Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/9ea369-a28c-4c7e-9a15-c4292fac9be8/1/RH-RQ-pVNY-9YvpWRFR0YBcuGv0.mft
File: RH-RQ-pVNY-9YvpWRFR0YBcuGv0.mft (raw, json)
Hash identifier: 7Z07epp5lyGyH+9J2ignyf7wWSAQgVPRdg88Kt3JxAk=
Subject key identifier: 4C:36:E5:A5:B3:B6:FF:84:75:59:48:02:3E:F8:78:C2:81:48:75:BD
Authority key identifier: 44:7F:91:43:EA:55:35:8F:BD:62:FA:56:44:54:74:60:17:2E:1A:FD
Certificate issuer: /CN=447f9143ea55358fbd62fa5644547460172e1afd
Certificate serial: 0194BCA9FCEC1A1EDFA8820E4D7B994C8300
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RH-RQ-pVNY-9YvpWRFR0YBcuGv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/9ea369-a28c-4c7e-9a15-c4292fac9be8/1/RH-RQ-pVNY-9YvpWRFR0YBcuGv0.mft
Manifest number: 0200
Signing time: Fri 31 Jan 2025 14:00:44 +0000
Manifest this update: Fri 31 Jan 2025 14:00:44 +0000
Manifest next update: Sat 01 Feb 2025 14:00:44 +0000
Files and hashes: 1: RH-RQ-pVNY-9YvpWRFR0YBcuGv0.crl (hash: UWIt4FkBiDyNE8pRUV8Gy1Na8dYxiG5ELZXOJXoZ+mA=)
2: XJeFszxemC7e9u-8mZLkEs6aHFs.roa (hash: OiP4xwhS3dePGm/ma2M64C+nfCdXfnndrH2qcjsO/X0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:fc:ec:1a:1e:df:a8:82:0e:4d:7b:99:4c:83:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=447f9143ea55358fbd62fa5644547460172e1afd
Validity
Not Before: Jan 31 14:00:44 2025 GMT
Not After : Feb 1 14:00:44 2025 GMT
Subject: CN=4c36e5a5b3b6ff84755948023ef878c2814875bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:46:ea:ae:c8:18:28:fc:7b:d6:31:de:30:6d:
66:2c:03:ae:ac:63:d0:3b:8b:a7:d4:1c:6c:3b:d7:
a6:0a:c6:6a:e1:e2:29:f5:13:75:d7:bc:32:27:ed:
bb:b9:2a:a5:7c:c0:85:d4:4c:76:32:69:27:fa:58:
49:17:82:e3:1f:2a:5c:0f:4b:1e:b4:b6:71:1e:d3:
76:55:41:62:0e:06:20:66:f4:68:7b:d1:e3:59:9a:
44:30:29:f4:db:30:8f:a7:66:bc:63:04:3e:7a:57:
ac:87:cb:a2:18:86:4a:69:4a:bc:23:26:44:48:41:
fd:10:b5:a3:6d:c4:31:e7:20:2e:2e:93:05:6e:4b:
e0:37:8e:3e:1a:40:c5:3b:01:1d:34:c0:4a:92:e9:
16:43:26:6a:e6:71:a3:19:b7:a6:6f:24:70:63:a7:
76:f7:17:88:67:d2:3b:b6:2a:79:03:8b:e2:33:a7:
6b:bd:61:bb:8f:af:c0:df:b8:46:53:af:4b:6c:4b:
c5:bf:09:7b:0f:5b:40:2c:30:2e:e3:ed:2f:55:bf:
e3:e5:c4:d3:bd:84:c1:fb:7d:e0:81:13:df:b5:65:
48:a1:c0:4f:36:52:6f:45:d4:21:9e:f0:c3:7b:87:
ad:17:46:b7:e4:ff:7a:59:7f:cf:55:82:98:f5:67:
03:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:36:E5:A5:B3:B6:FF:84:75:59:48:02:3E:F8:78:C2:81:48:75:BD
X509v3 Authority Key Identifier:
keyid:44:7F:91:43:EA:55:35:8F:BD:62:FA:56:44:54:74:60:17:2E:1A:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RH-RQ-pVNY-9YvpWRFR0YBcuGv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/9ea369-a28c-4c7e-9a15-c4292fac9be8/1/RH-RQ-pVNY-9YvpWRFR0YBcuGv0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/9ea369-a28c-4c7e-9a15-c4292fac9be8/1/RH-RQ-pVNY-9YvpWRFR0YBcuGv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:0b:92:b6:47:be:ea:d0:b4:9b:8b:79:b3:ab:46:3f:9e:32:
da:b6:4b:10:90:b5:1f:ad:a8:2a:b9:f6:5d:52:5a:fd:94:ac:
71:3d:5d:29:69:92:30:0a:53:6e:42:1e:9c:41:04:54:5f:24:
73:de:48:40:46:f0:0f:fa:3f:ec:57:0e:7c:de:50:71:a0:9f:
3f:fd:09:fe:42:07:48:32:31:d2:ff:fa:d1:07:08:96:e7:c9:
31:1b:22:ce:f7:e8:c6:3c:78:c6:8d:5b:94:c9:4b:e2:5d:a1:
25:7e:22:eb:01:1e:8a:92:ba:7b:cc:d7:23:b2:de:ad:36:f8:
ad:28:ab:29:78:1e:cd:b1:73:e0:16:5b:30:16:21:1b:7e:5e:
ce:d6:2c:6e:08:b5:9c:f8:65:6a:47:fe:d9:7d:bc:c9:5e:ea:
45:49:1e:86:3d:8a:81:ed:fb:95:85:e5:1b:ef:0a:f6:65:9a:
ed:43:f5:f6:b8:da:b4:58:5b:0b:ec:67:d7:21:2c:d4:67:1e:
0c:af:6f:93:bf:fe:c3:cf:7f:e1:c9:1e:11:4c:41:62:2d:22:
c9:49:50:bf:a9:bf:a8:3b:a1:5b:a7:16:2b:29:e0:89:51:45:
d5:58:b8:1d:8b:bc:1b:56:55:8b:37:87:94:5b:57:57:0e:29:
4e:19:55:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:11:06 2025 by rpki-client