKqkzedT2mQujILk5jkVWA8=
Subject key identifier: 76:2F:8D:1F:28:A3:47:0F:34:75:0A:F6:39:5A:FC:B1:9D:43:C7:DA
Authority key identifier: 45:27:F2:1D:40:62:1E:58:13:E4:A0:69:21:19:47:E2:4D:00:E7:97
Certificate issuer: /CN=4527f21d40621e5813e4a069211947e24d00e797
Certificate serial: 0194BBCEB6179E00E28592250AAAFA295984
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RSfyHUBiHlgT5KBpIRlH4k0A55c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/7d7744-f367-42cc-a926-f086e6f96cbb/1/RSfyHUBiHlgT5KBpIRlH4k0A55c.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 10:01:13 +0000
Manifest this update: Fri 31 Jan 2025 10:01:13 +0000
Manifest next update: Sat 01 Feb 2025 10:01:13 +0000
Files and hashes: 1: RSfyHUBiHlgT5KBpIRlH4k0A55c.crl (hash: JssGDOVu/VA1AwSlRHtuwp8BKvKG4kEBw5dkdp0EKlE=)
2: vI1HVKVzSovdfnitP5UZ3coZhWk.roa (hash: cmV3rToD1U+gURWFgpIifqRZJUwIYZppdxx/PgY7lUU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:b6:17:9e:00:e2:85:92:25:0a:aa:fa:29:59:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4527f21d40621e5813e4a069211947e24d00e797
Validity
Not Before: Jan 31 10:01:13 2025 GMT
Not After : Feb 1 10:01:13 2025 GMT
Subject: CN=762f8d1f28a3470f34750af6395afcb19d43c7da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e7:2c:d2:a6:65:56:8f:3d:72:7f:6f:f7:82:
a8:27:dc:df:70:02:bd:95:2e:c2:97:c5:d1:fc:18:
88:b1:c2:41:54:b4:d8:73:bd:19:ba:65:c2:c7:1a:
98:6d:d0:6f:2b:4a:a0:02:e1:46:5a:af:5b:9d:ca:
8a:85:8b:2b:8d:cb:e4:b7:0b:5a:fd:a8:e6:15:a9:
89:54:18:88:da:80:56:8b:d6:f3:d6:d5:5d:a8:bf:
73:38:5c:9a:01:e7:b5:35:45:45:e8:c2:f1:f7:9b:
44:2a:d0:a6:88:c9:4c:2c:77:52:78:5d:51:0f:88:
67:cc:15:b4:95:c9:60:ca:9f:e0:af:86:b2:45:47:
12:fa:9a:6c:64:3b:ac:f3:94:67:7f:e5:68:4c:24:
1f:e4:d5:6c:cd:e0:e8:6c:8b:00:4f:29:8a:6f:eb:
a4:ef:ca:30:aa:7a:1e:d8:dc:7e:b7:47:72:87:89:
12:14:af:b3:e8:bd:fb:62:8f:70:29:23:88:d0:ce:
84:39:58:10:40:96:bc:54:16:13:24:67:34:8b:54:
e6:4b:4d:ca:95:c3:0c:8d:6c:b0:64:17:a2:49:18:
21:dd:23:1b:b6:35:b8:b6:8e:bd:a1:bd:dc:fe:bf:
da:12:e1:cd:26:0a:aa:c7:5f:ad:22:10:d5:e7:38:
d1:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:2F:8D:1F:28:A3:47:0F:34:75:0A:F6:39:5A:FC:B1:9D:43:C7:DA
X509v3 Authority Key Identifier:
keyid:45:27:F2:1D:40:62:1E:58:13:E4:A0:69:21:19:47:E2:4D:00:E7:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RSfyHUBiHlgT5KBpIRlH4k0A55c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/7d7744-f367-42cc-a926-f086e6f96cbb/1/RSfyHUBiHlgT5KBpIRlH4k0A55c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/7d7744-f367-42cc-a926-f086e6f96cbb/1/RSfyHUBiHlgT5KBpIRlH4k0A55c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:53:a3:60:18:2b:a8:9c:73:4e:0e:4c:a8:3c:23:de:8d:38:
fb:a0:51:48:95:28:c5:4b:09:0d:40:f3:d2:7b:ae:b9:22:49:
17:0b:fa:c1:02:3e:1e:0c:36:83:7d:95:73:b7:9b:fe:32:f3:
6d:53:e3:7e:e8:f6:1d:2c:87:62:90:88:8f:c7:b6:43:68:c5:
59:e9:33:0e:b3:cc:7a:11:94:93:32:95:8f:b8:36:e2:b2:33:
7d:d6:d1:18:c9:54:53:8a:5d:71:d5:7b:a5:e5:e3:59:99:a9:
d4:78:7a:3e:31:e6:8e:a6:68:c5:25:12:e1:4f:5f:3b:cf:23:
25:31:86:75:a1:0e:e9:f8:52:07:1e:da:41:bf:17:02:0b:e6:
c5:95:4b:dd:0f:03:8f:42:4f:c6:92:64:28:46:d1:06:a5:a3:
fa:c5:9e:a6:80:bd:d2:80:8a:51:ae:98:68:d2:8f:ee:84:e5:
4b:0e:4a:c2:49:15:d8:87:88:c3:3f:8f:01:1b:25:71:c3:04:
25:75:de:c2:45:f3:16:0a:52:38:2f:aa:d1:77:4c:94:73:9c:
4a:25:65:ff:6f:6f:e7:e4:3c:c1:de:c7:4a:f9:20:5e:2c:8a:
35:a4:34:1c:bb:59:92:9e:80:35:9f:2e:29:27:b8:34:6d:f1:
b7:bf:ab:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 13:54:47 2025 by rpki-client