Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/8eb453-a3eb-4500-a7e0-32de5858ba6c/1/RTGtRuC5wBDNKIXmACwaW5PNURI.mft
File: RTGtRuC5wBDNKIXmACwaW5PNURI.mft (raw, json)
Hash identifier: 7b8g5GXz8qV5mk/2jLqDLpUPTMJRTV67yJQ/zKDEmJM=
Subject key identifier: 28:61:57:34:E9:05:18:F0:AC:09:10:CE:AB:30:AB:11:51:43:B1:AE
Authority key identifier: 45:31:AD:46:E0:B9:C0:10:CD:28:85:E6:00:2C:1A:5B:93:CD:51:12
Certificate issuer: /CN=4531ad46e0b9c010cd2885e6002c1a5b93cd5112
Certificate serial: 0194BC3C3B56CBEE80B3DCDC66507CCEFB2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RTGtRuC5wBDNKIXmACwaW5PNURI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/8eb453-a3eb-4500-a7e0-32de5858ba6c/1/RTGtRuC5wBDNKIXmACwaW5PNURI.mft
Manifest number: 137E
Signing time: Fri 31 Jan 2025 12:00:51 +0000
Manifest this update: Fri 31 Jan 2025 12:00:51 +0000
Manifest next update: Sat 01 Feb 2025 12:00:51 +0000
Files and hashes: 1: N4NMmlfe9DF5a3SAVtfSEbM2wfQ.roa (hash: 8UZlWmjB6Dnz8NNshRUlMhAJBpkzaL1ZPtLOI64Gvsw=)
2: RTGtRuC5wBDNKIXmACwaW5PNURI.crl (hash: WivXKej1wind9rcjXTaSD4rX43/INhfvN82t1rijQno=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:3b:56:cb:ee:80:b3:dc:dc:66:50:7c:ce:fb:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4531ad46e0b9c010cd2885e6002c1a5b93cd5112
Validity
Not Before: Jan 31 12:00:51 2025 GMT
Not After : Feb 1 12:00:51 2025 GMT
Subject: CN=28615734e90518f0ac0910ceab30ab115143b1ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:eb:14:f7:01:37:b7:4b:cb:a2:21:f6:f7:3d:
4a:2e:52:52:d6:e3:47:07:2e:42:50:1c:59:96:cd:
05:58:44:32:78:75:80:44:61:30:6b:ad:db:f9:23:
6e:f9:29:93:d0:c7:7f:c2:69:21:8c:2d:28:09:54:
bb:73:2b:70:e5:c3:a0:4c:09:34:f2:ac:09:e9:a7:
20:bd:c2:a9:69:cd:dc:5b:cc:d9:8a:4d:96:63:54:
74:5d:fa:3f:05:25:65:cf:94:22:0a:33:3c:b8:f3:
d9:61:a4:bc:3e:64:47:82:80:81:ac:c5:83:e9:c9:
b8:cb:87:70:30:7d:93:c9:34:3b:06:6f:0a:35:49:
88:e9:2e:32:31:35:cb:02:80:6c:80:55:95:69:da:
d3:5a:ec:f5:9e:73:da:ef:cb:34:3a:a1:77:75:d7:
70:0a:a2:7b:37:23:c3:15:8d:ba:04:5a:7c:f5:8b:
a9:1c:01:4d:70:57:a2:28:2f:be:c8:f2:2e:8a:37:
19:31:cc:0d:23:28:47:8c:43:06:ba:28:79:5d:6b:
1d:1d:0f:7c:3d:31:52:6d:6b:6b:ca:aa:4b:cf:a6:
27:a6:4b:b8:08:fa:10:bc:cb:a0:df:b6:b5:35:03:
c4:5f:97:3c:84:79:14:6d:f2:8d:c5:16:6b:08:7a:
89:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:61:57:34:E9:05:18:F0:AC:09:10:CE:AB:30:AB:11:51:43:B1:AE
X509v3 Authority Key Identifier:
keyid:45:31:AD:46:E0:B9:C0:10:CD:28:85:E6:00:2C:1A:5B:93:CD:51:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RTGtRuC5wBDNKIXmACwaW5PNURI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/8eb453-a3eb-4500-a7e0-32de5858ba6c/1/RTGtRuC5wBDNKIXmACwaW5PNURI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/8eb453-a3eb-4500-a7e0-32de5858ba6c/1/RTGtRuC5wBDNKIXmACwaW5PNURI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:75:8a:89:44:44:05:36:bc:f5:25:a2:86:90:07:e5:89:b7:
53:2c:aa:a7:dd:5e:40:d7:50:cd:aa:ac:11:91:57:65:9e:37:
97:f1:23:b2:fb:37:49:d0:d4:a9:30:5c:81:5e:29:4d:75:8f:
36:5c:35:df:fb:0c:50:3b:5c:8d:31:29:5d:27:9a:3f:33:cc:
81:3f:16:53:7d:b7:a9:03:5f:69:a1:14:02:1a:93:6a:55:0d:
07:38:42:aa:a5:d0:b4:31:e1:90:d6:87:ce:63:01:78:9a:99:
34:77:63:d4:d9:d6:2b:b1:e6:40:f2:85:20:d1:e4:cf:7e:09:
53:7d:c4:53:ed:7d:58:c6:c9:eb:f4:67:72:23:4b:f2:af:8b:
17:d2:7d:59:f8:4f:34:f4:bc:36:99:09:d8:b8:66:c0:77:1f:
07:39:7f:5c:44:39:1b:b5:22:d0:10:1d:83:c2:06:72:2c:51:
30:f3:e0:02:55:bf:0d:9e:be:27:be:b9:9a:44:18:cb:8d:ee:
86:d8:98:a0:70:25:56:24:b3:4e:ff:73:d7:a3:84:b7:2a:7a:
69:fc:5c:f5:9e:23:bc:b7:b3:91:7e:b7:9c:54:35:1d:6a:af:
ec:dd:5a:f6:b2:ff:c5:0e:b8:8c:28:d1:1c:c1:a9:5f:b3:c0:
d5:ed:74:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:14:06 2025 by rpki-client