Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/a68387-861a-4b93-a3fc-adadd6295822/1/rbNlrPb5GEmXB92hPwM-LNYRAwg.mft
File: rbNlrPb5GEmXB92hPwM-LNYRAwg.mft (raw, json)
Hash identifier: DlS1kPAhcgDqISCxYZB2vSOXq3oPkdj3z+siKJDQhfA=
Subject key identifier: 13:3D:BC:19:3D:17:12:FD:DF:E9:FB:0B:EF:02:9C:97:1E:66:95:06
Authority key identifier: AD:B3:65:AC:F6:F9:18:49:97:07:DD:A1:3F:03:3E:2C:D6:11:03:08
Certificate issuer: /CN=adb365acf6f918499707dda13f033e2cd6110308
Certificate serial: 0194BBCEDA840FD280364A9A716F859BFB98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rbNlrPb5GEmXB92hPwM-LNYRAwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/a68387-861a-4b93-a3fc-adadd6295822/1/rbNlrPb5GEmXB92hPwM-LNYRAwg.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 10:01:23 +0000
Manifest this update: Fri 31 Jan 2025 10:01:23 +0000
Manifest next update: Sat 01 Feb 2025 10:01:23 +0000
Files and hashes: 1: rbNlrPb5GEmXB92hPwM-LNYRAwg.crl (hash: +2VCm3Xg78rfLiPjTXmjA91xuZA62VZFCU3pkdq6V6Q=)
2: zexQv7MMnSMTcRcSk7PaXdu5bh4.roa (hash: VAN/TauThH6QEZkrRALg6rnqCv24/be16q83SWwAfVw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:da:84:0f:d2:80:36:4a:9a:71:6f:85:9b:fb:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adb365acf6f918499707dda13f033e2cd6110308
Validity
Not Before: Jan 31 10:01:23 2025 GMT
Not After : Feb 1 10:01:23 2025 GMT
Subject: CN=133dbc193d1712fddfe9fb0bef029c971e669506
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:49:c7:aa:8c:45:c8:08:88:8f:4c:94:ff:75:
b8:ad:89:4d:ba:eb:97:30:ba:11:0a:e2:5f:c0:44:
b0:78:47:56:9d:39:2e:44:7c:21:3b:08:86:da:51:
dd:d0:e6:0c:fc:6c:91:c6:ad:bd:de:e1:84:d1:3d:
ac:e7:12:22:69:96:07:98:6a:87:ee:0d:56:f5:8e:
a3:0b:38:67:b7:91:67:47:b2:b3:39:20:f6:09:d2:
6e:55:53:85:bd:da:46:aa:c7:a2:28:a6:f7:de:2f:
c3:de:a7:cf:44:4e:a2:1f:b9:ca:70:a7:58:41:c7:
3f:55:a6:d8:a2:62:09:56:b6:7d:c5:76:49:54:f4:
59:e2:d0:14:08:5f:8a:09:18:bd:fd:ce:99:54:2d:
24:4d:26:a2:31:4e:23:23:a6:10:d5:a7:5d:87:57:
38:32:aa:f0:ce:cb:af:cc:46:ad:e2:ca:96:34:d4:
41:13:68:83:2f:79:5c:91:5e:e9:23:2f:4b:82:2c:
df:41:c7:45:6a:c4:39:a7:e6:b4:55:05:45:20:c3:
af:6f:84:96:33:87:d8:15:25:b0:32:c6:11:f8:ac:
2e:fe:2f:3c:ff:a9:03:f3:d3:de:4c:80:66:ba:c6:
34:64:ad:c9:e0:c0:52:c4:cb:5a:47:27:2f:ac:c2:
47:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:3D:BC:19:3D:17:12:FD:DF:E9:FB:0B:EF:02:9C:97:1E:66:95:06
X509v3 Authority Key Identifier:
keyid:AD:B3:65:AC:F6:F9:18:49:97:07:DD:A1:3F:03:3E:2C:D6:11:03:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rbNlrPb5GEmXB92hPwM-LNYRAwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/a68387-861a-4b93-a3fc-adadd6295822/1/rbNlrPb5GEmXB92hPwM-LNYRAwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/a68387-861a-4b93-a3fc-adadd6295822/1/rbNlrPb5GEmXB92hPwM-LNYRAwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:78:1d:65:61:de:24:b0:ad:58:d5:8f:49:a8:0d:b2:00:cd:
c5:3d:7c:40:ef:8f:87:4b:b8:34:08:b4:4d:5f:73:5e:8c:df:
01:15:ad:ff:b8:21:77:2c:db:af:ce:42:4e:2e:9f:71:28:b0:
4b:91:3f:1f:21:7c:73:d8:04:b1:0f:f2:7f:09:bd:ad:7c:6b:
c5:76:7d:bb:1f:09:0c:a1:cf:d8:76:0a:13:46:85:44:41:15:
fe:f9:4e:78:d0:4a:a9:7d:7e:73:3c:36:3c:3e:0a:ae:c4:ab:
69:01:31:f4:98:e5:50:81:28:77:f5:73:3d:89:fd:27:02:bf:
7b:4a:41:34:1c:98:ca:28:fc:47:b2:27:b5:66:b8:be:f5:fa:
02:b6:24:b7:a5:e4:ab:89:bd:1a:5a:88:28:d5:a7:79:d6:01:
65:ac:5f:64:04:13:42:2d:0e:d9:f4:c0:b4:2f:d7:ab:be:e1:
99:21:7f:23:02:a6:62:80:6f:53:b1:0b:26:86:05:77:e2:c4:
0f:50:c8:89:02:8e:38:40:9b:72:ed:88:b5:f8:e7:1b:85:6a:
73:46:09:8a:a1:25:60:31:0d:13:8a:46:2e:74:47:84:90:ee:
12:e3:61:50:62:4c:b8:de:62:1f:ff:4e:28:36:49:7b:cc:c6:
14:f8:21:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:14 2025 by rpki-client