Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/1a43f0-c027-4fdc-8515-45f496f2fe75/1/RusRr5NV2porXfc-zdf9CWektYw.mft
File: RusRr5NV2porXfc-zdf9CWektYw.mft (raw, json)
Hash identifier: tK7prm8XJXRl+hQKyqnIt4IfrZkXFHoPJPNq6wJA6dA=
Subject key identifier: D8:9A:D3:07:84:E2:D9:7E:D3:B5:BA:2E:9F:AA:C0:8B:59:64:F6:6F
Authority key identifier: 46:EB:11:AF:93:55:DA:9A:2B:5D:F7:3E:CD:D7:FD:09:67:A4:B5:8C
Certificate issuer: /CN=46eb11af9355da9a2b5df73ecdd7fd0967a4b58c
Certificate serial: 0194BD4E56EDBDFC87B0426916E301809129
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RusRr5NV2porXfc-zdf9CWektYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/1a43f0-c027-4fdc-8515-45f496f2fe75/1/RusRr5NV2porXfc-zdf9CWektYw.mft
Manifest number: 1430
Signing time: Fri 31 Jan 2025 17:00:15 +0000
Manifest this update: Fri 31 Jan 2025 17:00:15 +0000
Manifest next update: Sat 01 Feb 2025 17:00:15 +0000
Files and hashes: 1: GYTVmNtXsClBN2_m1uRr3vF4R2k.roa (hash: 5aAitfXDnMCmu3njYRXM+C5ciF1JourPlKjasRSY100=)
2: RusRr5NV2porXfc-zdf9CWektYw.crl (hash: N8OPpbkUhAjjgBKNtfdggbKHqbWmwM6xCInhwRnE1Nk=)
3: a7IWjlJ3-v5YN5JtWuXJERn1hs0.roa (hash: ubv2dUjgg/MjekVb1dt+BNRzcRiJnDJyWbeGdndwL9g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:56:ed:bd:fc:87:b0:42:69:16:e3:01:80:91:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46eb11af9355da9a2b5df73ecdd7fd0967a4b58c
Validity
Not Before: Jan 31 17:00:15 2025 GMT
Not After : Feb 1 17:00:15 2025 GMT
Subject: CN=d89ad30784e2d97ed3b5ba2e9faac08b5964f66f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:a1:ce:a0:f4:f6:fb:71:a2:e0:60:ec:d2:99:
f9:58:85:15:87:80:c5:55:fa:b1:c3:5f:32:6d:97:
cb:23:56:e7:e9:3f:45:04:db:18:b5:5c:e6:68:22:
48:c1:a8:db:9c:bb:92:a4:e4:ec:6a:09:e9:89:93:
fc:75:2d:3a:90:d6:8a:b6:45:2c:ac:a8:5f:a6:2d:
b4:2d:f1:bf:d3:6d:6a:04:f8:a7:af:5a:8e:00:e6:
4b:62:e4:41:f4:87:a5:9e:4d:26:6d:f9:63:ad:24:
5f:6a:1e:40:94:21:78:8c:05:eb:5e:93:d3:c3:18:
50:6c:e8:c5:19:72:5a:43:88:c9:4d:d5:23:15:15:
da:2e:f9:0f:d3:f4:70:5e:af:4e:10:61:85:9c:ba:
b1:99:50:c7:40:76:04:97:7f:ac:fa:7a:2a:f1:fe:
48:88:31:9f:82:e0:d9:5a:ad:f6:56:cf:fa:49:73:
58:d9:97:1f:71:d9:f6:01:74:21:0d:5b:b6:9a:7f:
28:cf:da:69:c3:26:94:80:7a:d8:be:fe:3b:ae:0e:
f6:ae:3f:18:e3:ac:aa:7b:ba:e0:bf:c0:0e:3f:6e:
1e:bd:5e:02:c0:8b:29:96:fb:b1:c9:75:7c:0b:9a:
f4:80:4a:d7:1e:3a:97:ca:1b:8a:1f:9b:82:1e:22:
14:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:9A:D3:07:84:E2:D9:7E:D3:B5:BA:2E:9F:AA:C0:8B:59:64:F6:6F
X509v3 Authority Key Identifier:
keyid:46:EB:11:AF:93:55:DA:9A:2B:5D:F7:3E:CD:D7:FD:09:67:A4:B5:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RusRr5NV2porXfc-zdf9CWektYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/1a43f0-c027-4fdc-8515-45f496f2fe75/1/RusRr5NV2porXfc-zdf9CWektYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/1a43f0-c027-4fdc-8515-45f496f2fe75/1/RusRr5NV2porXfc-zdf9CWektYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:da:fc:2c:f8:97:d4:df:ff:c5:e2:17:ef:18:3b:53:7a:b7:
57:78:79:0c:ee:5a:d4:94:17:ae:fe:42:41:ac:b9:e4:3b:b0:
5a:d0:88:43:2b:67:1a:5c:c5:32:a8:03:1f:70:6d:6d:53:59:
56:d3:e3:84:b7:5f:29:e5:2a:45:ba:ef:ca:01:d7:4e:87:32:
4c:a9:ef:15:0d:c3:32:b7:ea:26:1f:a3:c4:a0:52:28:85:07:
e7:11:4a:19:30:71:28:e1:69:2f:20:1e:7b:5f:2c:24:ba:85:
29:2d:86:12:a3:17:dd:a2:a4:21:64:7d:02:38:46:2c:ce:6c:
e4:34:cf:aa:5f:1d:8a:e6:b7:68:7c:a1:19:1f:35:b2:07:1d:
88:65:67:6a:e5:86:4d:65:f7:18:a0:c5:9c:85:41:da:91:35:
83:96:9d:da:b7:49:d4:bd:14:d8:81:ac:6e:34:74:19:c6:a1:
5d:55:bc:3c:69:11:88:96:7c:86:86:39:f0:6a:51:33:0d:95:
1d:6a:0d:a1:42:7e:f4:28:2b:32:cf:fa:05:d2:2b:de:a1:d3:
ff:bb:0f:66:d1:2b:f2:55:23:33:26:4c:a5:ba:41:c6:c8:00:
f7:ae:fb:e4:ff:96:b3:5a:41:45:a0:d2:85:87:de:df:a0:46:
f6:9b:0b:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:52:17 2025 by rpki-client