Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/393e16-898e-45d8-9d72-d8bd250b64f9/1/R39LbsQ0cVfE0T7w56vhKQoL9Xw.mft
File: R39LbsQ0cVfE0T7w56vhKQoL9Xw.mft (raw, json)
Hash identifier: EqPnQMPirUsH6XRKuuSGUDSW3h4vMgzTP5ocKFq7Hwc=
Subject key identifier: 53:76:F0:04:63:B4:25:1F:10:87:57:CA:2A:34:64:06:16:26:BB:07
Authority key identifier: 47:7F:4B:6E:C4:34:71:57:C4:D1:3E:F0:E7:AB:E1:29:0A:0B:F5:7C
Certificate issuer: /CN=477f4b6ec4347157c4d13ef0e7abe1290a0bf57c
Certificate serial: 0194BD17900D32975AB7C07AF5D08AA9AC3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R39LbsQ0cVfE0T7w56vhKQoL9Xw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/393e16-898e-45d8-9d72-d8bd250b64f9/1/R39LbsQ0cVfE0T7w56vhKQoL9Xw.mft
Manifest number: 0432
Signing time: Fri 31 Jan 2025 16:00:25 +0000
Manifest this update: Fri 31 Jan 2025 16:00:25 +0000
Manifest next update: Sat 01 Feb 2025 16:00:25 +0000
Files and hashes: 1: 0XKLHVF6OopWfkCp5SGDRjUGSwc.roa (hash: LlbXk7YPxKtyITregmmE7lsrGbU25UL9jnRqhgrsqYQ=)
2: BXJ7UivZREqfV3oE_cto5-RbCwU.roa (hash: H5O0TywJPldSIFgMKfugAhkIQ7kPwBy5/c6iSkGttag=)
3: R39LbsQ0cVfE0T7w56vhKQoL9Xw.crl (hash: HribVBaQHrf2wbTBds4MeoLLG/uC10905hS7eFVykp4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:90:0d:32:97:5a:b7:c0:7a:f5:d0:8a:a9:ac:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=477f4b6ec4347157c4d13ef0e7abe1290a0bf57c
Validity
Not Before: Jan 31 16:00:25 2025 GMT
Not After : Feb 1 16:00:25 2025 GMT
Subject: CN=5376f00463b4251f108757ca2a3464061626bb07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fe:e5:88:b4:14:a5:d5:77:b3:1e:7b:cf:69:0c:
4b:82:13:18:1a:b2:e8:99:82:6b:81:d9:5d:8d:a4:
e3:3c:7d:da:30:15:0b:71:d7:50:6a:a8:e5:3f:80:
a1:66:0e:7e:d8:ef:03:ca:d2:f9:fa:42:17:a3:fa:
43:76:1b:3c:53:68:2b:85:ae:ae:18:92:ca:30:91:
22:c8:76:d4:17:ae:67:93:f4:ed:c6:fc:5c:4b:d4:
f0:06:36:10:09:c6:1c:b4:06:8d:29:51:41:e3:0d:
bc:ea:11:6e:44:d7:94:10:24:ab:11:da:24:26:af:
ef:1b:98:76:8c:43:72:8b:f4:4d:94:71:63:3d:07:
22:c3:3e:9b:4d:fb:bb:bb:62:9e:36:b2:88:2a:24:
7a:c1:b9:15:ae:45:c5:5b:73:9a:62:66:9d:53:50:
80:be:5e:03:3b:a0:df:25:8d:55:22:82:7d:43:68:
55:cc:03:77:11:2a:c2:dc:b5:27:34:10:6d:ca:c7:
ea:f3:ff:26:ed:14:f2:12:de:3a:0d:45:f0:41:7a:
1c:24:b0:ff:5f:01:29:8c:7d:d9:d6:09:f7:de:0d:
fb:19:b5:9d:72:c7:93:07:34:b6:ec:7f:7f:f1:b1:
5a:47:45:20:75:f3:02:6e:46:66:36:dd:23:f9:a8:
a3:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:76:F0:04:63:B4:25:1F:10:87:57:CA:2A:34:64:06:16:26:BB:07
X509v3 Authority Key Identifier:
keyid:47:7F:4B:6E:C4:34:71:57:C4:D1:3E:F0:E7:AB:E1:29:0A:0B:F5:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R39LbsQ0cVfE0T7w56vhKQoL9Xw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/393e16-898e-45d8-9d72-d8bd250b64f9/1/R39LbsQ0cVfE0T7w56vhKQoL9Xw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/393e16-898e-45d8-9d72-d8bd250b64f9/1/R39LbsQ0cVfE0T7w56vhKQoL9Xw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:d4:fb:97:2f:a7:d1:9a:a1:7a:35:fe:fa:82:0f:d2:36:05:
f0:46:49:c0:87:77:fb:bf:cf:71:cc:e3:76:cc:a0:fd:53:09:
8e:7f:a8:12:1f:11:5a:34:57:fc:4d:e8:b6:78:ee:1a:fb:6e:
b1:ab:0b:4b:01:38:41:e3:42:0b:71:76:e3:54:38:2c:0c:7f:
aa:df:d4:8b:8b:c7:a2:33:82:d2:54:a6:1d:76:e9:7b:67:26:
6d:dc:a1:d3:f6:7a:13:20:b1:bc:a0:c1:dd:de:25:5c:ef:de:
25:86:ea:0c:79:d2:17:0f:7b:48:01:b9:94:b6:db:ee:95:0f:
f0:6d:ce:e8:29:6d:0d:d7:84:be:ce:96:09:1d:f8:85:fe:b3:
e5:3f:7e:75:73:57:e3:19:ed:2f:f9:cd:28:8c:72:df:a5:b1:
79:73:b7:86:20:2c:e0:52:18:5d:56:b8:8a:21:a7:29:65:0c:
da:52:17:06:4b:a1:ed:ba:f1:28:d7:95:a8:81:03:f8:64:6f:
2f:c8:fc:46:dd:33:ef:6e:64:fb:98:0e:a4:03:8e:23:4e:4e:
26:4f:0b:7b:be:00:d5:57:63:1d:fe:a3:5e:94:45:79:5d:70:
93:8c:37:e3:d7:14:7f:a3:08:4d:e6:6c:bb:b6:4e:05:66:b6:
c8:05:f2:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:52 2025 by rpki-client