Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/45852f-8fae-441d-b10c-0a1bf5bf0ca2/1/RkUo2QgMZl2wVR2K2LD3H3u3aZY.mft
File: RkUo2QgMZl2wVR2K2LD3H3u3aZY.mft (raw, json)
Hash identifier: KQhrXk86EsTUCcvQnjinyer9+ixmKzWqwj6bT9nqjqo=
Subject key identifier: 77:37:C2:F0:A8:A2:71:F2:03:66:08:D0:5F:7E:B3:94:36:88:D7:A3
Authority key identifier: 46:45:28:D9:08:0C:66:5D:B0:55:1D:8A:D8:B0:F7:1F:7B:B7:69:96
Certificate issuer: /CN=464528d9080c665db0551d8ad8b0f71f7bb76996
Certificate serial: 0194BCA9A9B4FAD07087037D7C445E68B615
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RkUo2QgMZl2wVR2K2LD3H3u3aZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/45852f-8fae-441d-b10c-0a1bf5bf0ca2/1/RkUo2QgMZl2wVR2K2LD3H3u3aZY.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 14:00:23 +0000
Manifest this update: Fri 31 Jan 2025 14:00:23 +0000
Manifest next update: Sat 01 Feb 2025 14:00:23 +0000
Files and hashes: 1: RO-2xcQ-C0WrDSJ7Eu00WY23rS4.roa (hash: Avrv1nDidaSbZAK1I64G61mkaNMT6r8igSyRsacO8hw=)
2: RkUo2QgMZl2wVR2K2LD3H3u3aZY.crl (hash: N495KryMa3fmYkbcWc4n8pCSpt2BCm1Xk0Qvie5eywY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:a9:b4:fa:d0:70:87:03:7d:7c:44:5e:68:b6:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=464528d9080c665db0551d8ad8b0f71f7bb76996
Validity
Not Before: Jan 31 14:00:23 2025 GMT
Not After : Feb 1 14:00:23 2025 GMT
Subject: CN=7737c2f0a8a271f2036608d05f7eb3943688d7a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:6e:da:96:9f:70:5d:51:64:19:33:96:e3:55:
17:47:ca:5e:6d:c7:e2:2e:c9:25:29:f5:67:ac:38:
4e:90:8f:96:9d:0e:e7:82:1d:6b:54:7f:14:63:c8:
e4:ce:ff:cb:0a:25:86:d7:ea:58:49:1d:13:d9:7c:
3b:64:40:96:98:f5:1f:75:72:f4:c7:d6:eb:4f:26:
90:49:23:5a:99:a2:f7:45:48:5e:4e:8d:96:a2:2b:
c8:f1:e4:f0:73:3e:bc:85:08:2e:a8:f5:d5:7f:72:
a4:87:e0:94:d7:e4:a3:05:c7:b3:62:51:b3:1d:54:
bc:47:d5:ed:70:af:85:1a:67:7b:49:d1:ea:dc:2a:
65:ab:40:41:44:6c:66:11:ad:6a:5c:35:5f:23:bc:
e6:9a:0b:2b:65:46:75:98:b8:fb:91:11:a0:be:35:
0a:b9:a9:40:ec:2f:39:18:37:d6:43:0c:77:38:d3:
41:21:cd:14:78:12:eb:aa:f3:c8:4b:98:db:fd:2c:
74:a9:b5:2e:fc:8c:3c:b0:55:a7:31:38:ba:3f:38:
82:b3:b4:84:8c:6d:55:da:3d:21:4c:55:b6:37:54:
dd:f4:03:88:12:81:16:23:ea:cc:af:36:8f:68:8e:
27:3c:ca:17:13:95:5a:9f:e4:e6:db:f8:5c:ae:e9:
88:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:37:C2:F0:A8:A2:71:F2:03:66:08:D0:5F:7E:B3:94:36:88:D7:A3
X509v3 Authority Key Identifier:
keyid:46:45:28:D9:08:0C:66:5D:B0:55:1D:8A:D8:B0:F7:1F:7B:B7:69:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RkUo2QgMZl2wVR2K2LD3H3u3aZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/45852f-8fae-441d-b10c-0a1bf5bf0ca2/1/RkUo2QgMZl2wVR2K2LD3H3u3aZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/45852f-8fae-441d-b10c-0a1bf5bf0ca2/1/RkUo2QgMZl2wVR2K2LD3H3u3aZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:19:79:db:09:c8:e4:49:64:c7:3e:10:2b:24:07:44:c1:07:
03:36:3c:e3:11:60:b4:b7:23:7d:8c:c9:07:19:4e:d3:ee:2c:
e7:56:6a:c3:33:7b:6e:3b:9f:55:71:b5:26:32:af:e5:3b:3b:
9c:5e:d2:42:07:fe:9d:5a:9a:ef:7a:7d:4e:fd:90:46:dd:40:
af:c7:52:ae:aa:47:0a:71:cf:3a:a3:7b:5f:e7:ea:4a:61:cd:
36:96:a2:29:f1:f8:3a:fa:73:5a:73:26:a3:f2:b4:38:ae:8b:
6e:84:f1:6d:a0:72:d3:20:ce:32:26:7b:03:8c:4a:54:70:7d:
af:9f:ed:9b:e0:84:a3:03:0c:e8:27:c6:b4:6d:b8:3a:5c:de:
49:42:35:a1:ea:28:37:3d:b1:4f:40:b3:b3:67:35:ad:62:e7:
ca:40:3f:8f:af:f0:9c:ed:62:2d:46:c7:a8:33:30:5d:ba:a2:
a2:32:8f:9b:4d:62:12:f9:de:b3:ed:29:ac:32:7f:f4:98:b8:
50:fa:b6:01:c2:07:eb:f0:43:29:c2:b3:21:01:f5:39:f4:0b:
56:cb:4e:c4:a3:7e:6b:c8:df:21:ae:2a:78:a5:68:54:20:95:
86:fa:3e:8d:d2:56:43:64:56:15:71:89:de:9a:aa:b0:6e:ab:
54:b7:7a:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:15:22 2025 by rpki-client