Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/cd703a-06f9-4106-8c8d-b7289b370b6d/1/RGFYx1seMgOyK1g8wYTD9UiLJdY.mft
File: RGFYx1seMgOyK1g8wYTD9UiLJdY.mft (raw, json)
Hash identifier: BwvSv3EBFdQY60orTOYIpYuxE3DnD+qJUysAidWDnRk=
Subject key identifier: 96:3F:74:2A:8C:99:A6:42:E2:99:AF:F4:C6:CE:FF:09:A0:9A:B6:A0
Authority key identifier: 44:61:58:C7:5B:1E:32:03:B2:2B:58:3C:C1:84:C3:F5:48:8B:25:D6
Certificate issuer: /CN=446158c75b1e3203b22b583cc184c3f5488b25d6
Certificate serial: 0194BCA988CEF4C0E1771DE82C5021BB63AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RGFYx1seMgOyK1g8wYTD9UiLJdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/cd703a-06f9-4106-8c8d-b7289b370b6d/1/RGFYx1seMgOyK1g8wYTD9UiLJdY.mft
Manifest number: 11F7
Signing time: Fri 31 Jan 2025 14:00:14 +0000
Manifest this update: Fri 31 Jan 2025 14:00:14 +0000
Manifest next update: Sat 01 Feb 2025 14:00:14 +0000
Files and hashes: 1: RGFYx1seMgOyK1g8wYTD9UiLJdY.crl (hash: 8+Omy8o1ZBl4oFhXw+tYFsLYTShRiIVXkUBbDgErS50=)
2: VIvZu8tQokm1xiej3HARVMmJcks.roa (hash: ZzmGdbDE4kWOnJhlJzMP8vBrXKF4L54dsaKlIHnEfEA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:88:ce:f4:c0:e1:77:1d:e8:2c:50:21:bb:63:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=446158c75b1e3203b22b583cc184c3f5488b25d6
Validity
Not Before: Jan 31 14:00:14 2025 GMT
Not After : Feb 1 14:00:14 2025 GMT
Subject: CN=963f742a8c99a642e299aff4c6ceff09a09ab6a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:24:42:a9:04:f5:8a:e6:8f:7b:3c:23:e3:a0:
dd:ea:5d:a4:7f:2c:58:af:ed:61:36:4b:3c:24:0c:
ef:f6:ef:27:7d:0b:0c:37:18:3a:b6:8d:85:05:bb:
18:2f:f6:f4:30:39:77:e3:1b:d1:d4:9a:e7:20:a4:
06:72:64:22:c3:f9:ee:11:8b:6a:60:09:a6:39:87:
ee:a8:7d:5c:c6:7e:65:24:60:9a:cd:94:03:65:33:
86:73:10:41:1f:41:9e:04:a2:8e:5d:28:cc:c7:03:
a0:fb:7d:81:9b:79:ba:d9:7e:6c:98:48:9f:1b:2e:
c1:38:a3:46:2f:66:33:42:88:12:a7:8d:49:44:da:
20:a8:f5:f1:36:9e:82:5c:d7:bc:bd:b6:3a:a4:60:
d9:f0:06:d7:b7:53:7d:e0:7e:1b:f7:ef:75:6a:2f:
29:a1:f0:2f:18:ed:37:9d:3e:73:e1:b8:1d:b5:84:
75:0a:11:68:36:7c:e2:8c:55:4a:01:1b:0b:8a:63:
22:92:47:5f:f5:3e:cf:af:ca:ed:a2:92:b8:e7:70:
3e:6f:44:57:3a:1e:92:15:21:de:62:5e:7f:0a:81:
53:1d:49:e0:76:ad:1a:74:17:90:27:a0:6e:57:87:
7b:41:70:14:bc:22:6d:9f:2b:e5:8e:44:39:38:2e:
e9:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:3F:74:2A:8C:99:A6:42:E2:99:AF:F4:C6:CE:FF:09:A0:9A:B6:A0
X509v3 Authority Key Identifier:
keyid:44:61:58:C7:5B:1E:32:03:B2:2B:58:3C:C1:84:C3:F5:48:8B:25:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RGFYx1seMgOyK1g8wYTD9UiLJdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/cd703a-06f9-4106-8c8d-b7289b370b6d/1/RGFYx1seMgOyK1g8wYTD9UiLJdY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/cd703a-06f9-4106-8c8d-b7289b370b6d/1/RGFYx1seMgOyK1g8wYTD9UiLJdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:0c:9a:da:61:01:bf:8a:71:d9:e6:7d:cc:78:11:05:e8:ce:
73:86:ef:69:83:6c:d6:72:a4:bc:57:10:47:cb:44:80:97:c2:
61:dd:2f:3d:c7:a2:ff:74:ef:eb:4b:44:a4:bd:7e:c6:1b:a4:
44:06:f3:13:86:3b:4a:c5:5c:e6:da:5d:ae:e2:9e:f8:ed:2a:
2c:b1:a1:84:fe:31:79:5c:3e:d5:d2:d3:12:f7:24:be:04:81:
1f:41:8c:e6:f6:31:cf:0e:53:62:aa:b3:fb:bf:21:56:95:f3:
d3:58:09:df:cb:42:ac:c0:99:e0:c8:88:13:af:e2:e1:77:29:
a3:10:99:a4:1a:e8:19:b7:a6:d4:bf:a0:b8:63:fb:85:f3:23:
69:f5:10:41:02:3a:89:7b:b7:1b:33:7f:f1:65:19:81:fe:54:
1e:a1:ab:0a:04:c5:8f:53:4b:8d:87:26:05:21:a1:d3:2d:c8:
de:42:0d:2e:07:9a:31:3c:7f:02:48:d2:60:b6:50:33:89:66:
0b:e9:a2:a3:f8:e5:1d:18:1b:61:0b:57:28:e1:65:37:d8:58:
99:91:f8:83:63:66:a6:af:52:9c:76:5c:93:87:9f:64:f3:8a:
f3:77:64:2e:ae:59:4f:43:58:a0:97:ef:1d:35:fa:de:ec:8c:
b5:a8:86:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:38:47 2025 by rpki-client