Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/c5e52a-8023-47ac-b27a-4aebefac49b1/1/RbUATsPPXBp1UYXW9AaDxkbMlOw.mft
File: RbUATsPPXBp1UYXW9AaDxkbMlOw.mft (raw, json)
Hash identifier: nuifZDy1EnwhM/An1ZiX1Y7bK+IDIjE4dj1U/CP7D1k=
Subject key identifier: A1:BF:0E:1B:2E:6A:A4:5D:D7:40:86:E7:84:EB:2B:D4:7F:97:28:34
Authority key identifier: 45:B5:00:4E:C3:CF:5C:1A:75:51:85:D6:F4:06:83:C6:46:CC:94:EC
Certificate issuer: /CN=45b5004ec3cf5c1a755185d6f40683c646cc94ec
Certificate serial: 0194BCE0C49559D2FD33266DE254FAEFF2BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RbUATsPPXBp1UYXW9AaDxkbMlOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/c5e52a-8023-47ac-b27a-4aebefac49b1/1/RbUATsPPXBp1UYXW9AaDxkbMlOw.mft
Manifest number: 0867
Signing time: Fri 31 Jan 2025 15:00:34 +0000
Manifest this update: Fri 31 Jan 2025 15:00:34 +0000
Manifest next update: Sat 01 Feb 2025 15:00:34 +0000
Files and hashes: 1: RbUATsPPXBp1UYXW9AaDxkbMlOw.crl (hash: GiuULXa+uwjV0esrLtS8ccEpdkEbqxDtyMrWEfhFXFw=)
2: cg41KOlM1vNAwrdMnvNHppcwT4c.roa (hash: QsQ4ZMCLxuolAifAsH1HBIsIugUjZ4tjy04rNn/2wxI=)
3: iuqsr8mDy4hdl6U1K1v1iSpNchQ.roa (hash: 1qvvVB0UpfZrwtI6t2Uw+kulc+5R7APEpoKz6kq0OuA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:c4:95:59:d2:fd:33:26:6d:e2:54:fa:ef:f2:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45b5004ec3cf5c1a755185d6f40683c646cc94ec
Validity
Not Before: Jan 31 15:00:34 2025 GMT
Not After : Feb 1 15:00:34 2025 GMT
Subject: CN=a1bf0e1b2e6aa45dd74086e784eb2bd47f972834
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:dd:42:cf:28:20:79:c0:b1:ce:45:7a:70:d8:
5e:81:05:10:76:f3:e8:3d:49:8c:c5:1f:6c:ee:23:
6b:16:67:0a:e6:f1:75:59:5e:4e:9e:e8:69:18:20:
03:76:2c:c3:a0:06:e7:77:b9:a6:ed:69:5b:f8:1a:
8f:89:f6:9f:ac:f3:e2:d6:f6:d5:ae:c3:9c:04:7b:
f5:25:21:90:13:eb:7c:2b:f1:34:30:c3:0e:d4:40:
0c:d4:09:7a:ec:39:e2:e4:b0:06:2f:35:2f:18:46:
21:33:7e:e4:20:ac:85:da:48:21:64:69:07:c8:96:
03:3a:99:8c:42:b3:5f:62:e3:c0:e8:62:42:d1:10:
0f:52:23:ec:14:9d:b8:b5:93:17:bb:c4:63:5e:67:
24:7c:32:b0:17:a2:84:7f:ba:59:a8:8f:f4:6e:71:
1a:56:cb:d6:bb:ce:d4:d8:f0:ab:6c:af:31:56:bc:
59:33:13:d9:9a:18:16:5e:e8:6f:d8:24:0d:e5:df:
fc:48:5f:5f:f5:0f:8a:ee:3e:29:24:e2:24:12:8c:
66:47:ec:b7:8a:3a:16:f4:68:ef:71:6f:1d:4f:d7:
9a:af:48:2b:0b:8c:69:55:53:5b:19:d0:4f:11:6f:
fe:d5:55:a4:7a:8d:f9:79:44:bd:b9:73:42:54:fc:
5d:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:BF:0E:1B:2E:6A:A4:5D:D7:40:86:E7:84:EB:2B:D4:7F:97:28:34
X509v3 Authority Key Identifier:
keyid:45:B5:00:4E:C3:CF:5C:1A:75:51:85:D6:F4:06:83:C6:46:CC:94:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RbUATsPPXBp1UYXW9AaDxkbMlOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c5e52a-8023-47ac-b27a-4aebefac49b1/1/RbUATsPPXBp1UYXW9AaDxkbMlOw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c5e52a-8023-47ac-b27a-4aebefac49b1/1/RbUATsPPXBp1UYXW9AaDxkbMlOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:0b:3b:b7:2c:76:43:a8:24:91:0f:a9:75:46:72:65:34:47:
8b:0b:9c:81:eb:18:ec:5b:d5:06:ad:9b:8e:8f:76:b3:93:aa:
91:d6:ef:c1:25:80:b2:63:39:30:b6:22:9b:a4:c0:c5:b6:54:
fd:69:32:f9:14:88:08:82:e0:c5:0a:17:eb:c9:b4:0a:1c:a6:
c0:5e:0b:6f:92:6f:e5:ee:d4:53:a9:92:b5:93:a9:4a:5c:a0:
37:c4:93:09:99:6c:72:12:fe:db:79:e2:02:01:b2:9e:3c:4e:
2b:17:17:d0:34:75:32:b0:47:7e:3e:66:b1:7e:9e:f2:5a:92:
ab:3a:07:8e:88:72:04:00:d2:e9:09:22:e2:2c:5d:d5:ae:df:
a5:80:51:18:ef:8c:e4:9e:9a:b7:bf:63:d9:04:fb:8a:58:1f:
9a:55:ce:81:cb:f5:bb:34:8b:e3:ae:15:11:a5:cd:7c:cf:31:
33:36:fa:a6:ec:ef:50:2b:fc:e6:48:83:3d:29:b3:f4:7f:eb:
54:60:8f:24:0a:4f:23:3e:e4:81:c6:08:04:17:73:3f:4b:e7:
ef:47:7d:66:37:b8:b1:be:a5:39:ee:3b:f6:bb:f8:6e:07:2d:
96:79:15:a6:15:62:2f:77:d0:af:40:96:d3:67:84:d8:a2:c8:
0e:b7:90:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:35 2025 by rpki-client