Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/27c6a1-1c94-4a49-8e3d-9fd503970ff0/1/rUZjafOSfaDIn7X0s-qeMk-SioQ.mft
File: rUZjafOSfaDIn7X0s-qeMk-SioQ.mft (raw, json)
Hash identifier: gV/gaHx3dOPaZxUiN/cekukJdW5yKDyA7uKl8/hiKeg=
Subject key identifier: 9D:D7:60:BD:6E:04:8F:21:D0:0F:1E:DA:CE:EE:93:D7:A6:CB:23:29
Authority key identifier: AD:46:63:69:F3:92:7D:A0:C8:9F:B5:F4:B3:EA:9E:32:4F:92:8A:84
Certificate issuer: /CN=ad466369f3927da0c89fb5f4b3ea9e324f928a84
Certificate serial: 0194BD4EAE7FC3BBC5263FF037538F583794
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rUZjafOSfaDIn7X0s-qeMk-SioQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/27c6a1-1c94-4a49-8e3d-9fd503970ff0/1/rUZjafOSfaDIn7X0s-qeMk-SioQ.mft
Manifest number: 0441
Signing time: Fri 31 Jan 2025 17:00:37 +0000
Manifest this update: Fri 31 Jan 2025 17:00:37 +0000
Manifest next update: Sat 01 Feb 2025 17:00:37 +0000
Files and hashes: 1: e2krXZzkR-AkHScvd476IUHzrz0.roa (hash: KJC7yZeLdAZIJXLO5En/1DBnqhI+LO45sglWIneobpg=)
2: rUZjafOSfaDIn7X0s-qeMk-SioQ.crl (hash: hyeZ6+PaL7+BnpoBPO7JdRImLDUyuyUnxlCEkMXxLoU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:ae:7f:c3:bb:c5:26:3f:f0:37:53:8f:58:37:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad466369f3927da0c89fb5f4b3ea9e324f928a84
Validity
Not Before: Jan 31 17:00:37 2025 GMT
Not After : Feb 1 17:00:37 2025 GMT
Subject: CN=9dd760bd6e048f21d00f1edaceee93d7a6cb2329
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:0b:55:2d:39:60:b1:05:f8:d8:f4:36:e5:e3:
e3:65:02:0e:81:63:a9:26:bc:85:34:9a:b6:b9:6a:
ec:f6:b7:47:d4:c0:ab:c0:8b:d0:ff:39:fe:f7:af:
90:bb:c7:9c:40:70:14:23:53:9a:94:fc:a2:7a:86:
93:48:58:f4:e9:2c:5c:32:bc:03:39:fe:e2:b9:40:
05:21:78:23:35:2f:5f:e6:bd:91:78:65:a6:f8:4d:
91:66:b6:08:63:bc:03:89:34:d2:b8:74:39:65:c5:
38:f0:42:c7:56:55:58:38:98:74:1c:7a:5f:7d:a2:
a9:10:63:31:2a:92:c8:d3:07:38:f2:60:f9:3b:62:
ab:19:e5:1d:69:b8:20:29:57:c0:a6:41:60:ac:38:
81:d5:b5:bd:ea:25:79:3e:6d:03:8e:76:52:e1:73:
9c:ed:39:34:ce:fd:a8:ee:49:a3:98:d1:5e:c2:28:
24:2e:aa:19:9c:a5:49:fe:66:12:fa:f2:36:3f:bb:
f8:7a:0f:03:93:2f:c9:33:4f:51:9a:ec:bf:e5:42:
fb:e4:85:7a:0a:94:f1:16:79:b0:55:6c:02:9c:09:
24:76:a1:70:65:ab:12:b8:34:96:c3:d6:94:f4:bb:
03:10:b3:31:41:0d:9a:ff:9a:9f:4e:fd:95:30:76:
4f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:D7:60:BD:6E:04:8F:21:D0:0F:1E:DA:CE:EE:93:D7:A6:CB:23:29
X509v3 Authority Key Identifier:
keyid:AD:46:63:69:F3:92:7D:A0:C8:9F:B5:F4:B3:EA:9E:32:4F:92:8A:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rUZjafOSfaDIn7X0s-qeMk-SioQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/27c6a1-1c94-4a49-8e3d-9fd503970ff0/1/rUZjafOSfaDIn7X0s-qeMk-SioQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/27c6a1-1c94-4a49-8e3d-9fd503970ff0/1/rUZjafOSfaDIn7X0s-qeMk-SioQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:2e:3d:5e:c7:c7:af:8c:f7:66:72:97:63:fd:b3:9f:4b:0f:
3a:e4:96:07:35:bf:fa:8e:4e:06:22:e0:71:fb:29:4b:7d:cb:
27:da:e8:58:5e:7b:69:de:9c:75:6d:de:0c:0d:59:ca:e9:e8:
64:9e:bd:ea:84:1e:95:c2:2a:37:26:bd:1b:3a:f9:a4:98:15:
c0:ac:0c:5c:fb:7f:25:69:64:cc:b6:26:59:86:10:48:59:58:
0d:ef:59:33:a0:85:e1:55:20:cb:06:c3:25:66:d9:79:ff:e1:
e7:9d:e0:24:3f:8b:68:24:ae:fc:e1:06:b2:e8:48:17:fb:5c:
a2:df:a1:3f:fb:82:c5:31:c8:e9:4a:04:3d:06:46:9a:70:86:
f5:2d:95:8e:5e:00:68:fd:b6:f2:c0:2d:3a:4e:2b:ca:6f:1a:
19:38:5d:4c:ac:86:d9:9b:98:aa:d2:54:67:80:4d:14:0c:04:
ec:0c:4e:83:ad:65:35:e4:c4:d2:79:45:81:3d:7e:07:38:f7:
db:19:2a:e4:55:25:d2:72:11:8f:15:11:f1:77:91:2d:3a:bc:
fe:3e:43:fc:d4:52:51:a7:25:34:fe:15:71:90:b1:3f:e2:f3:
11:f0:3b:5d:40:67:a0:5c:fe:75:f2:38:ac:48:60:7f:05:5a:
b0:81:74:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:04:03 2025 by rpki-client