Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/RENP2YwR2Nct84DKg-33n8wAhZ8.mft
File: RENP2YwR2Nct84DKg-33n8wAhZ8.mft (raw, json)
Hash identifier: ySKi+WO+mEpueyw9Eyp2wC8K58P0aSnuWci4waCIurA=
Subject key identifier: 91:A0:6E:61:92:F9:8E:13:25:B6:62:55:C0:FA:03:BD:95:C8:DC:9D
Authority key identifier: 44:43:4F:D9:8C:11:D8:D7:2D:F3:80:CA:83:ED:F7:9F:CC:00:85:9F
Certificate issuer: /CN=44434fd98c11d8d72df380ca83edf79fcc00859f
Certificate serial: 0194BD1770C26D8137C4EFDF73CE04A22FC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RENP2YwR2Nct84DKg-33n8wAhZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/RENP2YwR2Nct84DKg-33n8wAhZ8.mft
Manifest number: 0893
Signing time: Fri 31 Jan 2025 16:00:17 +0000
Manifest this update: Fri 31 Jan 2025 16:00:17 +0000
Manifest next update: Sat 01 Feb 2025 16:00:17 +0000
Files and hashes: 1: 0k2RQNwafgZ-e81VbpAz2vrqb3k.roa (hash: F4mQI6q3szQ65tq8yOXleP2UVhZpsKUbEGpteoYml/c=)
2: RENP2YwR2Nct84DKg-33n8wAhZ8.crl (hash: PVzsRPe6EFIb3wtwzTKvdNFxh6zR4h513AazOUI1JLk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:70:c2:6d:81:37:c4:ef:df:73:ce:04:a2:2f:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44434fd98c11d8d72df380ca83edf79fcc00859f
Validity
Not Before: Jan 31 16:00:17 2025 GMT
Not After : Feb 1 16:00:17 2025 GMT
Subject: CN=91a06e6192f98e1325b66255c0fa03bd95c8dc9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d6:c1:34:62:e8:a1:59:46:8f:e9:61:f4:a0:
92:f9:41:2e:02:eb:21:0a:ab:e5:7c:60:1d:0a:59:
83:ee:2b:0c:1d:1a:3d:88:77:ff:15:fd:bd:b7:dc:
2a:32:f0:de:fc:62:3a:66:46:9b:52:ac:74:ae:8e:
ea:37:18:58:2c:35:c2:cb:a1:38:c5:72:8e:89:41:
b0:5a:3f:b0:e8:d6:5d:96:75:21:85:aa:a4:4d:c5:
ae:1a:ba:30:55:a1:48:d7:de:f5:5e:ff:3a:5f:c6:
44:e1:b4:55:65:01:71:5f:d9:2c:f0:af:c1:91:81:
70:c1:56:16:38:c6:b0:96:8f:1f:63:d9:c2:61:fa:
ed:c1:6f:4b:25:dc:b7:20:46:6b:87:96:bb:94:22:
c3:99:13:44:d5:0e:32:49:0d:f6:c7:90:c2:05:07:
8f:d2:28:fd:1f:3d:cf:51:ed:4e:dc:dd:00:40:b2:
71:eb:7c:31:72:e2:ca:33:97:38:50:43:f9:2d:08:
2d:51:e1:0e:a9:46:0f:b6:d1:d4:0e:c8:5a:2c:88:
00:b1:1d:7b:4e:f8:35:d7:1d:ac:5d:c1:f0:c7:11:
f2:6f:a5:61:1b:e7:e5:d0:99:dc:3f:b7:b7:a1:8f:
e9:11:ca:59:34:3e:78:70:38:1c:fc:3d:88:1b:2d:
90:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:A0:6E:61:92:F9:8E:13:25:B6:62:55:C0:FA:03:BD:95:C8:DC:9D
X509v3 Authority Key Identifier:
keyid:44:43:4F:D9:8C:11:D8:D7:2D:F3:80:CA:83:ED:F7:9F:CC:00:85:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RENP2YwR2Nct84DKg-33n8wAhZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/RENP2YwR2Nct84DKg-33n8wAhZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/RENP2YwR2Nct84DKg-33n8wAhZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:2c:85:9b:b1:f4:ec:43:d6:54:fd:b0:65:8c:dc:d0:f7:06:
fc:53:74:19:60:a8:4f:9b:55:f6:43:12:84:8a:8b:0f:0e:63:
69:dd:5f:31:71:25:4a:8d:81:21:1e:c4:ba:47:91:d7:c0:c5:
8c:fb:5d:0c:45:74:be:5f:46:fb:6c:07:25:21:cd:bd:50:d2:
0b:fa:db:48:d2:ca:e9:56:53:d3:1e:f8:b5:e8:85:97:35:4f:
34:71:11:43:91:0a:7f:87:c9:a1:d0:3a:5c:09:12:c1:93:b5:
f7:20:20:08:61:32:5d:a0:bb:5a:17:8d:4d:e7:b9:2d:69:59:
11:e9:e5:58:fe:2c:d3:2f:4f:79:05:72:0c:6b:ba:76:90:35:
8b:aa:7d:cf:24:64:84:af:e2:27:0d:7b:0d:8a:c9:1f:c4:f6:
c5:0a:63:79:c3:27:d7:d0:d0:2a:de:e1:a3:3d:22:cc:37:2f:
ba:17:ef:cf:af:66:3c:38:f1:36:1f:e7:7c:26:58:42:fc:e2:
93:e9:32:3f:40:f3:01:fa:19:3c:94:a7:c3:26:ef:73:83:6c:
bc:ed:98:32:f1:13:05:c0:46:ee:02:54:63:c8:af:61:73:48:
7b:af:93:a0:d7:17:01:9b:7e:ad:64:f6:f0:f1:05:38:d6:92:
49:45:2a:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:17:38 2025 by rpki-client