Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/bab194-5e24-4ead-8f49-37ed99143aae/1/RPiFIg8XGfWDfLWjb6YvP1N-jj8.mft
File: RPiFIg8XGfWDfLWjb6YvP1N-jj8.mft (raw, json)
Hash identifier: DjB97ix9c+8RRjk8vLSzApOaWG89ma+N1/y+x1yR3DQ=
Subject key identifier: 1E:E9:CF:C7:7B:7E:C1:6B:C6:DE:FC:6D:C3:6E:CB:91:F9:70:88:F7
Authority key identifier: 44:F8:85:22:0F:17:19:F5:83:7C:B5:A3:6F:A6:2F:3F:53:7E:8E:3F
Certificate issuer: /CN=44f885220f1719f5837cb5a36fa62f3f537e8e3f
Certificate serial: 0194BD4E80BE6BB81AE69113CA26FBBA28DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RPiFIg8XGfWDfLWjb6YvP1N-jj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/bab194-5e24-4ead-8f49-37ed99143aae/1/RPiFIg8XGfWDfLWjb6YvP1N-jj8.mft
Manifest number: 113A
Signing time: Fri 31 Jan 2025 17:00:26 +0000
Manifest this update: Fri 31 Jan 2025 17:00:26 +0000
Manifest next update: Sat 01 Feb 2025 17:00:26 +0000
Files and hashes: 1: 7IOpXXsSdgZOXKMUMqGRoYqSO7Y.roa (hash: eWhYbG4w7zhq0NpzbdSAGZQzXbPmck0Kggk9IJsP8fM=)
2: 8McigDSjzbaDusYUdfACWlAEraE.roa (hash: 8SiJAwZ4dMuVXUj8DbNfpd2t9t4+7zlehuNbJBAbbw4=)
3: RPiFIg8XGfWDfLWjb6YvP1N-jj8.crl (hash: njRXY+/Uqy7d+GZG00Zj3peFgQS5p/K9APBu/DTWRXg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:80:be:6b:b8:1a:e6:91:13:ca:26:fb:ba:28:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44f885220f1719f5837cb5a36fa62f3f537e8e3f
Validity
Not Before: Jan 31 17:00:26 2025 GMT
Not After : Feb 1 17:00:26 2025 GMT
Subject: CN=1ee9cfc77b7ec16bc6defc6dc36ecb91f97088f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:3b:31:f0:f2:89:b3:b1:e5:c6:37:22:6e:83:
3c:26:be:29:00:77:b6:86:1c:57:9c:12:99:61:98:
09:78:ee:98:9c:d0:47:bf:8f:42:4a:51:ab:3c:21:
47:e0:a4:5e:8a:24:7a:c5:0a:98:34:0a:63:3d:40:
8b:d6:86:6a:eb:e4:55:2e:7c:e6:b4:04:08:50:2b:
56:42:cf:d9:14:07:9c:c9:50:5c:a8:56:90:36:c9:
c5:5d:f7:a8:46:c7:2a:68:1e:17:ee:e4:30:08:14:
fe:0d:67:61:c0:0d:f8:30:99:7d:5e:48:80:a2:c4:
f0:36:bb:91:11:07:be:33:1b:cf:88:e1:70:77:fe:
24:ce:53:f3:dc:f3:42:2d:2c:db:9b:11:ec:89:86:
7a:8d:57:75:90:8f:91:88:8d:91:cd:f5:32:c1:5a:
cc:a9:60:d8:23:04:64:17:97:da:d1:0f:6a:5f:eb:
72:5d:87:7a:87:e6:b0:e0:40:93:ec:2a:1b:65:54:
3c:39:b0:dd:75:3a:0c:19:ca:93:7e:de:9b:51:c4:
58:4e:00:00:5b:2e:b9:26:ce:4a:2a:af:e8:a2:24:
72:2c:92:e9:1d:c3:df:2f:06:22:74:1c:12:f8:f8:
08:7f:48:1a:db:4b:e0:85:b6:49:5d:7c:b9:39:b5:
04:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:E9:CF:C7:7B:7E:C1:6B:C6:DE:FC:6D:C3:6E:CB:91:F9:70:88:F7
X509v3 Authority Key Identifier:
keyid:44:F8:85:22:0F:17:19:F5:83:7C:B5:A3:6F:A6:2F:3F:53:7E:8E:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPiFIg8XGfWDfLWjb6YvP1N-jj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/bab194-5e24-4ead-8f49-37ed99143aae/1/RPiFIg8XGfWDfLWjb6YvP1N-jj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/bab194-5e24-4ead-8f49-37ed99143aae/1/RPiFIg8XGfWDfLWjb6YvP1N-jj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:cf:dd:15:28:e2:79:20:ef:ef:00:d7:5f:93:46:fb:a1:56:
ce:aa:3e:36:4a:38:4a:09:a9:6e:29:0d:8b:0f:46:83:ab:30:
9c:75:62:34:cd:fe:04:fb:48:06:36:9c:c9:dc:a0:42:da:df:
43:6d:80:d5:65:93:cc:ab:f0:36:61:3a:f5:9f:d0:10:3a:7f:
58:47:90:d0:a2:16:25:f6:a1:47:a6:4e:40:4a:f8:29:f2:32:
7d:92:b8:9e:50:be:4d:38:1b:ea:ac:cf:ac:62:0d:4b:d3:45:
1a:59:21:43:f2:32:ca:21:43:de:07:18:2c:39:5b:19:33:ad:
0f:bc:be:3b:d4:32:a0:f1:d8:77:49:ea:80:c2:8e:97:a4:1e:
dc:0a:35:a7:13:d9:66:28:fd:e1:73:31:43:9c:9b:ad:92:15:
95:7a:21:6b:b7:68:42:9e:5a:07:63:36:3a:5e:0b:cf:da:5d:
16:ff:79:63:cf:73:d9:6c:9a:a2:ce:6e:74:91:af:7b:3e:f1:
d8:9e:3f:37:35:41:8b:7a:18:d8:61:a0:94:f1:34:30:fe:89:
d6:4c:00:18:8a:7a:10:a8:57:4a:f7:52:18:3c:52:ac:fd:d3:
85:93:8e:7c:82:3a:67:47:92:f3:1a:9d:69:71:c5:d0:cc:bd:
c1:a7:62:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:55:32 2025 by rpki-client