Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/d8275e-c479-4ed8-beea-da89ed2eb55e/1/r0b7jUGkckKuPujOHw-o74EWmLU.mft
File: r0b7jUGkckKuPujOHw-o74EWmLU.mft (raw, json)
Hash identifier: aibm8SpWaU9/SUe0njXZKBb2IFdIE/W2nj2n3qZZkNI=
Subject key identifier: B1:9B:8D:8E:1B:75:6F:C2:54:95:0D:B7:54:11:D2:E6:DC:62:2E:35
Authority key identifier: AF:46:FB:8D:41:A4:72:42:AE:3E:E8:CE:1F:0F:A8:EF:81:16:98:B5
Certificate issuer: /CN=af46fb8d41a47242ae3ee8ce1f0fa8ef811698b5
Certificate serial: 0194BCA997F7E336F829E8B26A42872171FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r0b7jUGkckKuPujOHw-o74EWmLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/d8275e-c479-4ed8-beea-da89ed2eb55e/1/r0b7jUGkckKuPujOHw-o74EWmLU.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 14:00:18 +0000
Manifest this update: Fri 31 Jan 2025 14:00:18 +0000
Manifest next update: Sat 01 Feb 2025 14:00:18 +0000
Files and hashes: 1: PtQPD0TcWGGlrHrTKtFaghUGI8Q.roa (hash: M4698F1pGrbgP6S//HBwAHD8jz/cn5NjY1ncpneTdfY=)
2: r0b7jUGkckKuPujOHw-o74EWmLU.crl (hash: 5+9bO3lTiLBsB3WixfkggPdtN8KBsTUZB361eIYKSRA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:97:f7:e3:36:f8:29:e8:b2:6a:42:87:21:71:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af46fb8d41a47242ae3ee8ce1f0fa8ef811698b5
Validity
Not Before: Jan 31 14:00:18 2025 GMT
Not After : Feb 1 14:00:18 2025 GMT
Subject: CN=b19b8d8e1b756fc254950db75411d2e6dc622e35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:04:0d:8c:0e:57:6d:a5:95:d9:04:44:7c:44:
06:14:7f:74:5f:47:44:51:1f:25:8a:c9:88:ab:49:
b3:83:52:f9:47:f9:07:67:92:68:27:0f:5d:7c:fa:
24:24:be:7a:26:3c:c5:94:68:5e:56:2b:f4:fc:69:
98:48:d3:ea:11:42:30:86:ff:2c:a9:98:78:24:2c:
2e:79:cb:37:40:0a:0d:ed:be:79:7a:0a:23:00:e6:
27:ec:55:3f:5c:d8:eb:43:ae:54:64:9b:2f:b1:10:
4a:3a:53:ce:90:ac:e8:6d:f5:b7:dd:05:a5:eb:0b:
77:c9:10:ab:e3:86:4f:03:78:57:bc:4c:c2:fa:7e:
ed:55:ab:1a:7b:ae:c3:50:9f:42:10:a2:5d:88:be:
91:0c:b2:27:c1:52:d4:00:19:fc:4d:12:f8:06:55:
36:68:7e:db:4b:a2:16:94:f4:ea:ac:2b:da:fa:e1:
1e:c0:88:a1:5a:15:87:70:0c:dd:de:2e:33:4c:3d:
72:1f:17:8e:4e:a1:be:55:e7:32:3b:35:a9:a9:5a:
1c:2a:b3:f2:82:bb:9c:6e:8c:f0:70:1c:28:ae:e4:
23:5c:0e:7b:d7:43:95:c3:be:47:a9:6f:f7:ea:0a:
1e:df:6c:d3:2f:3b:3f:9e:1c:77:f5:76:3b:cd:7e:
f5:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:9B:8D:8E:1B:75:6F:C2:54:95:0D:B7:54:11:D2:E6:DC:62:2E:35
X509v3 Authority Key Identifier:
keyid:AF:46:FB:8D:41:A4:72:42:AE:3E:E8:CE:1F:0F:A8:EF:81:16:98:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r0b7jUGkckKuPujOHw-o74EWmLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/d8275e-c479-4ed8-beea-da89ed2eb55e/1/r0b7jUGkckKuPujOHw-o74EWmLU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/d8275e-c479-4ed8-beea-da89ed2eb55e/1/r0b7jUGkckKuPujOHw-o74EWmLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:10:71:28:47:df:26:4f:d0:70:9a:2a:c3:17:83:31:d8:9b:
cb:46:54:1d:5e:62:ec:0e:bd:6b:f0:98:64:0f:2c:3e:db:34:
d3:d9:2d:25:e4:1d:45:2d:04:27:e8:54:b2:64:7d:a2:ca:cb:
10:0b:08:f9:3d:83:fd:32:e3:d9:d2:16:2b:04:61:0a:35:ca:
ef:6a:b9:0d:7d:aa:23:53:fa:cd:18:7d:6b:e4:c7:3e:7e:f4:
5b:cf:0a:fb:66:f0:a1:91:a1:f1:ee:9c:02:05:81:28:43:45:
27:c5:71:75:ba:56:50:5b:7a:f6:43:e4:30:e6:b2:b6:9e:eb:
ea:47:4a:93:14:0f:ea:a4:5c:2b:4c:e9:fe:b3:b1:f9:81:2f:
22:67:65:31:86:ac:bd:9a:02:ea:b8:1f:31:ab:e0:42:8f:ac:
ff:88:c2:44:14:9a:50:f2:ab:8e:3f:44:64:d5:2e:c7:d5:81:
fa:3c:e4:8b:8c:6b:fd:a7:c2:51:08:55:48:a8:a5:cd:b9:e5:
d0:c8:3c:6d:f4:ea:77:65:99:13:1a:83:24:04:c7:a4:43:1a:
c0:16:83:ef:81:a6:37:fc:a1:68:cc:90:00:2c:f4:59:bd:b0:
e4:64:59:c3:a5:dd:a5:1f:08:ac:a9:ff:30:f6:51:65:61:7b:
c9:e1:db:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:31:25 2025 by rpki-client