Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/8920fc-bbae-4132-b752-ee72f2b3a473/1/Rc-dwMe3_Eozbk7uV7HsGUjI3fM.mft
File: Rc-dwMe3_Eozbk7uV7HsGUjI3fM.mft (raw, json)
Hash identifier: YfkYaXKts/aNzc7dPgg/2vzaScvfe52HV+k43pWDTpU=
Subject key identifier: 3A:3E:CB:2F:EC:F6:66:11:45:CE:C5:D8:B1:4D:BB:03:22:12:23:3B
Authority key identifier: 45:CF:9D:C0:C7:B7:FC:4A:33:6E:4E:EE:57:B1:EC:19:48:C8:DD:F3
Certificate issuer: /CN=45cf9dc0c7b7fc4a336e4eee57b1ec1948c8ddf3
Certificate serial: 0194BD1798997A1B5D23C2002229BAD6E747
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rc-dwMe3_Eozbk7uV7HsGUjI3fM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/8920fc-bbae-4132-b752-ee72f2b3a473/1/Rc-dwMe3_Eozbk7uV7HsGUjI3fM.mft
Manifest number: 0EAE
Signing time: Fri 31 Jan 2025 16:00:27 +0000
Manifest this update: Fri 31 Jan 2025 16:00:27 +0000
Manifest next update: Sat 01 Feb 2025 16:00:27 +0000
Files and hashes: 1: Rc-dwMe3_Eozbk7uV7HsGUjI3fM.crl (hash: RRW0gBtAO/JPJJ/l2dglyqeEL9MXvjHbb49FFCfuz8k=)
2: o6lJ-qfhS9C09IpxbbRvCOiFoHM.roa (hash: s9YF0YMackzUIop5+kUK7Z2zh1o4IPsYyQyvrXKhSCc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:98:99:7a:1b:5d:23:c2:00:22:29:ba:d6:e7:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45cf9dc0c7b7fc4a336e4eee57b1ec1948c8ddf3
Validity
Not Before: Jan 31 16:00:27 2025 GMT
Not After : Feb 1 16:00:27 2025 GMT
Subject: CN=3a3ecb2fecf6661145cec5d8b14dbb032212233b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:29:f8:c8:ad:1d:44:8f:ad:a3:ba:50:47:60:
43:79:db:5c:9f:32:b3:79:60:a6:b0:73:4b:50:74:
cc:76:3a:37:f6:41:54:2f:c3:f1:87:ce:b2:45:ba:
70:99:db:8d:71:a9:ec:51:cd:b9:c3:09:32:9f:ea:
ba:b5:ef:1c:2c:1d:91:2f:ec:a6:f7:d7:6b:ad:0b:
1e:0f:88:f0:3e:51:28:48:86:21:45:a0:57:8b:02:
c2:bb:be:3c:42:8a:a5:ad:a0:21:7a:1a:b5:b4:6e:
49:4d:51:f4:d6:88:ce:cb:44:93:7d:ad:1d:0d:f2:
58:f2:33:94:73:5b:bb:6a:a0:7f:ee:a2:ad:9b:ea:
72:37:04:85:da:41:53:f8:9f:17:a6:87:1c:1a:5c:
05:7e:14:22:8d:53:c0:a3:59:a4:e7:f0:3a:70:61:
85:1e:4a:f7:df:fb:a6:5d:31:32:f5:1b:d2:9f:83:
49:fb:e0:9d:cc:da:f5:2a:12:11:62:93:53:be:d3:
fe:ae:34:ef:66:cd:b0:af:9e:56:4d:fd:16:7a:73:
f7:c4:c9:70:f0:df:0f:68:61:95:75:38:3e:89:1f:
51:e7:38:03:d1:7b:8c:2f:7a:fa:e1:64:10:12:b9:
f8:cf:78:6f:01:ef:44:f4:d1:80:2e:d3:4a:69:50:
8a:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:3E:CB:2F:EC:F6:66:11:45:CE:C5:D8:B1:4D:BB:03:22:12:23:3B
X509v3 Authority Key Identifier:
keyid:45:CF:9D:C0:C7:B7:FC:4A:33:6E:4E:EE:57:B1:EC:19:48:C8:DD:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rc-dwMe3_Eozbk7uV7HsGUjI3fM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/8920fc-bbae-4132-b752-ee72f2b3a473/1/Rc-dwMe3_Eozbk7uV7HsGUjI3fM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/8920fc-bbae-4132-b752-ee72f2b3a473/1/Rc-dwMe3_Eozbk7uV7HsGUjI3fM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:6f:a2:fb:9a:9d:00:fd:44:56:c8:23:99:de:d5:4d:e5:a6:
55:d4:51:4f:ea:6c:f0:a2:73:1c:6b:47:0c:b7:bd:ad:fe:d0:
c0:86:4a:33:08:ca:e6:b1:1f:2d:5c:b7:2e:11:24:3e:62:65:
93:91:02:a5:c6:a7:65:f0:f4:56:94:ee:ec:11:5b:a5:fd:9f:
b4:36:ad:56:d8:19:40:7f:f8:84:e3:69:47:c6:ac:b2:ea:f2:
be:9b:de:f7:d1:b6:46:79:78:d9:b5:37:9c:72:2a:67:bc:d9:
4c:74:51:3d:08:9f:ef:58:5c:07:05:d4:d9:a7:91:f5:85:54:
74:a0:84:5f:e9:27:dd:f3:90:f1:99:fc:ba:e9:f2:7b:0b:45:
95:9b:b1:d4:f9:84:bf:ec:8f:70:f4:b3:12:67:38:4c:4d:dd:
10:eb:be:86:d4:06:11:a8:cb:59:32:37:45:bf:5b:c2:cd:d5:
8b:f3:7f:2f:a7:f9:4c:9c:b0:ba:07:e4:36:01:1c:11:61:63:
0b:f6:45:25:d1:16:d9:fb:94:92:0e:a4:22:53:1d:75:59:9b:
28:e8:fc:cf:0c:d5:1c:48:16:8c:b7:a7:b5:19:df:51:32:11:
bb:56:4d:5d:14:df:a9:4f:80:3f:72:81:13:9a:be:3c:f0:d1:
57:9b:24:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:07 2025 by rpki-client