Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/92d33c-8a69-4db3-b628-b62db772bbfa/1/B47RoBU3Yqki5V4PlIzRpUEceok.mft
File: B47RoBU3Yqki5V4PlIzRpUEceok.mft (raw, json)
Hash identifier: oT9NS/tWL05N+GeK0gmDxbbbMRts39Ap415SGGZgif0=
Subject key identifier: 80:2C:37:0B:5F:60:75:65:8A:07:C0:42:0C:A9:C3:8E:0C:4D:4D:86
Authority key identifier: 07:8E:D1:A0:15:37:62:A9:22:E5:5E:0F:94:8C:D1:A5:41:1C:7A:89
Certificate issuer: /CN=078ed1a0153762a922e55e0f948cd1a5411c7a89
Certificate serial: 0194BC3C3DE2B3C775CD9278F6F6BB9ED4A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B47RoBU3Yqki5V4PlIzRpUEceok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/92d33c-8a69-4db3-b628-b62db772bbfa/1/B47RoBU3Yqki5V4PlIzRpUEceok.mft
Manifest number: 0F9A
Signing time: Fri 31 Jan 2025 12:00:52 +0000
Manifest this update: Fri 31 Jan 2025 12:00:52 +0000
Manifest next update: Sat 01 Feb 2025 12:00:52 +0000
Files and hashes: 1: B47RoBU3Yqki5V4PlIzRpUEceok.crl (hash: 4jhRmCUUeWGZl06w4u0JNPBzMhxpU+qQYduJuzUSfOg=)
2: c4TFBL4EL5IADMniHZ0GVJJb_4Q.roa (hash: ZOFMhPaK+bFDPt6Ze8LlHlzvSqEu3m14aAhhA1S86RQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:3d:e2:b3:c7:75:cd:92:78:f6:f6:bb:9e:d4:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=078ed1a0153762a922e55e0f948cd1a5411c7a89
Validity
Not Before: Jan 31 12:00:52 2025 GMT
Not After : Feb 1 12:00:52 2025 GMT
Subject: CN=802c370b5f6075658a07c0420ca9c38e0c4d4d86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:78:7d:f1:c6:73:e6:58:ba:1b:03:6b:02:46:
b8:b6:1d:62:50:f6:19:41:30:82:cb:9a:c4:5d:7f:
82:1b:32:d7:73:83:db:b4:fa:8e:17:76:fb:34:cb:
0f:1c:37:10:b5:7a:5e:ef:8b:c6:23:e3:9e:6f:2f:
9e:ca:3f:9d:9e:7f:81:aa:97:10:7e:af:83:d0:21:
fc:69:7b:c8:30:0f:13:04:d9:3d:ae:16:98:60:77:
ba:a6:12:2b:43:9d:55:f4:c9:d3:47:9c:0f:a8:54:
94:96:ec:6b:d7:23:5a:54:86:62:03:81:49:a2:f9:
dd:e5:8e:ae:de:5d:d1:39:e3:aa:d0:24:4b:39:47:
2f:b1:46:23:8c:14:64:37:3a:18:aa:f7:f4:81:3f:
bd:2c:18:56:e0:d7:aa:b1:d5:62:68:30:2e:4d:85:
e7:ea:c7:c4:07:f0:bd:e2:b9:07:3b:80:39:6f:e0:
aa:c0:f8:e9:a7:b8:fa:2e:d1:31:af:18:8f:71:46:
62:e7:02:b8:97:bd:84:0e:f5:5e:0b:92:35:f0:9e:
f2:3e:3c:13:f7:c6:04:04:91:94:29:6a:2f:b9:5c:
c0:38:f0:80:07:c5:6e:f4:a5:0b:df:43:05:f4:66:
4e:72:c1:d1:c1:57:5d:a4:a0:27:d4:9a:65:b7:cd:
44:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:2C:37:0B:5F:60:75:65:8A:07:C0:42:0C:A9:C3:8E:0C:4D:4D:86
X509v3 Authority Key Identifier:
keyid:07:8E:D1:A0:15:37:62:A9:22:E5:5E:0F:94:8C:D1:A5:41:1C:7A:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B47RoBU3Yqki5V4PlIzRpUEceok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/92d33c-8a69-4db3-b628-b62db772bbfa/1/B47RoBU3Yqki5V4PlIzRpUEceok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/92d33c-8a69-4db3-b628-b62db772bbfa/1/B47RoBU3Yqki5V4PlIzRpUEceok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:16:59:46:36:b7:15:7b:ec:80:a0:55:7f:9c:59:54:32:06:
a0:aa:56:1f:fa:31:32:de:7a:a7:8f:43:f6:6a:36:19:2e:da:
0a:a5:69:b6:44:f5:2d:02:06:9c:e9:bd:40:4f:c8:a4:48:ae:
1e:e3:ae:5b:97:97:3a:40:2e:29:bf:95:69:e7:3d:d8:66:78:
81:da:ef:57:ab:59:fb:14:e1:91:5f:ea:23:80:b3:9f:62:7a:
8a:c2:68:b4:b9:4d:03:eb:77:59:f2:71:06:c7:60:07:0b:6d:
f3:2c:a7:c3:6c:a9:ac:7e:c4:0a:c4:05:52:48:9b:8c:10:53:
00:bd:91:23:1b:63:eb:04:90:18:d2:9f:f4:e7:7d:79:7d:84:
e6:7d:82:74:eb:e4:52:03:86:73:fb:3d:d6:79:71:9a:51:6c:
d1:ce:8e:c2:9d:03:01:48:52:f2:10:a4:ff:9b:bd:ae:fe:11:
b1:f9:f6:dc:3a:c2:ff:52:9a:b4:6b:a1:62:35:8b:12:7c:06:
92:3f:ff:d6:28:24:a8:0d:9d:a5:ed:97:5f:0b:57:79:ca:5f:
77:00:87:44:6c:a2:3f:47:89:37:48:e8:34:5c:f8:5f:00:38:
7d:bc:ba:50:4a:a6:37:42:47:7d:a9:b2:ba:b8:22:12:22:c0:
44:b1:89:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:16:02 2025 by rpki-client