Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/def555-9651-4e81-828c-7a94da7d9ee2/1/rmrw1fOCidNMIbpnxMOXh6QqZp4.mft
File: rmrw1fOCidNMIbpnxMOXh6QqZp4.mft (raw, json)
Hash identifier: RR4Kp8uhxzINZoStJ4Xgbb4Y61iJq1PEnrfaPaMr+Jk=
Subject key identifier: 67:74:64:F8:46:56:33:9E:2A:42:E4:C6:21:01:2D:95:64:BB:FC:7A
Authority key identifier: AE:6A:F0:D5:F3:82:89:D3:4C:21:BA:67:C4:C3:97:87:A4:2A:66:9E
Certificate issuer: /CN=ae6af0d5f38289d34c21ba67c4c39787a42a669e
Certificate serial: 0194BCAA53EC38397D9E294E0DC2CBBA2F93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rmrw1fOCidNMIbpnxMOXh6QqZp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/def555-9651-4e81-828c-7a94da7d9ee2/1/rmrw1fOCidNMIbpnxMOXh6QqZp4.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 14:01:06 +0000
Manifest this update: Fri 31 Jan 2025 14:01:06 +0000
Manifest next update: Sat 01 Feb 2025 14:01:06 +0000
Files and hashes: 1: W8HdoS1T8uaMpM9YFeme5afjmm8.roa (hash: MVcxUXAqk+tB4gBwDZOl3zZvyfrQXKh2vGJmtjrVMqc=)
2: dC665gBaSCufZLjae0l6pAdLs6Q.roa (hash: kur7Pc6RtMGt0xkEhTapoaHBlvXxGfD2IjX+NyztpmY=)
3: rmrw1fOCidNMIbpnxMOXh6QqZp4.crl (hash: WadAJoTszhVfRj7CeC44/i3fmj8wD/YV55x7cm3rQgU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:53:ec:38:39:7d:9e:29:4e:0d:c2:cb:ba:2f:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae6af0d5f38289d34c21ba67c4c39787a42a669e
Validity
Not Before: Jan 31 14:01:06 2025 GMT
Not After : Feb 1 14:01:06 2025 GMT
Subject: CN=677464f84656339e2a42e4c621012d9564bbfc7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:8b:58:08:53:90:db:00:df:d2:a5:0b:db:10:
b2:2b:6f:4a:ab:99:6d:e2:6a:23:32:0f:37:87:4c:
c2:fe:74:a9:87:e6:26:95:3f:9a:5a:0a:56:7e:0e:
58:37:df:d2:f9:fc:62:68:66:c8:2d:f5:09:94:fe:
02:87:c1:9a:ba:7a:e5:d0:76:ab:cc:3e:94:05:09:
d1:90:d4:2a:75:6a:0f:a6:5d:08:1a:78:4d:d0:ee:
ef:1e:c3:c9:53:b0:9f:e8:36:e8:eb:2e:3e:e7:4b:
7c:6a:09:42:ef:f7:45:78:1d:6b:ce:c4:30:c9:2d:
d4:ad:e1:a4:4a:32:b7:a2:5c:3b:d1:2a:2d:7e:ca:
8e:44:c8:0c:f8:10:20:2c:95:48:c7:e7:80:f0:81:
8a:a2:01:44:59:ad:b6:2f:fb:36:21:9d:bd:74:c3:
75:08:cc:21:e3:e2:dc:d2:87:bf:b2:62:48:d6:69:
dd:e4:f1:88:21:85:a6:11:d5:48:20:cf:84:31:8d:
27:96:2c:40:68:5b:bc:1b:27:48:d4:4e:f5:bf:a9:
32:1d:20:47:c2:ac:af:73:5d:94:4b:ed:3d:66:ea:
51:82:a8:72:84:b8:c1:c8:82:9b:47:5e:8e:72:9d:
c4:ef:75:a5:b0:8a:ed:94:45:c8:8f:01:40:90:ce:
6b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:74:64:F8:46:56:33:9E:2A:42:E4:C6:21:01:2D:95:64:BB:FC:7A
X509v3 Authority Key Identifier:
keyid:AE:6A:F0:D5:F3:82:89:D3:4C:21:BA:67:C4:C3:97:87:A4:2A:66:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rmrw1fOCidNMIbpnxMOXh6QqZp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/def555-9651-4e81-828c-7a94da7d9ee2/1/rmrw1fOCidNMIbpnxMOXh6QqZp4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/def555-9651-4e81-828c-7a94da7d9ee2/1/rmrw1fOCidNMIbpnxMOXh6QqZp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:da:ae:81:ae:8d:3a:4e:ea:9f:d4:f5:1b:3d:12:44:0d:5d:
05:08:b9:80:78:74:7e:11:de:cb:e0:dd:f2:e8:5e:df:2c:34:
3d:be:27:cd:ae:67:42:56:17:c5:12:f4:c1:7d:1f:30:17:13:
69:cd:f0:f7:2b:da:cb:8e:3e:11:e7:bf:0f:ab:d6:35:e9:9e:
83:2c:af:96:25:34:06:44:dc:e5:b3:a0:79:06:74:af:63:62:
43:8a:6b:97:eb:26:4c:2d:7b:74:93:a2:0f:ef:e9:92:16:b7:
81:69:d1:2f:ce:52:f6:70:aa:84:60:2e:5b:8d:38:82:b5:ed:
e6:a4:1e:f1:e8:96:85:6d:88:0b:0c:25:df:75:38:7a:61:c4:
fb:70:67:14:ba:5e:e2:e5:f3:af:48:64:94:8d:d0:b2:5c:53:
3c:74:13:22:6a:1d:02:8f:cd:b2:db:e6:76:35:25:55:cf:32:
99:94:61:de:92:71:14:49:f0:b1:04:91:14:6f:3c:5b:ef:2f:
78:10:ca:c0:7f:95:c0:61:4d:76:0a:f8:14:8a:9d:3d:be:c7:
16:fe:9a:d5:74:99:4d:be:50:d9:75:6d:ca:99:2c:78:e3:29:
1d:50:1f:10:91:df:75:b0:e1:0a:2a:17:82:54:cd:37:51:15:
5d:ee:5b:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 14:38:05 2025 by rpki-client