Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/2f5fd6-1904-4dca-abb2-8837ca69e396/1/rr3q1PHRyN2pbRzReJ2d0-I78VM.mft
File: rr3q1PHRyN2pbRzReJ2d0-I78VM.mft (raw, json)
Hash identifier: 6r1u5FAp89h0H0XPQjmY/RNkMnbaq9XgeqBrhPTDoqI=
Subject key identifier: 5F:2B:D6:4E:20:CB:C6:16:24:06:38:27:BC:D0:CF:98:F6:0A:6F:24
Authority key identifier: AE:BD:EA:D4:F1:D1:C8:DD:A9:6D:1C:D1:78:9D:9D:D3:E2:3B:F1:53
Certificate issuer: /CN=aebdead4f1d1c8dda96d1cd1789d9dd3e23bf153
Certificate serial: 0194BBCDF23059FFBC9DD9A5EC2FF6B00A08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rr3q1PHRyN2pbRzReJ2d0-I78VM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/2f5fd6-1904-4dca-abb2-8837ca69e396/1/rr3q1PHRyN2pbRzReJ2d0-I78VM.mft
Manifest number: 0B11
Signing time: Fri 31 Jan 2025 10:00:23 +0000
Manifest this update: Fri 31 Jan 2025 10:00:23 +0000
Manifest next update: Sat 01 Feb 2025 10:00:23 +0000
Files and hashes: 1: QrB38IR31JfmSrfp5ttgTReGTWo.roa (hash: tObzEsfYNmXi9X+/o+rGLlyYSek2LoSQ9N7PVMYEfqA=)
2: n3iPjhImnBjarzP2Rj2tOx0dNiE.roa (hash: lUEC9I8tI5NUjUJh9guJCH2H+g0KkZWinekNZT2+2Io=)
3: rr3q1PHRyN2pbRzReJ2d0-I78VM.crl (hash: tG/nt/oJiTPjmwqE+dMbgOp/T23Gf+Jeo3nB1jhlAz0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:f2:30:59:ff:bc:9d:d9:a5:ec:2f:f6:b0:0a:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aebdead4f1d1c8dda96d1cd1789d9dd3e23bf153
Validity
Not Before: Jan 31 10:00:23 2025 GMT
Not After : Feb 1 10:00:23 2025 GMT
Subject: CN=5f2bd64e20cbc61624063827bcd0cf98f60a6f24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:7c:79:99:94:b5:22:4f:46:91:6d:04:06:8b:
ea:64:00:2b:81:ae:24:c5:5a:17:12:e6:b0:e6:c8:
c8:fb:bb:1d:80:ec:f1:04:13:ba:cd:4e:8d:1a:ec:
f1:bf:03:2f:34:ae:e5:a7:69:5d:45:24:05:f2:aa:
14:32:eb:af:f4:f2:76:6e:df:f6:20:9d:17:88:9c:
a5:7f:62:d9:c4:56:d9:a3:0a:68:d6:e1:9d:6e:cb:
06:72:a1:a7:52:89:c3:b2:0d:8d:cf:b9:ba:fd:fa:
7e:da:42:27:47:44:ec:57:a6:44:68:8f:b7:92:fc:
ba:9f:fc:09:9c:88:d6:bf:da:a2:13:aa:32:ca:b6:
11:99:28:91:47:39:cc:eb:d6:a4:72:73:93:e2:46:
9d:6a:12:55:6d:53:a0:df:1f:a3:f1:0b:98:9c:56:
5d:ac:82:b3:75:fd:f3:01:80:84:ee:e6:70:c7:24:
7e:cf:af:bf:7a:0e:ac:ee:56:d7:75:4b:0f:5f:40:
2e:07:f6:02:98:9a:36:4d:d7:29:ca:1f:e0:ca:88:
67:17:b5:6f:d0:62:33:01:96:87:98:1f:e4:0c:03:
0b:69:00:a5:76:f0:1b:ee:39:db:48:05:ea:2b:d9:
14:bb:2b:f2:6b:d2:db:47:cf:55:e3:79:24:2e:4e:
7c:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:2B:D6:4E:20:CB:C6:16:24:06:38:27:BC:D0:CF:98:F6:0A:6F:24
X509v3 Authority Key Identifier:
keyid:AE:BD:EA:D4:F1:D1:C8:DD:A9:6D:1C:D1:78:9D:9D:D3:E2:3B:F1:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rr3q1PHRyN2pbRzReJ2d0-I78VM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/2f5fd6-1904-4dca-abb2-8837ca69e396/1/rr3q1PHRyN2pbRzReJ2d0-I78VM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/2f5fd6-1904-4dca-abb2-8837ca69e396/1/rr3q1PHRyN2pbRzReJ2d0-I78VM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:ea:58:13:92:27:c4:49:65:c1:e1:e0:36:06:1f:bd:62:c2:
e9:75:52:f5:fd:ec:b5:f4:ce:f9:00:50:2d:e7:cf:87:51:8d:
e2:a5:e4:c8:3e:67:f3:99:bb:4f:54:26:e5:a1:81:70:95:c5:
95:c9:7b:fd:d1:dc:d4:db:92:52:57:e7:36:f8:f3:07:ed:36:
6d:fb:99:31:2f:10:56:eb:13:d3:34:f7:f1:b7:0f:0c:9e:c2:
51:45:fd:c9:d7:87:b7:64:60:46:00:90:f3:1a:ed:a9:ce:3b:
60:f2:91:e5:26:ab:47:03:91:5f:67:ab:7d:d2:e1:22:1e:c8:
44:30:8a:c0:ee:e2:71:4a:ec:ca:af:28:2e:0d:8e:35:37:91:
fd:37:67:3f:31:63:39:6e:7f:68:81:f4:ad:14:72:81:62:14:
76:ff:72:7b:19:6d:f9:fe:59:bb:35:d5:5d:13:8a:1f:79:b6:
66:03:63:81:d9:b0:be:f8:47:06:a0:07:fd:5c:40:6b:69:ba:
5c:74:3c:03:fb:aa:17:e8:4e:5b:9a:23:17:cb:30:b7:be:21:
2d:34:aa:ad:69:d0:11:20:68:45:ff:10:f6:a7:a9:9a:9e:da:
cb:c1:3b:85:6d:53:12:ac:3e:10:d0:f2:e4:38:65:0a:4b:41:
3b:f4:db:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 13:22:42 2025 by rpki-client