Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/0ed33a-1f1d-4281-ab39-40890130dd18/1/rmRaywIXx0oP004XpT297lbwEeU.mft
File: rmRaywIXx0oP004XpT297lbwEeU.mft (raw, json)
Hash identifier: gjzUDJSntCqydPxcZAR7/8pAzI1Fv4bPK5YV8YXF9pw=
Subject key identifier: 89:AF:23:6F:26:46:6F:BB:F7:C0:72:AC:07:A9:65:1B:55:32:96:C4
Authority key identifier: AE:64:5A:CB:02:17:C7:4A:0F:D3:4E:17:A5:3D:BD:EE:56:F0:11:E5
Certificate issuer: /CN=ae645acb0217c74a0fd34e17a53dbdee56f011e5
Certificate serial: 0194BCA9B2D17E051BF4B89DEBA901B69A04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rmRaywIXx0oP004XpT297lbwEeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/0ed33a-1f1d-4281-ab39-40890130dd18/1/rmRaywIXx0oP004XpT297lbwEeU.mft
Manifest number: 0E22
Signing time: Fri 31 Jan 2025 14:00:25 +0000
Manifest this update: Fri 31 Jan 2025 14:00:25 +0000
Manifest next update: Sat 01 Feb 2025 14:00:25 +0000
Files and hashes: 1: 9gPdnlu8pzrUW3Ji0sxUHZw4ZQ4.roa (hash: tZpT15jv998HP7FRsRavbx2dzEDkME8mtW6HPMKG8Zg=)
2: rmRaywIXx0oP004XpT297lbwEeU.crl (hash: R1+PB7YVV2JVVvQPVZyUL4Zod1+7+2Aq5V4d+vmgQtk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:b2:d1:7e:05:1b:f4:b8:9d:eb:a9:01:b6:9a:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae645acb0217c74a0fd34e17a53dbdee56f011e5
Validity
Not Before: Jan 31 14:00:25 2025 GMT
Not After : Feb 1 14:00:25 2025 GMT
Subject: CN=89af236f26466fbbf7c072ac07a9651b553296c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:49:7f:6a:80:db:34:fb:2e:87:ee:b9:56:c8:
d1:19:fe:55:80:25:e2:f1:a8:33:e5:f6:b0:86:1f:
f3:5e:3e:d9:11:a7:a7:8c:8e:10:df:3c:e3:24:30:
20:f6:42:af:85:17:9c:76:5e:5d:63:d7:f7:83:1c:
6a:a3:14:a8:df:fe:0c:64:07:f5:ab:cf:e7:03:47:
8c:63:1e:3c:df:e9:51:e1:db:c3:d7:3c:c0:88:2e:
00:e0:9d:7e:1a:91:37:dd:42:e5:9d:4c:83:5a:f2:
e6:5d:b5:5c:2f:51:77:8a:08:41:45:04:67:a3:87:
5e:3b:72:bf:e8:99:c1:d7:8c:a5:7d:96:f2:40:81:
87:1b:f2:19:bf:8d:0c:c3:58:e2:74:38:8a:b4:a1:
50:a9:57:16:8e:d4:c6:11:20:e5:58:4e:ce:d0:ca:
b6:92:7c:ce:62:33:79:ce:bf:e1:d0:87:70:42:53:
ce:fc:03:51:04:bd:f9:a5:7f:72:d3:51:75:6e:91:
90:65:82:94:99:e9:d6:41:2e:62:ae:16:31:e9:60:
ab:96:af:27:26:be:c3:69:5b:4a:0e:97:ec:6a:66:
52:be:1a:2d:7e:ed:74:e9:75:12:23:42:d3:9c:08:
aa:e8:81:7b:9d:2d:11:e1:21:b9:8a:a5:f6:fc:64:
78:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:AF:23:6F:26:46:6F:BB:F7:C0:72:AC:07:A9:65:1B:55:32:96:C4
X509v3 Authority Key Identifier:
keyid:AE:64:5A:CB:02:17:C7:4A:0F:D3:4E:17:A5:3D:BD:EE:56:F0:11:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rmRaywIXx0oP004XpT297lbwEeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/0ed33a-1f1d-4281-ab39-40890130dd18/1/rmRaywIXx0oP004XpT297lbwEeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/0ed33a-1f1d-4281-ab39-40890130dd18/1/rmRaywIXx0oP004XpT297lbwEeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:69:7d:f4:07:b0:66:fc:87:bc:70:cf:af:1c:e5:36:38:a9:
16:46:99:2e:31:c8:28:37:f9:88:82:50:3e:92:9a:d8:07:80:
bb:e3:ed:4a:4d:ee:6e:e3:29:ec:bd:74:65:8f:44:ee:7a:e3:
6c:04:6d:28:01:1e:fb:13:42:43:1d:46:fb:35:0b:9a:25:de:
5d:4f:7a:98:fc:6a:47:f5:ac:fb:16:84:a1:45:de:b9:b7:41:
15:12:e1:fb:92:dd:d7:90:94:83:bd:34:2f:6b:31:6f:87:1c:
70:70:c8:db:fa:51:ba:be:d5:22:ed:ed:41:52:34:c7:3c:b6:
a2:dc:f6:ac:52:1e:2d:b3:c3:05:60:a0:3d:7b:cf:d1:07:95:
8a:8f:05:09:cd:90:96:f8:52:e8:40:30:6e:1e:de:bb:ca:4b:
0a:ab:19:70:5e:66:fe:68:6e:81:24:4f:ff:a2:9a:fc:98:7c:
f2:c2:a9:c6:be:30:25:de:45:b3:a5:3f:d3:17:97:bc:6c:5b:
a4:8b:b6:2a:83:a1:80:ef:04:9f:63:3e:dc:9a:c4:21:08:bc:
84:89:6d:f0:ce:87:84:0a:af:8b:df:84:9c:0d:c4:04:e0:89:
34:6c:15:e4:a6:60:a0:55:09:70:76:43:b1:1a:46:b9:f7:53:
f3:94:11:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 21:44:55 2025 by rpki-client