Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/a1b15f-7d3d-4af6-b656-65bb1a89f259/1/rNNeDaQ5vqZcSDKc6eixCT9yMAo.mft
File: rNNeDaQ5vqZcSDKc6eixCT9yMAo.mft (raw, json)
Hash identifier: CCm9/b7hKf0tpIkTPUiMfUZ+bm4MT00Zg2T5BJukrN0=
Subject key identifier: E3:C4:0E:96:54:DC:29:53:FD:B4:BE:5D:88:3B:17:D2:E8:4E:0C:AE
Authority key identifier: AC:D3:5E:0D:A4:39:BE:A6:5C:48:32:9C:E9:E8:B1:09:3F:72:30:0A
Certificate issuer: /CN=acd35e0da439bea65c48329ce9e8b1093f72300a
Certificate serial: 0194BBCE367DD89BAE6BC07CF9AE7D54A9B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rNNeDaQ5vqZcSDKc6eixCT9yMAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/a1b15f-7d3d-4af6-b656-65bb1a89f259/1/rNNeDaQ5vqZcSDKc6eixCT9yMAo.mft
Manifest number: 0DEF
Signing time: Fri 31 Jan 2025 10:00:41 +0000
Manifest this update: Fri 31 Jan 2025 10:00:41 +0000
Manifest next update: Sat 01 Feb 2025 10:00:41 +0000
Files and hashes: 1: rNNeDaQ5vqZcSDKc6eixCT9yMAo.crl (hash: W8tJ+rF18i9+QsYBOWvlr2XJm4V2rQu6XgyN8Q+8UXA=)
2: wMviITx4-Ydrde8DagnvJudrSTQ.roa (hash: Bhx7NILq0TmOVBjEhBEQzkx4nDg+vAlvQ+Bo2NSJwBs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:36:7d:d8:9b:ae:6b:c0:7c:f9:ae:7d:54:a9:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acd35e0da439bea65c48329ce9e8b1093f72300a
Validity
Not Before: Jan 31 10:00:41 2025 GMT
Not After : Feb 1 10:00:41 2025 GMT
Subject: CN=e3c40e9654dc2953fdb4be5d883b17d2e84e0cae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ff:b4:92:be:e5:69:c7:a6:80:28:5e:89:4a:
1d:b6:06:7c:96:ec:aa:f3:fc:f5:24:b1:ac:d4:58:
34:e5:99:7c:e0:ca:3a:54:f2:9c:b6:8b:9a:0f:c9:
c6:b5:bd:3b:c1:39:da:cf:a6:27:85:19:84:a9:b2:
5f:7a:f3:34:23:ad:b4:94:02:e6:07:30:e4:cc:8a:
76:63:2a:a2:90:d9:97:ac:09:9a:8e:3d:92:6f:5a:
84:38:76:14:66:83:47:10:86:f6:aa:9f:57:59:69:
53:44:05:bb:02:05:1f:b0:ee:2f:fb:28:06:5d:32:
b8:be:1f:8f:37:7b:51:b1:64:cd:63:c6:20:bf:f8:
45:b2:e1:64:af:15:57:8e:16:62:8c:59:08:f3:75:
ef:fd:16:85:c0:5b:40:88:82:3e:75:d6:56:84:18:
1d:70:83:ca:05:38:81:01:9d:8e:48:e7:f8:46:9e:
77:96:f2:43:a7:89:6b:e3:2c:85:12:58:6c:a1:31:
b8:da:29:7e:1c:cb:ad:b5:cf:dd:bf:a1:c5:3c:4b:
ed:43:ac:42:7d:05:26:1a:44:9b:34:a3:bf:c0:de:
79:bf:e5:13:fb:86:18:a2:c8:bd:db:19:af:68:98:
80:19:3f:b3:f9:79:22:b1:f7:8c:d0:e7:1d:16:7e:
3d:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:C4:0E:96:54:DC:29:53:FD:B4:BE:5D:88:3B:17:D2:E8:4E:0C:AE
X509v3 Authority Key Identifier:
keyid:AC:D3:5E:0D:A4:39:BE:A6:5C:48:32:9C:E9:E8:B1:09:3F:72:30:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rNNeDaQ5vqZcSDKc6eixCT9yMAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/a1b15f-7d3d-4af6-b656-65bb1a89f259/1/rNNeDaQ5vqZcSDKc6eixCT9yMAo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/a1b15f-7d3d-4af6-b656-65bb1a89f259/1/rNNeDaQ5vqZcSDKc6eixCT9yMAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:ad:b9:fb:61:75:34:d6:88:88:85:8d:0a:e3:da:8d:91:2d:
ae:b8:8b:91:45:66:8e:ee:85:5f:84:60:50:e8:98:cb:b6:ea:
19:32:bc:f6:e1:64:1b:23:c3:eb:8f:f6:bb:5b:ec:c2:52:a4:
8b:18:4b:19:25:ed:44:2e:b8:c8:cc:cd:90:52:c8:42:3c:8c:
de:00:31:76:64:e6:96:e1:b7:6f:1d:b1:d7:2a:a5:54:da:b4:
e4:cf:3b:b9:65:e7:c5:b2:1a:ca:3e:06:fa:e8:dc:d3:fd:e3:
f4:4a:36:7b:cb:c2:f3:39:04:b5:2b:d0:cf:88:53:c6:dc:72:
2b:a9:46:1b:7b:bf:1f:1f:f5:75:c4:a5:f4:1d:8b:a4:73:71:
43:c6:f9:75:3d:3a:93:9f:af:82:97:32:9a:57:64:79:83:da:
49:55:64:0e:6e:0c:11:34:34:76:e6:f0:18:ff:88:86:2a:dc:
ce:5f:ea:b0:65:c4:ef:92:64:9f:a3:a4:99:9e:e3:87:e0:f4:
5f:45:57:17:8f:ef:b9:86:0f:a4:8a:6d:5d:f6:33:09:13:27:
0e:7d:fb:d2:94:91:8e:22:72:3e:57:ff:40:54:6e:bd:ff:71:
91:cc:70:5e:c5:da:d6:c5:c9:b3:10:82:28:2f:16:b4:e6:67:
75:78:86:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:00 2025 by rpki-client