Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/107db4-9fd7-4fcd-8d19-25413c260e45/1/R600-MIKUHPoYIIcjAm_dXmibQs.mft
File: R600-MIKUHPoYIIcjAm_dXmibQs.mft (raw, json)
Hash identifier: JDnSJRk8UVXSv9fceYlxo5Y8A+wq/tVchHIprYzO40c=
Subject key identifier: E9:A3:25:3A:6F:43:7A:BD:E9:86:75:4C:5F:F3:BC:93:06:42:DC:AF
Authority key identifier: 47:AD:34:F8:C2:0A:50:73:E8:60:82:1C:8C:09:BF:75:79:A2:6D:0B
Certificate issuer: /CN=47ad34f8c20a5073e860821c8c09bf7579a26d0b
Certificate serial: 0194BD4EAB7CC72BB65AF6637FB971239A81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R600-MIKUHPoYIIcjAm_dXmibQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/107db4-9fd7-4fcd-8d19-25413c260e45/1/R600-MIKUHPoYIIcjAm_dXmibQs.mft
Manifest number: 1397
Signing time: Fri 31 Jan 2025 17:00:36 +0000
Manifest this update: Fri 31 Jan 2025 17:00:36 +0000
Manifest next update: Sat 01 Feb 2025 17:00:36 +0000
Files and hashes: 1: R600-MIKUHPoYIIcjAm_dXmibQs.crl (hash: +kqPnSt3r062/F8WwVnr6t28kWtSJ9Yjwv8R+Trci7I=)
2: jbn0uNt62cbm-5uAutTNS6KIeT0.roa (hash: JjRHfVTqZW3BM/UoOGJBXI5IB1+oYeNHfz6C/Sa7drI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:ab:7c:c7:2b:b6:5a:f6:63:7f:b9:71:23:9a:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47ad34f8c20a5073e860821c8c09bf7579a26d0b
Validity
Not Before: Jan 31 17:00:36 2025 GMT
Not After : Feb 1 17:00:36 2025 GMT
Subject: CN=e9a3253a6f437abde986754c5ff3bc930642dcaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:98:ca:bf:05:78:52:6a:99:30:f7:1e:d1:18:
69:02:bb:c6:77:da:4e:36:9b:f7:f8:87:da:f8:c5:
3f:16:96:ec:aa:c4:bd:1f:91:54:7e:29:f4:5a:12:
f9:7e:e2:9e:01:b7:99:fb:92:57:3a:95:8b:36:c2:
62:6f:3b:d6:c0:f4:11:3d:a3:36:1b:6c:b8:0e:5a:
d4:78:0f:97:a6:10:d1:54:db:39:a5:f2:ea:d6:c7:
02:dd:08:2d:ae:26:f4:17:c7:4f:c5:ff:f3:9a:0a:
c5:57:fd:a2:49:0a:da:83:a6:52:d9:3f:71:62:8e:
63:f8:b4:78:38:55:95:30:b1:f1:c7:f8:50:8b:bf:
df:33:a7:2d:07:69:02:1c:ba:cf:e7:a1:51:58:bd:
c7:c3:59:14:0d:bb:cb:7d:d5:f7:ee:9d:96:80:01:
24:78:26:53:39:90:3b:40:3a:29:e3:1a:11:00:6b:
bc:38:90:f8:5e:45:83:e2:d5:37:1e:c6:77:f8:87:
b3:ab:97:af:53:ad:44:e2:e6:9f:0c:57:02:41:ae:
5f:0e:6d:0d:e1:00:3b:4c:3e:c0:11:7d:8e:18:13:
10:b5:ea:29:e6:36:44:89:49:80:89:2d:2e:d9:84:
2d:ef:09:15:49:28:0b:9a:b2:45:83:78:b3:a0:9f:
b8:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:A3:25:3A:6F:43:7A:BD:E9:86:75:4C:5F:F3:BC:93:06:42:DC:AF
X509v3 Authority Key Identifier:
keyid:47:AD:34:F8:C2:0A:50:73:E8:60:82:1C:8C:09:BF:75:79:A2:6D:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R600-MIKUHPoYIIcjAm_dXmibQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/107db4-9fd7-4fcd-8d19-25413c260e45/1/R600-MIKUHPoYIIcjAm_dXmibQs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/107db4-9fd7-4fcd-8d19-25413c260e45/1/R600-MIKUHPoYIIcjAm_dXmibQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:35:b3:08:98:e9:02:e1:d4:fa:fa:ad:37:32:b6:49:39:d9:
c3:49:8d:db:90:6c:86:2f:de:56:b0:ec:4a:f6:40:b0:7a:92:
d6:74:30:e8:f7:b2:19:0d:a3:b3:cb:83:bf:6c:c3:f8:bc:94:
2d:49:d9:22:e3:5e:4d:f1:a3:62:67:6d:26:83:80:cc:86:b4:
c6:ae:ed:3b:87:94:18:b3:65:e0:0f:4c:4c:c5:8a:54:8c:d2:
07:6d:2d:55:82:1f:21:14:46:15:17:84:89:19:a4:91:c5:14:
f7:20:66:7b:ab:e7:73:47:30:cb:8b:fb:9f:14:88:a7:24:92:
bb:54:60:5b:05:27:d4:38:e1:17:5a:71:97:d5:c6:ff:84:a0:
bf:0c:08:c6:f3:ee:00:f9:54:46:8f:23:f5:aa:4d:0a:10:6b:
fc:0d:a0:ba:66:09:c2:9c:29:b9:41:e0:de:c8:f4:8c:23:a9:
8a:0d:27:c5:25:8c:a1:1c:90:a7:3e:36:bd:bd:dc:b8:29:62:
12:5c:7b:28:24:c1:b9:f6:2a:ec:fc:99:8a:a3:25:4b:33:00:
b4:0c:8c:12:63:dc:5a:6d:e3:9e:92:61:a1:16:c3:a6:ea:0f:
9c:6c:ed:79:99:b6:83:32:b3:31:cb:17:76:9b:77:b0:d0:26:
3c:28:d1:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:38:11 2025 by rpki-client