Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/c57b75-10a7-4723-94ea-e857477a7008/1/RnNQ1ZdaJyqIv7iBCvRZgc1Vk1o.mft
File: RnNQ1ZdaJyqIv7iBCvRZgc1Vk1o.mft (raw, json)
Hash identifier: STKOdTNm+KpZnb/i500tN0NU6WSwMR9yKx+guWCMCUQ=
Subject key identifier: 7F:A8:8A:BE:95:96:FC:C5:03:31:F5:E3:C3:23:05:A0:CD:E5:51:4C
Authority key identifier: 46:73:50:D5:97:5A:27:2A:88:BF:B8:81:0A:F4:59:81:CD:55:93:5A
Certificate issuer: /CN=467350d5975a272a88bfb8810af45981cd55935a
Certificate serial: 0194BC73124D7E8EA9F92B051A841C528CC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RnNQ1ZdaJyqIv7iBCvRZgc1Vk1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/c57b75-10a7-4723-94ea-e857477a7008/1/RnNQ1ZdaJyqIv7iBCvRZgc1Vk1o.mft
Manifest number: 0D25
Signing time: Fri 31 Jan 2025 13:00:45 +0000
Manifest this update: Fri 31 Jan 2025 13:00:45 +0000
Manifest next update: Sat 01 Feb 2025 13:00:45 +0000
Files and hashes: 1: RnNQ1ZdaJyqIv7iBCvRZgc1Vk1o.crl (hash: p8R3C7ZnONmPQCM5DshBxpxDWhd9VOk5CWlaYoKTOU0=)
2: cM594o8l7Xh7Dw0EOXhcxgvWLYI.roa (hash: 1Ym4804A2QtxpGJhVDPpEbLS0giUeOdd5FG8xMIV330=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:12:4d:7e:8e:a9:f9:2b:05:1a:84:1c:52:8c:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=467350d5975a272a88bfb8810af45981cd55935a
Validity
Not Before: Jan 31 13:00:45 2025 GMT
Not After : Feb 1 13:00:45 2025 GMT
Subject: CN=7fa88abe9596fcc50331f5e3c32305a0cde5514c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:dd:a3:e5:a3:a9:3f:e1:0e:46:7b:d3:75:33:
7f:94:90:43:cc:1f:06:11:72:a9:45:f0:c4:11:3d:
ce:d7:12:a4:81:b9:cf:b8:f0:4d:3b:16:4b:3b:15:
7a:f6:9b:d1:bf:e9:db:5d:08:5c:bc:90:32:97:38:
88:72:66:05:cf:63:a8:8d:74:ae:4e:37:ff:4c:69:
bd:19:54:34:7b:52:ba:e8:2a:56:d3:dc:e3:08:a6:
9e:7b:9d:73:1b:3e:c9:e6:5a:63:9a:c8:66:d8:72:
4c:6f:e0:65:2c:b0:b4:83:38:d0:b0:58:07:db:2d:
cf:40:51:7e:c5:91:f4:e8:67:a2:fa:6d:55:1d:80:
a1:39:b7:dc:87:19:a9:d6:f5:3a:4d:e5:c2:e3:32:
1b:a0:43:ea:49:d4:f1:8d:43:6a:33:3d:8e:a4:00:
66:f8:1d:08:66:47:8f:d8:2d:8f:bf:f9:e2:4d:30:
09:1f:dd:a1:d5:30:a0:a3:97:c8:48:dd:d8:1e:4e:
de:da:44:23:f8:5b:66:b3:78:e5:93:ea:9c:6a:5a:
95:8b:bf:6b:49:d2:6d:a1:d2:60:33:98:91:af:ca:
42:85:bd:b7:00:8e:b0:8f:8c:9c:a5:a9:db:b3:4b:
61:22:0c:7c:e4:4f:92:75:30:50:d1:ca:64:8e:8f:
33:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:A8:8A:BE:95:96:FC:C5:03:31:F5:E3:C3:23:05:A0:CD:E5:51:4C
X509v3 Authority Key Identifier:
keyid:46:73:50:D5:97:5A:27:2A:88:BF:B8:81:0A:F4:59:81:CD:55:93:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RnNQ1ZdaJyqIv7iBCvRZgc1Vk1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/c57b75-10a7-4723-94ea-e857477a7008/1/RnNQ1ZdaJyqIv7iBCvRZgc1Vk1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/c57b75-10a7-4723-94ea-e857477a7008/1/RnNQ1ZdaJyqIv7iBCvRZgc1Vk1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:3e:2d:99:1e:8d:6b:5d:5d:55:39:1e:ef:51:cf:5d:af:96:
ba:69:b9:71:04:b1:a8:fe:46:4b:07:75:6b:97:82:c3:4a:73:
e5:35:90:3b:ae:21:58:d3:c6:b0:02:ba:44:f9:b0:37:01:56:
6d:8c:8d:d0:a2:10:e6:11:33:15:2b:6e:bc:7c:b7:7c:03:d8:
32:f8:3b:b2:ad:cd:83:04:8a:d7:a9:10:d3:8b:a1:08:dd:05:
f7:f1:e9:dd:32:3b:7a:10:f8:ec:b3:84:11:54:56:88:9a:ae:
cb:98:c8:15:71:d3:42:1c:05:d4:e9:ed:ac:4a:35:52:d6:e3:
c6:72:6f:d2:42:bb:b6:76:ab:a7:fa:25:7e:10:19:1f:63:0d:
9b:d0:77:4d:23:b3:ca:30:70:0b:46:31:aa:a5:c5:e6:8a:1a:
ca:56:86:19:67:d3:1a:30:4b:d3:7d:2a:db:72:f7:c7:aa:a1:
54:20:42:12:a3:45:0e:af:81:80:50:05:4a:53:5f:66:fe:ab:
7c:82:0d:8d:e5:b9:69:56:d8:e9:c8:33:c3:69:c3:62:be:c4:
18:39:71:37:a0:14:33:ca:4d:ae:2c:b9:99:d0:6a:7b:3d:82:
84:97:73:48:a0:15:0f:fb:9a:d7:18:8e:a9:bc:62:29:dc:8a:
23:9d:22:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:15 2025 by rpki-client