Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/2d8761-229f-4a37-87b1-42995323c03d/1/rS044g8k0OMLhszYJhrAAX8XpaQ.mft
File: rS044g8k0OMLhszYJhrAAX8XpaQ.mft (raw, json)
Hash identifier: GHSMydra9+cERatJzHFGbs/nEQ23V6ZQL1b8B9+D0WU=
Subject key identifier: 2E:F7:4A:F5:9D:3F:D5:26:00:FE:B3:3D:06:9E:63:BC:22:C5:A9:F8
Authority key identifier: AD:2D:38:E2:0F:24:D0:E3:0B:86:CC:D8:26:1A:C0:01:7F:17:A5:A4
Certificate issuer: /CN=ad2d38e20f24d0e30b86ccd8261ac0017f17a5a4
Certificate serial: 0194BD17BCFF8D845E4BB1F37F759E37F4C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rS044g8k0OMLhszYJhrAAX8XpaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/2d8761-229f-4a37-87b1-42995323c03d/1/rS044g8k0OMLhszYJhrAAX8XpaQ.mft
Manifest number: 06F8
Signing time: Fri 31 Jan 2025 16:00:37 +0000
Manifest this update: Fri 31 Jan 2025 16:00:37 +0000
Manifest next update: Sat 01 Feb 2025 16:00:37 +0000
Files and hashes: 1: IhFmVxbE3gn_IPAxvOuH1Dxlo9o.roa (hash: oKXrmB0pSBgjznKzRYUFbiw4D9My9SBHtgqoNaUCBKA=)
2: rS044g8k0OMLhszYJhrAAX8XpaQ.crl (hash: IXswqzigXQGagWirrH0ntxGySbDCtYShKFx2TnCz9m8=)
3: wbXeB63VhLi_7WMIhOdMpk0lCW4.roa (hash: d7dOr+7PutspTBpcReyCrf+E8CzcxyNVV7Zc8qzo3dU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:bc:ff:8d:84:5e:4b:b1:f3:7f:75:9e:37:f4:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad2d38e20f24d0e30b86ccd8261ac0017f17a5a4
Validity
Not Before: Jan 31 16:00:37 2025 GMT
Not After : Feb 1 16:00:37 2025 GMT
Subject: CN=2ef74af59d3fd52600feb33d069e63bc22c5a9f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ba:81:de:81:15:bf:0f:38:5b:fa:0f:37:69:
8f:1c:98:29:2a:6c:0a:4f:08:39:86:a0:5a:19:72:
0a:5a:77:08:a1:b8:3a:fc:62:d2:36:88:22:c2:95:
ad:95:6a:51:d4:50:8d:cc:d8:db:07:6b:78:bd:8f:
05:2b:45:d7:9d:c3:84:2c:03:ac:67:f4:0b:63:81:
b5:aa:db:29:9a:d4:93:f1:e6:72:2b:4b:4c:70:fc:
9a:52:e1:8f:d0:0d:03:92:02:28:ee:bd:71:3a:ed:
72:fb:a5:ff:a7:ba:a5:f0:cc:1c:6f:98:07:9b:36:
ce:0f:0d:2e:f9:4e:61:50:67:1e:4b:21:f8:eb:2f:
2d:b8:42:93:ab:22:81:38:24:8d:b4:d2:56:f8:14:
33:a9:d8:65:88:49:76:c0:d0:fb:6c:83:15:fc:1e:
64:c3:60:ad:9d:4d:b0:47:b7:57:43:06:c3:90:7a:
07:38:5f:66:eb:a9:2d:f3:f6:ec:e8:ca:96:47:81:
78:00:5b:50:ba:76:33:cf:f4:f1:02:be:3c:36:56:
45:26:78:ad:ba:fa:34:e3:de:ab:ef:78:05:e5:02:
53:63:c8:7f:cd:7c:68:a6:6f:d3:a3:90:77:c4:d0:
9a:a0:7a:05:1b:b0:47:38:d3:84:24:18:91:7b:69:
11:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:F7:4A:F5:9D:3F:D5:26:00:FE:B3:3D:06:9E:63:BC:22:C5:A9:F8
X509v3 Authority Key Identifier:
keyid:AD:2D:38:E2:0F:24:D0:E3:0B:86:CC:D8:26:1A:C0:01:7F:17:A5:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rS044g8k0OMLhszYJhrAAX8XpaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2d8761-229f-4a37-87b1-42995323c03d/1/rS044g8k0OMLhszYJhrAAX8XpaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2d8761-229f-4a37-87b1-42995323c03d/1/rS044g8k0OMLhszYJhrAAX8XpaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:6f:76:a3:a6:cb:a2:81:19:3f:17:18:a6:37:25:68:a6:3a:
51:91:5e:93:6c:20:bb:af:e3:7a:3f:91:d5:ec:c6:8e:a9:be:
f4:32:92:c4:40:e7:ab:f4:a6:e7:87:54:53:2a:19:f2:67:2d:
7c:a2:25:dc:51:7a:9e:08:27:70:7e:53:2a:4d:d5:9f:5b:9e:
89:0b:38:1f:fd:1d:d2:6e:2d:00:4f:08:16:77:2e:c6:2f:74:
a1:8a:73:ae:bf:38:62:83:10:2b:c1:d9:be:aa:4d:df:1a:4a:
13:34:76:3c:9a:a1:99:a8:37:eb:c3:d7:75:7e:59:74:07:2a:
d0:69:0a:ae:f8:b3:1f:3c:6d:b3:cc:0a:03:4f:e5:18:f4:13:
e1:8c:6b:46:ed:db:97:49:6f:2e:e7:55:a4:99:be:9a:cb:6d:
77:75:26:e5:c2:9a:d2:f0:55:80:48:8d:de:0e:78:bd:ea:a7:
9f:70:52:42:2e:e8:71:7f:57:3f:34:26:f5:7e:3d:f8:b5:1e:
d6:93:49:a3:ab:cd:d8:5d:2c:3e:7c:12:c8:db:3b:b5:97:a9:
98:ca:b3:ff:81:2d:37:47:a0:cf:4e:f8:13:01:24:7e:17:9f:
a2:04:4c:a6:d4:c8:a9:a8:46:39:89:9d:ed:1f:52:5b:83:26:
3b:14:11:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:59 2025 by rpki-client