Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.mft
File: RFbBTNhyT5qQlie5TgBs9p0SMHs.mft (raw, json)
Hash identifier: mtSVeu2PZwyL39t3iTmwOoupPYMHFcdaEhMje7XUBpE=
Subject key identifier: A2:50:76:34:0C:B7:CE:9C:19:F5:AE:DA:4D:21:39:F1:08:F1:C4:B1
Authority key identifier: 44:56:C1:4C:D8:72:4F:9A:90:96:27:B9:4E:00:6C:F6:9D:12:30:7B
Certificate issuer: /CN=4456c14cd8724f9a909627b94e006cf69d12307b
Certificate serial: 0194BCE068B2B45A8AF50ABA79A5AE9AAD2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFbBTNhyT5qQlie5TgBs9p0SMHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.mft
Manifest number: 0E20
Signing time: Fri 31 Jan 2025 15:00:10 +0000
Manifest this update: Fri 31 Jan 2025 15:00:10 +0000
Manifest next update: Sat 01 Feb 2025 15:00:10 +0000
Files and hashes: 1: 3vuXYmLO804YeH7WzpNylqDzYzk.roa (hash: pZmQFxF+w/pjKco0VNoAljDoLP/ZSq7cNuWVMp1z4Eo=)
2: RFbBTNhyT5qQlie5TgBs9p0SMHs.crl (hash: VKdiWPTYu7mKxamqcNLyIk7GEaBbZbYQDhYiy0tAOiM=)
3: isqoYZWDXQJSxmxPlMyUdRIC7Kg.roa (hash: j4dzbBC6h3xvieRsmWkUpQEa/X5Wih3z/xEPmg2Ssz4=)
4: mTvSgsKtYgRt8pu16sczwcA1b5Q.roa (hash: HA7KgQxth/bMhlTtQkd1v9hx7TIOnotP3RRusUYr7/4=)
5: oxFojUhDbgbvQWJLE662AtGMYd8.roa (hash: D4p1qN18Lpr9kDtEzYCALPnApaaR+jAbpSvJT1J28Nk=)
6: rSBf7m4QN8B8IdOa1QZkuz2yGzo.roa (hash: HK04u30OvyiqU+SoQ1bUDIZ6GpYsXVoMPcjWlJuPm+o=)
7: uQru5zKtD8gOJTWyBXF593XHCVI.roa (hash: iJr8hM6lp+0LTMhWm1pPp1coX4fANjiJn1tX3MwcxN8=)
8: uw1vWjTogEQRxLFm6OiF4tHPVEw.roa (hash: UQjtZx0kjaj8YIlzUivl2wZTPYSYnIOyJl8/eAgWRxE=)
9: zAkD8hfg9JPENKdqLNNuSfowjoQ.roa (hash: f81D3TQIuyjGRYpRZt6UAKBeR2661qGI7515liyxuOg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:68:b2:b4:5a:8a:f5:0a:ba:79:a5:ae:9a:ad:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4456c14cd8724f9a909627b94e006cf69d12307b
Validity
Not Before: Jan 31 15:00:10 2025 GMT
Not After : Feb 1 15:00:10 2025 GMT
Subject: CN=a25076340cb7ce9c19f5aeda4d2139f108f1c4b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e1:14:88:8a:f8:18:cc:4f:69:8c:0b:08:d2:
7d:59:8d:bf:c0:bd:40:9d:da:63:9f:92:32:11:b5:
e7:c3:41:d4:68:33:ac:73:30:c5:bf:38:f0:77:73:
8d:4c:4a:0e:ee:28:a2:ed:35:01:a1:51:59:58:10:
31:47:9c:e1:bf:de:43:bf:e6:93:66:69:c5:76:9d:
ef:34:38:c7:69:ce:55:e1:65:52:d6:46:b1:f2:a9:
0b:f7:de:17:e6:69:c1:7e:32:f9:7e:f5:1b:c2:02:
d9:7e:1c:8b:c5:28:d6:19:2a:af:e1:80:ed:c9:4b:
9c:3a:74:31:e5:1b:c7:d9:06:e0:32:cb:51:9b:e0:
a1:77:d5:73:f6:b3:ac:9d:df:7b:f2:c3:6a:a6:0a:
9e:a9:b2:04:a6:0d:f9:f2:d1:b1:dd:34:25:05:77:
18:02:9f:e1:a3:72:0a:c2:b9:6e:79:82:72:74:5d:
0d:3c:52:bf:81:22:62:af:f6:40:f8:40:08:a6:53:
42:47:9d:c8:9a:9f:55:ea:0b:fe:31:6d:f3:25:cc:
1a:cd:41:4d:ca:0f:b4:7a:60:a5:19:c6:79:30:c3:
ac:a1:d2:e5:57:66:ea:73:72:d4:b6:99:de:ac:e5:
ce:7a:68:d2:a0:e4:d4:b6:e1:4c:8b:a9:4b:64:4d:
5a:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:50:76:34:0C:B7:CE:9C:19:F5:AE:DA:4D:21:39:F1:08:F1:C4:B1
X509v3 Authority Key Identifier:
keyid:44:56:C1:4C:D8:72:4F:9A:90:96:27:B9:4E:00:6C:F6:9D:12:30:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFbBTNhyT5qQlie5TgBs9p0SMHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:df:41:17:35:78:f2:cf:9d:aa:47:ef:e0:52:57:35:e9:1b:
f1:3d:2b:05:a1:c2:2f:f1:01:ad:8e:7a:6e:a2:c8:f4:d4:79:
e7:a8:9b:d0:43:9e:fc:26:0e:e7:3f:25:fd:d5:2d:11:dd:c9:
03:83:c7:ae:0d:f7:9f:3c:cb:be:fa:74:be:29:fd:2a:90:3b:
70:15:41:3e:a3:69:50:e4:6c:de:63:fe:ca:c7:51:23:00:8d:
7e:32:0d:53:23:28:24:46:72:5e:7f:8d:33:03:7e:34:21:4c:
70:2b:05:d3:83:e6:73:26:f3:e5:1d:bd:13:97:4b:b1:bc:a5:
5e:23:8b:68:3d:87:2d:a9:6f:f5:89:e8:d6:01:7e:da:2f:82:
b8:5c:87:85:ce:04:3d:29:7d:ea:e7:de:3a:5b:e6:95:5d:5e:
34:65:30:55:c9:01:cd:ae:c2:4e:a4:f2:94:26:03:37:17:8e:
a3:46:b2:7c:bc:8b:ff:b6:a0:2c:40:4f:16:b6:60:2f:a6:eb:
3c:50:ff:3f:9a:b3:9c:06:77:b9:bc:83:52:24:da:ef:dc:20:
fc:36:b3:2e:e4:4d:07:7d:66:b2:44:ed:65:5b:33:36:a1:5c:
dc:17:78:72:72:8a:27:47:d2:b2:02:72:62:4f:59:e9:a3:c5:
82:30:32:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:40:07 2025 by rpki-client