Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/fd596a-3f54-4e06-8620-6e0d213f484a/1/r4j95vrbtrLB22_kH4KdHyAVvgs.mft
File: r4j95vrbtrLB22_kH4KdHyAVvgs.mft (raw, json)
Hash identifier: hw/NpqSmZzLJiJ93nWk0bVz+bvqMINQNdxBls8bDEqI=
Subject key identifier: B5:85:08:42:86:6E:A7:69:67:F7:08:55:AA:2A:D3:D4:B9:B5:E2:3A
Authority key identifier: AF:88:FD:E6:FA:DB:B6:B2:C1:DB:6F:E4:1F:82:9D:1F:20:15:BE:0B
Certificate issuer: /CN=af88fde6fadbb6b2c1db6fe41f829d1f2015be0b
Certificate serial: 0194BCA9CE9785BBFDFED2EC1A1CB4EC29B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r4j95vrbtrLB22_kH4KdHyAVvgs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/fd596a-3f54-4e06-8620-6e0d213f484a/1/r4j95vrbtrLB22_kH4KdHyAVvgs.mft
Manifest number: 0AC4
Signing time: Fri 31 Jan 2025 14:00:32 +0000
Manifest this update: Fri 31 Jan 2025 14:00:32 +0000
Manifest next update: Sat 01 Feb 2025 14:00:32 +0000
Files and hashes: 1: RHreYh0WmNugHNPOVP5GHBEiSQE.roa (hash: lDEy9crc1E/w31v0jSsa/vEhnHdpcWtnPtxtDbNUjjc=)
2: r4j95vrbtrLB22_kH4KdHyAVvgs.crl (hash: OOEQ+e9ihpVlshsiJB07dBj85F9Fi4BKhx15w6U3lPw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:ce:97:85:bb:fd:fe:d2:ec:1a:1c:b4:ec:29:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af88fde6fadbb6b2c1db6fe41f829d1f2015be0b
Validity
Not Before: Jan 31 14:00:32 2025 GMT
Not After : Feb 1 14:00:32 2025 GMT
Subject: CN=b5850842866ea76967f70855aa2ad3d4b9b5e23a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f9:b8:e6:8d:a1:79:5e:2a:12:70:49:37:b6:
c9:71:76:5f:24:4c:6f:15:d0:2d:16:13:fd:b7:0a:
d6:c9:db:25:e3:93:79:8d:a3:75:19:47:94:b3:de:
9f:c6:9f:67:d6:ce:ae:0a:91:2a:2a:11:94:bf:22:
7c:50:aa:4d:50:9f:c3:6a:80:c5:5d:18:02:2f:6c:
3d:53:d4:4c:ab:d9:5a:b3:74:c7:30:5e:08:f5:5c:
bb:67:12:94:ab:cd:ce:65:44:c7:04:a1:d0:aa:6e:
5b:c5:01:b6:41:7e:b5:e9:c2:3e:36:4e:22:c0:d8:
89:8f:26:f6:7a:1b:93:ee:86:da:10:d6:c4:c2:55:
c7:7e:46:e5:38:6a:aa:ba:e5:b7:06:a2:6a:65:60:
5f:89:b1:e6:5a:91:26:d2:21:82:7c:d4:10:eb:21:
a2:c0:b2:49:62:0a:67:c4:77:ff:7b:88:cf:47:f0:
2a:f1:7f:39:0e:fd:1a:26:8d:3b:21:bc:c7:80:d3:
35:8b:d4:42:2d:59:27:f4:51:2a:d4:d0:a7:bb:51:
ad:56:40:2c:33:39:65:fc:81:3a:44:50:37:fb:5f:
c7:30:ee:ab:13:6c:5d:12:4f:77:dd:25:e8:32:70:
5f:4c:f2:24:6e:f2:4c:1d:8c:11:6f:d3:48:60:85:
5c:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:85:08:42:86:6E:A7:69:67:F7:08:55:AA:2A:D3:D4:B9:B5:E2:3A
X509v3 Authority Key Identifier:
keyid:AF:88:FD:E6:FA:DB:B6:B2:C1:DB:6F:E4:1F:82:9D:1F:20:15:BE:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r4j95vrbtrLB22_kH4KdHyAVvgs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/fd596a-3f54-4e06-8620-6e0d213f484a/1/r4j95vrbtrLB22_kH4KdHyAVvgs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/fd596a-3f54-4e06-8620-6e0d213f484a/1/r4j95vrbtrLB22_kH4KdHyAVvgs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:bb:2d:ba:80:7e:25:9f:66:2c:cb:ca:84:54:72:c6:79:e8:
f6:f5:8b:e3:2b:8f:3a:45:b8:ba:8a:73:fe:53:eb:af:ee:01:
5a:48:23:7b:d5:cb:b6:51:5e:ed:c2:41:42:e3:13:f8:e2:16:
c4:d3:21:41:56:f4:27:4e:4b:ae:a1:d9:02:a6:38:94:bb:07:
26:67:fa:8d:ac:97:44:4d:a9:94:1c:59:68:dc:ba:45:a3:59:
45:cd:e3:c2:d7:2b:23:6f:9e:99:3f:ff:23:e9:56:1a:04:6f:
b6:1c:59:3d:66:3a:de:a2:b0:91:a6:4f:a8:3f:d3:5b:67:c7:
40:70:d4:52:29:10:22:b2:8c:87:74:c7:f5:a7:fb:b2:da:24:
a7:fb:12:a2:41:28:09:99:e3:a6:8c:79:95:34:a0:b8:a8:80:
06:68:7e:c8:ea:f6:88:42:89:55:6d:08:6d:df:2d:d3:d1:da:
48:09:62:bc:a4:6d:75:c7:c6:f4:f9:6f:da:8e:1a:bc:33:da:
c7:4b:3c:af:7f:ef:e1:64:ea:25:b0:2f:cd:83:ad:b7:5a:38:
22:be:06:b7:96:4b:10:2f:b1:ad:a0:32:f5:fb:34:cf:80:df:
ae:33:0e:e9:cb:26:69:0d:49:e1:1b:81:29:12:e3:a2:a5:86:
c9:b7:eb:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:10:33 2025 by rpki-client