Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/2f870e-2ba5-4b88-91a0-1d2348dbd036/1/46xjX9RfVHHGwsP-Re8btDOLwnk.mft
File: 46xjX9RfVHHGwsP-Re8btDOLwnk.mft (raw, json)
Hash identifier: qvy3Ictejwehi1LquEDsf8H9UdgzlGkB66W/itFWySE=
Subject key identifier: 98:53:25:15:D3:DC:22:C8:94:AA:43:B9:0D:BC:02:44:84:15:2E:31
Authority key identifier: E3:AC:63:5F:D4:5F:54:71:C6:C2:C3:FE:45:EF:1B:B4:33:8B:C2:79
Certificate issuer: /CN=e3ac635fd45f5471c6c2c3fe45ef1bb4338bc279
Certificate serial: 0194BC04C36EB5313BDA8ADDB69D7343845C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/46xjX9RfVHHGwsP-Re8btDOLwnk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/2f870e-2ba5-4b88-91a0-1d2348dbd036/1/46xjX9RfVHHGwsP-Re8btDOLwnk.mft
Manifest number: 13BD
Signing time: Fri 31 Jan 2025 11:00:16 +0000
Manifest this update: Fri 31 Jan 2025 11:00:16 +0000
Manifest next update: Sat 01 Feb 2025 11:00:16 +0000
Files and hashes: 1: 46xjX9RfVHHGwsP-Re8btDOLwnk.crl (hash: 7TJSkmpSW/WogDaCBNeF6/ilfe6jiogVyo1AROP69+M=)
2: kM9y4GrDXnCdNW0cB_r7lGW0ZiE.roa (hash: zTejL3tH1JMvgJP62ZpXEO3alzMxsTDuTLqKj9I1/dA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:c3:6e:b5:31:3b:da:8a:dd:b6:9d:73:43:84:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3ac635fd45f5471c6c2c3fe45ef1bb4338bc279
Validity
Not Before: Jan 31 11:00:16 2025 GMT
Not After : Feb 1 11:00:16 2025 GMT
Subject: CN=98532515d3dc22c894aa43b90dbc024484152e31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d2:24:b0:58:15:3e:f8:3d:55:18:c5:7e:74:
b4:7e:59:67:02:9c:cd:44:94:65:93:8c:49:fe:3b:
0f:44:de:77:80:3a:7a:ac:38:ca:01:18:df:cd:c1:
07:59:6c:82:71:9c:8f:cb:d5:84:64:b5:80:ed:07:
a5:49:2b:fd:a4:09:f1:ae:01:cf:6a:5d:aa:54:18:
bd:8c:10:ae:2a:1e:34:32:d7:99:e2:ca:5d:df:f0:
bc:13:bd:c3:d2:9f:16:4a:be:57:e4:83:90:23:e1:
4b:d0:d7:2a:83:fa:36:bc:74:41:7c:ad:83:1a:55:
9c:47:2d:14:0a:9c:6d:35:ae:74:9a:62:2f:cc:53:
fe:63:55:b3:ce:46:a5:24:ee:36:e8:06:9b:73:6e:
6a:1d:88:b1:0b:4a:e1:a2:a4:78:b7:9e:2a:e5:5b:
0e:e7:1e:6e:32:6d:8e:3e:65:ca:53:4d:51:ac:39:
3f:b4:0c:65:a5:ed:be:e9:6f:9a:ab:81:26:7a:47:
a1:8c:b4:79:16:f4:9d:66:90:d4:8a:95:c5:bc:db:
67:2b:cf:03:8a:77:fc:0d:0c:e0:57:1e:76:17:57:
9d:4e:bd:5f:50:46:ca:44:89:c9:7d:01:f9:29:67:
cc:d7:cc:26:1f:99:bf:3d:08:a0:18:45:3d:e6:64:
1b:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:53:25:15:D3:DC:22:C8:94:AA:43:B9:0D:BC:02:44:84:15:2E:31
X509v3 Authority Key Identifier:
keyid:E3:AC:63:5F:D4:5F:54:71:C6:C2:C3:FE:45:EF:1B:B4:33:8B:C2:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/46xjX9RfVHHGwsP-Re8btDOLwnk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2f870e-2ba5-4b88-91a0-1d2348dbd036/1/46xjX9RfVHHGwsP-Re8btDOLwnk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2f870e-2ba5-4b88-91a0-1d2348dbd036/1/46xjX9RfVHHGwsP-Re8btDOLwnk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:fa:a5:06:62:af:82:67:c2:b9:ba:51:8c:5f:f6:50:d5:aa:
aa:26:43:f6:c1:3c:da:1c:da:28:a6:bb:bf:a1:c1:01:0b:ce:
90:e4:16:3b:37:d1:e0:55:d3:6b:b0:4b:f0:a0:c6:d4:73:23:
59:66:f2:70:88:56:58:4f:f2:61:9e:ff:e5:61:fb:c5:4c:1d:
fb:8f:c9:d3:47:b1:34:81:c1:4d:3a:a9:5d:b1:a4:b6:81:2c:
e0:6a:c9:f8:74:cf:bf:4d:26:13:1b:b2:1c:4d:c0:80:58:d4:
ea:8a:2b:9e:6c:46:63:84:15:0a:3e:80:b7:7b:06:00:82:95:
f4:ce:17:fa:cc:f8:7c:7b:a9:c8:70:bf:50:51:44:84:58:6b:
85:f5:29:63:eb:7c:60:1d:16:fe:42:66:64:d3:9b:53:c6:e7:
35:12:c0:6d:f7:ec:e8:65:61:25:8c:ba:b1:1b:32:ca:ad:f1:
01:97:7e:21:71:33:4b:29:ba:43:85:78:86:42:06:fd:a2:53:
d5:e2:7b:e7:26:75:94:1a:07:c5:08:9d:d9:b3:52:b5:57:ef:
a9:a2:22:e5:d4:55:ec:a0:8d:3a:0b:f9:91:3a:e2:23:01:4d:
cd:9c:85:f4:1f:fa:06:dd:e8:4f:72:47:2f:e8:b8:9d:c8:7c:
e0:05:e1:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:56:58 2025 by rpki-client