Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/8e80af-2d64-4784-8115-c5cefd98f621/1/Rq9sozU0uFMLnyFOyOqT3SW9H88.mft
File: Rq9sozU0uFMLnyFOyOqT3SW9H88.mft (raw, json)
Hash identifier: RvS99VCsmTeyPL1SpX4Vd8/0bBrYwPyzPRijCKtkE1o=
Subject key identifier: 7E:FC:6B:C8:B8:4E:5D:A2:81:99:34:A3:02:3F:9D:73:23:ED:70:CA
Authority key identifier: 46:AF:6C:A3:35:34:B8:53:0B:9F:21:4E:C8:EA:93:DD:25:BD:1F:CF
Certificate issuer: /CN=46af6ca33534b8530b9f214ec8ea93dd25bd1fcf
Certificate serial: 0194BCE08DE638E00A9CB64EA558DE128C25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rq9sozU0uFMLnyFOyOqT3SW9H88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/8e80af-2d64-4784-8115-c5cefd98f621/1/Rq9sozU0uFMLnyFOyOqT3SW9H88.mft
Manifest number: 09D5
Signing time: Fri 31 Jan 2025 15:00:20 +0000
Manifest this update: Fri 31 Jan 2025 15:00:20 +0000
Manifest next update: Sat 01 Feb 2025 15:00:20 +0000
Files and hashes: 1: 1-DjrG4WtOf5mfvjc_0ex1qmM7_0.roa (hash: hnXFvQKmTthNRY+MRdmK+ICiF4IvzT+rwNQnD35oyyk=)
2: Rq9sozU0uFMLnyFOyOqT3SW9H88.crl (hash: 0+BumKWz6KEvwKMTnQ7DU6hvlC+6qORVUGJTefT2KKQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:8d:e6:38:e0:0a:9c:b6:4e:a5:58:de:12:8c:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46af6ca33534b8530b9f214ec8ea93dd25bd1fcf
Validity
Not Before: Jan 31 15:00:20 2025 GMT
Not After : Feb 1 15:00:20 2025 GMT
Subject: CN=7efc6bc8b84e5da2819934a3023f9d7323ed70ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:53:79:2a:db:91:a9:04:a0:ae:6a:16:de:8e:
83:8c:24:6e:b1:b3:ed:1d:d2:d6:24:ea:bf:28:95:
11:f0:12:63:de:d2:26:48:0f:ad:44:66:6d:14:a2:
70:49:98:d6:be:b3:f1:ec:53:94:25:67:97:b2:34:
6b:42:08:49:89:f7:4b:58:32:c8:88:8a:71:a1:bb:
96:fa:87:82:4b:e5:97:25:9e:c3:34:e3:aa:b0:c9:
56:cc:5f:84:ef:23:6d:ee:4b:d4:13:ca:94:47:67:
3c:98:e4:11:5f:5b:7c:14:9b:14:b6:cf:cb:44:78:
99:81:ed:98:35:13:bc:6c:a1:d7:07:5a:5f:48:bd:
f2:ba:fa:e3:36:51:29:95:9b:28:b5:fe:88:ec:29:
a9:ef:55:72:2d:28:f4:2d:a9:bf:51:c7:79:00:b4:
e3:ed:a0:c0:62:52:19:f0:45:b1:6e:15:ea:71:7e:
96:c8:8b:c9:a1:a5:49:bf:e3:c0:d1:71:c6:5d:c5:
40:46:7b:58:3f:db:5e:70:5e:be:fa:1e:15:34:71:
d3:f1:64:3f:01:c6:c7:c2:23:d7:b9:0a:81:f6:5d:
47:86:0b:b6:00:90:e7:c5:44:4b:d7:08:b7:45:e6:
17:04:77:1c:62:52:cc:80:0b:f6:a4:89:36:fb:f9:
42:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:FC:6B:C8:B8:4E:5D:A2:81:99:34:A3:02:3F:9D:73:23:ED:70:CA
X509v3 Authority Key Identifier:
keyid:46:AF:6C:A3:35:34:B8:53:0B:9F:21:4E:C8:EA:93:DD:25:BD:1F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rq9sozU0uFMLnyFOyOqT3SW9H88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/8e80af-2d64-4784-8115-c5cefd98f621/1/Rq9sozU0uFMLnyFOyOqT3SW9H88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/8e80af-2d64-4784-8115-c5cefd98f621/1/Rq9sozU0uFMLnyFOyOqT3SW9H88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:03:8a:65:49:0d:22:92:5e:b1:bd:6f:1c:6f:85:9b:2a:91:
50:ec:c4:c6:7e:be:34:be:58:23:7d:63:63:f8:d7:36:a3:34:
cb:db:eb:32:8f:ca:1c:cd:a7:62:eb:7b:ca:73:0c:3c:ca:da:
e4:1c:26:11:6c:cf:35:65:a5:f1:f4:e5:b6:78:b0:1c:58:a0:
62:5a:c4:d3:46:0d:7a:0f:f0:62:e4:4f:84:bc:94:69:65:d9:
91:85:b1:72:b9:58:84:21:3a:be:c1:ae:03:e8:18:3a:aa:91:
0a:12:22:58:85:9b:63:a4:c7:6f:d2:29:ba:93:79:48:cf:ae:
20:56:68:a8:23:8d:68:71:c9:1d:51:74:bd:07:97:f5:1a:ef:
38:c9:04:73:55:9a:bf:56:5a:02:e5:c1:4a:14:c2:a2:6c:c9:
12:ed:7d:77:80:bf:9d:91:1f:c9:8c:7c:6d:0b:2d:2d:8a:cd:
df:48:c4:b9:af:83:cf:96:16:97:13:a1:a0:43:2b:83:95:22:
f7:2c:81:68:12:c7:07:66:5e:c4:99:4a:8a:6b:e0:99:54:66:
7c:3b:28:fa:3e:a3:7a:34:5d:f5:d7:59:04:b1:32:71:20:6b:
ae:ea:19:61:9d:7d:42:e2:12:a9:b4:b3:9f:74:a5:f5:07:fc:
13:d7:e3:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:25:20 2025 by rpki-client