Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/dd944d-8faa-4cce-aafe-c050f4c05f29/1/REIuqj2u32uQIVnu2-lMqbfSKE8.mft
File: REIuqj2u32uQIVnu2-lMqbfSKE8.mft (raw, json)
Hash identifier: GNi1JyX+MeKcRwTVL8jYhotNNh9GXtZVsSIkP60CqhY=
Subject key identifier: C6:96:78:2D:AA:5C:63:BF:0A:9B:C7:53:6F:6D:7D:CC:BD:83:23:8D
Authority key identifier: 44:42:2E:AA:3D:AE:DF:6B:90:21:59:EE:DB:E9:4C:A9:B7:D2:28:4F
Certificate issuer: /CN=44422eaa3daedf6b902159eedbe94ca9b7d2284f
Certificate serial: 0194BD179DF350D2C563CDCCE25DDFC1BB69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/REIuqj2u32uQIVnu2-lMqbfSKE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/dd944d-8faa-4cce-aafe-c050f4c05f29/1/REIuqj2u32uQIVnu2-lMqbfSKE8.mft
Manifest number: 0A5E
Signing time: Fri 31 Jan 2025 16:00:28 +0000
Manifest this update: Fri 31 Jan 2025 16:00:28 +0000
Manifest next update: Sat 01 Feb 2025 16:00:28 +0000
Files and hashes: 1: REIuqj2u32uQIVnu2-lMqbfSKE8.crl (hash: phRbyXyCf4SC3CuioQHbbDjmcIS1Lbt+SM47HOisKyE=)
2: pkwPVsxSdYAUrwekUiCsSfEtBsc.roa (hash: VAoyCYorOSAEGcSFlO8mKuQLxbXXAWAO6ekhAMd8Fps=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:9d:f3:50:d2:c5:63:cd:cc:e2:5d:df:c1:bb:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44422eaa3daedf6b902159eedbe94ca9b7d2284f
Validity
Not Before: Jan 31 16:00:28 2025 GMT
Not After : Feb 1 16:00:28 2025 GMT
Subject: CN=c696782daa5c63bf0a9bc7536f6d7dccbd83238d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:16:c5:64:38:75:3f:20:ba:34:ca:50:1e:c6:
07:78:4d:52:10:1c:23:cd:18:1f:8a:1b:38:d6:7a:
ff:0e:e5:dc:ba:45:81:ec:66:60:9c:36:98:d9:8b:
0b:6d:1b:bb:a9:14:c1:17:98:5f:12:5e:4d:84:5a:
11:60:25:2e:d3:6f:42:59:fa:55:ad:e2:ab:0e:e8:
97:f9:f8:a1:56:d7:d2:6e:0d:c3:40:b0:2b:26:67:
35:58:03:2c:76:69:22:c8:b9:71:1b:5b:59:ab:0a:
fa:db:a8:27:05:64:68:39:aa:b4:82:05:5c:de:c1:
7e:be:8f:a0:71:4e:87:ef:e8:85:a2:8f:eb:ea:99:
ae:db:e2:0a:b6:ad:26:55:ef:79:95:20:97:41:c0:
3c:46:23:b2:8a:a2:41:68:99:32:cc:9d:02:13:2d:
b6:7b:8e:b4:0f:d0:bc:7c:23:98:ce:bd:4f:1c:1a:
a5:97:79:12:d2:99:ee:a6:88:4f:f6:96:e0:c0:78:
e8:12:35:cc:99:eb:0e:ce:ec:cf:6e:76:b9:65:2e:
fb:d9:3d:cc:70:e8:70:70:db:8c:92:fc:1a:d1:7b:
e8:22:a9:63:57:22:bb:04:44:50:85:5b:f1:d6:0c:
49:17:5f:bc:fb:78:c7:4e:fa:ff:c7:cc:fb:51:92:
2b:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:96:78:2D:AA:5C:63:BF:0A:9B:C7:53:6F:6D:7D:CC:BD:83:23:8D
X509v3 Authority Key Identifier:
keyid:44:42:2E:AA:3D:AE:DF:6B:90:21:59:EE:DB:E9:4C:A9:B7:D2:28:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/REIuqj2u32uQIVnu2-lMqbfSKE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/dd944d-8faa-4cce-aafe-c050f4c05f29/1/REIuqj2u32uQIVnu2-lMqbfSKE8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/dd944d-8faa-4cce-aafe-c050f4c05f29/1/REIuqj2u32uQIVnu2-lMqbfSKE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:8e:e9:21:2c:c3:90:c4:af:23:d6:a1:bd:d8:3f:1f:a4:f9:
ed:93:82:fc:07:4d:3f:2d:20:58:76:49:56:e3:2c:6a:b9:86:
c3:20:3c:2f:6a:93:85:19:38:c6:8f:3f:98:48:3b:8c:7b:7f:
0f:02:9c:d2:1f:29:fd:c9:30:85:b4:fa:da:a0:1f:ea:93:ca:
fa:7b:93:bc:d7:a5:2e:4d:00:6f:0e:f1:f4:c1:f3:54:d6:c7:
52:8a:ba:c3:07:db:c8:29:77:ae:5a:2f:24:a9:39:43:a8:aa:
6c:37:22:b0:67:9d:b6:74:09:d7:82:c8:78:16:dc:1a:3b:76:
aa:ad:6d:71:22:77:b1:2f:2f:1b:e4:ef:4b:a3:31:8d:75:61:
f6:38:0d:9a:92:5f:22:53:f7:31:42:b6:7f:cf:c1:3d:88:bd:
33:90:49:88:8f:23:3f:1c:fe:d1:76:be:8a:d8:22:87:a2:c2:
28:fb:cc:b0:1c:a1:35:e7:75:12:d4:31:1a:4b:f6:7e:1d:5c:
87:32:3a:b0:4a:a9:6a:da:ff:a8:20:7d:44:8c:a7:3b:d1:88:
65:42:0d:c0:33:07:68:3a:e7:a7:e2:ab:f3:e8:da:5e:c8:c4:
c9:8a:e1:bf:aa:75:7c:94:cd:e7:44:58:8a:b0:4f:81:75:0d:
c9:1c:67:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:15 2025 by rpki-client