Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/c62c7f-f462-4348-b068-f049c66ef811/1/rmgsTwopQO6oclQqYhXjVJkd60s.mft
File: rmgsTwopQO6oclQqYhXjVJkd60s.mft (raw, json)
Hash identifier: UGJ0dkvGPXEoP/KeK8pXqo0Eebl5Mvop33+YGeMThvY=
Subject key identifier: BD:18:6B:BB:58:AA:AE:09:BB:E2:B5:4B:AD:A9:E9:AF:64:05:46:0C
Authority key identifier: AE:68:2C:4F:0A:29:40:EE:A8:72:54:2A:62:15:E3:54:99:1D:EB:4B
Certificate issuer: /CN=ae682c4f0a2940eea872542a6215e354991deb4b
Certificate serial: 0194BC72FDC74E99C09BCD5F6C623F8FEA6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rmgsTwopQO6oclQqYhXjVJkd60s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/c62c7f-f462-4348-b068-f049c66ef811/1/rmgsTwopQO6oclQqYhXjVJkd60s.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 13:00:40 +0000
Manifest this update: Fri 31 Jan 2025 13:00:40 +0000
Manifest next update: Sat 01 Feb 2025 13:00:40 +0000
Files and hashes: 1: ifB7bI8Nz6a1wo-Om4qJOLNZOqU.roa (hash: G4ZTdZq0UWN0ZVqhuNwvAXhge2Xq79dXIWiLnGu1ENA=)
2: rmgsTwopQO6oclQqYhXjVJkd60s.crl (hash: zR0ZqRGhW360ZYJa7g/rYWVDwoISyQyes8epIcED/ns=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:fd:c7:4e:99:c0:9b:cd:5f:6c:62:3f:8f:ea:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae682c4f0a2940eea872542a6215e354991deb4b
Validity
Not Before: Jan 31 13:00:40 2025 GMT
Not After : Feb 1 13:00:40 2025 GMT
Subject: CN=bd186bbb58aaae09bbe2b54bada9e9af6405460c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:fe:06:9c:58:83:9f:52:b0:43:5a:d9:b7:a0:
98:ab:f5:ef:ee:6e:ca:24:34:60:e1:bf:93:05:ca:
0c:86:80:09:22:a0:a2:a9:71:f2:48:8f:68:f9:6e:
c8:a9:57:11:08:66:5d:36:a6:a8:3c:78:87:a2:fe:
bf:30:50:25:4c:41:1e:ea:34:6a:f6:59:3d:e2:59:
76:29:bc:61:4f:04:d9:9d:44:6a:4b:b8:39:26:6c:
39:f7:fe:09:d0:a4:a2:e4:6b:2a:5f:67:1e:a8:06:
ba:f6:b5:a7:4e:9a:df:43:65:93:44:81:1a:d9:d3:
37:2b:1a:d2:b9:39:45:f3:db:b2:a7:e6:e1:6b:be:
47:d2:ab:e0:ec:69:56:3e:91:85:a4:07:81:df:a2:
f1:e8:fc:e1:31:34:a0:30:be:2d:69:ea:f1:04:38:
4e:3e:f8:58:48:1c:f9:30:2c:85:ef:14:7b:e6:c7:
74:01:96:5d:4c:77:07:57:a4:e9:cd:49:09:1a:74:
f1:db:1f:34:30:a5:ae:a6:3c:e8:ba:1b:cc:8a:c0:
7f:a3:3d:8c:2c:57:1c:d1:4e:a7:96:56:d8:73:04:
16:92:1c:d1:3e:48:53:59:3c:6d:73:63:5f:ad:b7:
7f:e0:22:81:21:65:d3:74:22:50:db:44:64:40:71:
ba:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:18:6B:BB:58:AA:AE:09:BB:E2:B5:4B:AD:A9:E9:AF:64:05:46:0C
X509v3 Authority Key Identifier:
keyid:AE:68:2C:4F:0A:29:40:EE:A8:72:54:2A:62:15:E3:54:99:1D:EB:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rmgsTwopQO6oclQqYhXjVJkd60s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c62c7f-f462-4348-b068-f049c66ef811/1/rmgsTwopQO6oclQqYhXjVJkd60s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c62c7f-f462-4348-b068-f049c66ef811/1/rmgsTwopQO6oclQqYhXjVJkd60s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:73:d3:b1:92:34:f8:6d:e3:eb:0e:d3:8d:a5:5a:af:64:86:
eb:8f:18:d8:b7:cf:1a:52:0d:77:89:31:de:44:42:32:9b:09:
8b:f8:e9:0a:00:b0:70:1e:70:f2:19:7c:ae:a9:47:81:8f:38:
46:fe:52:41:14:1a:50:cd:96:1a:c1:61:ae:4f:cf:72:e0:ee:
7d:89:2c:38:17:fd:5b:55:ad:26:45:03:d4:3c:c0:83:76:4c:
54:ca:b6:2e:49:2c:b2:5d:df:13:95:33:e6:5f:73:75:ed:83:
dd:fa:fa:fe:a5:a9:6d:0d:7c:dd:0b:75:39:28:0b:02:ba:11:
01:f5:e6:40:68:8c:e7:0d:5a:13:da:7e:64:c8:73:df:fe:0f:
ec:ec:81:0d:a4:de:6f:af:16:52:14:c4:d6:8c:05:9f:14:28:
bf:86:57:7a:a2:45:8e:c1:df:00:fb:0a:59:05:2b:68:69:5e:
2f:5e:2b:84:2b:53:51:07:d4:fe:46:96:7e:05:1f:a3:66:d6:
42:0a:8d:56:c5:4e:46:b9:b8:c5:a2:e2:58:58:e1:40:25:19:
67:6d:5e:71:ea:7c:73:32:7a:aa:e2:17:9b:a1:7d:d8:1a:c6:
67:97:2a:d7:af:cd:3b:28:64:68:f3:d1:a1:c8:5c:38:e7:fb:
d1:45:99:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:13:51 2025 by rpki-client