Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/becf48-035a-4471-bdf3-ffd5bf5969df/1/ruqgluuzdlfk060hdmQRctbiArw.mft
File: ruqgluuzdlfk060hdmQRctbiArw.mft (raw, json)
Hash identifier: jTx+68hzB1NFFyKTjhRNpFNKkiQUfVBwL3/RMYpilfU=
Subject key identifier: 49:92:F6:E1:CD:1C:12:43:BD:53:7F:65:A6:EA:C4:63:17:AE:81:FC
Authority key identifier: AE:EA:A0:96:EB:B3:76:57:E4:D3:AD:21:76:64:11:72:D6:E2:02:BC
Certificate issuer: /CN=aeeaa096ebb37657e4d3ad2176641172d6e202bc
Certificate serial: 0194BC3BED03189738108E3CFC2CA59D1A0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ruqgluuzdlfk060hdmQRctbiArw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/becf48-035a-4471-bdf3-ffd5bf5969df/1/ruqgluuzdlfk060hdmQRctbiArw.mft
Manifest number: 08C1
Signing time: Fri 31 Jan 2025 12:00:31 +0000
Manifest this update: Fri 31 Jan 2025 12:00:31 +0000
Manifest next update: Sat 01 Feb 2025 12:00:31 +0000
Files and hashes: 1: C8QSGaryHD1ifNMCj6TvuYmJ4_s.roa (hash: FDfh4y52jk52XVkY0in4dMkywyFVX54MNFbeJM/1CKk=)
2: ruqgluuzdlfk060hdmQRctbiArw.crl (hash: jONRIGa2hpisi6ewDW3rfwKvqcDU2izU2ua5qUgW/L4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:ed:03:18:97:38:10:8e:3c:fc:2c:a5:9d:1a:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aeeaa096ebb37657e4d3ad2176641172d6e202bc
Validity
Not Before: Jan 31 12:00:31 2025 GMT
Not After : Feb 1 12:00:31 2025 GMT
Subject: CN=4992f6e1cd1c1243bd537f65a6eac46317ae81fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:40:4f:05:95:b0:7f:e9:1e:f9:e0:ea:e1:18:
ce:dc:bf:97:ef:48:1d:cc:63:5e:3b:29:f0:53:78:
5e:87:d3:60:e7:fd:85:67:d4:1d:fc:bb:e8:30:22:
ba:5b:b0:b6:3f:ae:67:7a:ac:c9:45:9f:bc:87:4c:
60:c4:a2:87:b6:60:e2:2e:a3:92:05:f5:89:a8:a7:
fb:6e:ae:d2:47:81:43:1d:c7:63:fb:e9:a8:f3:e6:
1b:55:74:3b:80:7e:2d:e3:60:98:2f:c9:fb:e2:f5:
99:c0:35:38:d9:8e:08:ee:09:fa:79:19:20:a7:ba:
66:07:30:b1:e8:7e:bd:df:ba:52:19:2e:3a:c6:4d:
d6:c1:5e:fc:58:98:51:49:02:a0:e5:cd:4c:4e:3e:
73:d6:3a:0b:a7:6e:33:24:78:69:05:db:d6:39:e7:
c2:b4:af:fd:3d:c7:89:3c:11:a0:1b:9c:bb:54:58:
09:8c:7f:ee:19:75:ba:19:8b:df:3a:c9:5f:08:99:
a0:32:cd:f9:f2:88:bb:0b:d4:d8:35:fc:1f:dd:f7:
4a:ac:d3:f3:40:2b:8b:df:aa:d5:a7:ef:1c:c6:e0:
01:cc:1c:d6:8d:6f:44:92:65:46:0a:e7:a6:11:d8:
90:60:0b:68:52:e3:4c:97:12:c7:f4:35:de:61:42:
bb:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:92:F6:E1:CD:1C:12:43:BD:53:7F:65:A6:EA:C4:63:17:AE:81:FC
X509v3 Authority Key Identifier:
keyid:AE:EA:A0:96:EB:B3:76:57:E4:D3:AD:21:76:64:11:72:D6:E2:02:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ruqgluuzdlfk060hdmQRctbiArw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/becf48-035a-4471-bdf3-ffd5bf5969df/1/ruqgluuzdlfk060hdmQRctbiArw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/becf48-035a-4471-bdf3-ffd5bf5969df/1/ruqgluuzdlfk060hdmQRctbiArw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:a3:ca:d1:d3:49:7e:73:d5:18:5f:d8:c0:25:10:bf:56:ea:
2b:a6:e1:83:ae:aa:57:cf:59:c7:fe:7f:0b:f8:06:64:65:8f:
49:6a:4d:3c:44:30:b6:18:5d:85:8c:62:f3:38:79:d1:b3:ec:
92:e5:5a:40:e7:17:b3:0e:3f:5a:52:45:0c:43:be:f9:02:d6:
c5:a3:69:f8:d7:6f:be:54:c9:b6:55:34:39:19:7c:70:22:61:
55:34:73:0e:e0:7e:e0:98:4b:6c:df:55:a5:36:94:4f:7d:3b:
6e:96:df:3e:e6:f1:9b:b5:3a:0d:47:5b:e1:f3:fe:84:94:a9:
75:dc:8b:14:4f:b7:ab:03:89:6a:8a:b7:71:5c:62:e7:dd:31:
9e:e0:af:4f:67:dd:46:84:7e:cd:2b:5b:61:18:31:c1:79:7b:
ad:62:e9:da:65:be:e4:a7:f9:3d:5b:5c:c4:7c:d7:d0:bf:5d:
fe:ba:c3:d9:ab:37:ea:ed:d3:b5:88:7d:c8:aa:9d:7e:71:c1:
9b:81:2d:69:3f:db:6d:e5:74:a5:38:9e:4a:ce:5d:99:5a:f8:
21:96:3f:ed:6d:d3:72:a4:a3:19:58:7f:26:d7:e8:8e:a1:f1:
69:90:6f:5b:1d:0c:eb:23:c2:be:84:f8:79:3a:1e:d1:46:ad:
22:e4:89:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:21:17 2025 by rpki-client