Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/9b973d-1f2f-4c77-9dd0-1f732046b74c/1/30bUnMNHZ_jQJK_yla1qky55FeA.mft
File: 30bUnMNHZ_jQJK_yla1qky55FeA.mft (raw, json)
Hash identifier: IRKmZNti/yvkzdZJdJV+JyiwkbHnxqqLokvj8+OxOl8=
Subject key identifier: 42:27:3C:2E:F6:9D:27:69:A4:14:A3:11:C9:90:A9:15:7B:DA:4E:C9
Authority key identifier: DF:46:D4:9C:C3:47:67:F8:D0:24:AF:F2:95:AD:6A:93:2E:79:15:E0
Certificate issuer: /CN=df46d49cc34767f8d024aff295ad6a932e7915e0
Certificate serial: 0194BC3BC7DCDF69E90CA5C7DFE4C256AA1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/30bUnMNHZ_jQJK_yla1qky55FeA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/9b973d-1f2f-4c77-9dd0-1f732046b74c/1/30bUnMNHZ_jQJK_yla1qky55FeA.mft
Manifest number: 0708
Signing time: Fri 31 Jan 2025 12:00:21 +0000
Manifest this update: Fri 31 Jan 2025 12:00:21 +0000
Manifest next update: Sat 01 Feb 2025 12:00:21 +0000
Files and hashes: 1: 30bUnMNHZ_jQJK_yla1qky55FeA.crl (hash: dhRWTNI9Nz3X/LHXNojotQXmDdKODE+u2THZqH+wWLU=)
2: ZqG9ZXQwlRQgv2SuPLTOJwS07bA.roa (hash: JZgT3iIXQIZJHifSbhHNXa/qOoNcRciphxipRif7+Xc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:c7:dc:df:69:e9:0c:a5:c7:df:e4:c2:56:aa:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df46d49cc34767f8d024aff295ad6a932e7915e0
Validity
Not Before: Jan 31 12:00:21 2025 GMT
Not After : Feb 1 12:00:21 2025 GMT
Subject: CN=42273c2ef69d2769a414a311c990a9157bda4ec9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:16:dd:16:4a:1e:b2:a2:b7:d2:b8:f0:7b:f1:
8d:d7:89:21:d5:d8:e8:c2:a0:11:77:2c:7a:e9:40:
4c:0f:60:11:27:3c:7e:2a:38:6d:62:28:15:85:6a:
22:48:fe:71:91:53:90:6d:de:69:6c:af:54:07:64:
09:be:71:e5:a3:72:de:31:c6:cd:62:76:11:9e:3d:
06:39:95:4e:53:55:a4:97:6f:f4:55:05:79:8e:e0:
64:00:7a:23:09:f6:cd:f7:e6:d3:74:fe:31:8c:50:
0a:d8:af:3f:a5:8d:3c:c8:fc:e4:bd:06:28:27:89:
57:80:aa:f3:fc:11:77:b4:3e:a9:f3:85:4d:5a:13:
cd:5c:c7:26:ae:2b:09:ad:59:11:07:da:f7:93:55:
8f:d0:e6:d2:76:af:10:59:a1:54:da:6f:9f:c9:57:
b4:5f:2c:32:be:82:3b:4f:0b:50:b6:87:00:a3:99:
d5:89:9a:b1:1b:40:ee:ce:fb:a0:5b:85:ea:57:b1:
29:77:97:d4:5e:47:19:22:42:68:b4:04:1e:6c:c4:
0f:a2:cc:1e:d8:93:64:d7:25:65:ba:e7:0f:d3:9c:
d1:bd:5b:71:bc:a4:09:17:f4:44:fe:c0:d1:d1:bf:
ca:75:d6:80:67:16:0f:f3:70:a7:a7:37:05:79:57:
23:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:27:3C:2E:F6:9D:27:69:A4:14:A3:11:C9:90:A9:15:7B:DA:4E:C9
X509v3 Authority Key Identifier:
keyid:DF:46:D4:9C:C3:47:67:F8:D0:24:AF:F2:95:AD:6A:93:2E:79:15:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/30bUnMNHZ_jQJK_yla1qky55FeA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/9b973d-1f2f-4c77-9dd0-1f732046b74c/1/30bUnMNHZ_jQJK_yla1qky55FeA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/9b973d-1f2f-4c77-9dd0-1f732046b74c/1/30bUnMNHZ_jQJK_yla1qky55FeA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:8c:d7:20:48:74:6c:77:ac:44:21:74:3d:b2:20:23:16:cc:
c0:9d:ac:09:c8:8c:8d:d1:10:15:fa:83:f0:78:99:e2:f8:80:
c4:10:9a:b9:29:46:fe:a6:ec:3c:0e:7d:81:01:af:5c:4b:3d:
ec:75:b9:87:df:b6:4a:71:e2:af:92:08:15:1b:58:6c:b0:d3:
33:19:40:2c:70:1d:92:a1:2d:e3:05:0a:3d:bf:8c:54:9e:52:
a3:91:75:0b:25:9e:95:33:77:1a:f0:98:92:77:e1:6f:a6:3e:
36:83:fc:13:8c:72:54:30:e4:d4:10:84:4f:9c:d6:48:ca:2a:
59:0f:83:36:3f:d1:e5:7a:99:8a:7e:74:d8:54:b5:65:94:c1:
a7:3f:e7:4e:85:02:30:83:cd:9f:06:7e:89:84:a6:1e:9e:49:
a6:53:9d:02:f4:cd:4a:5d:84:43:73:ad:47:d7:4b:49:82:cf:
13:6d:e8:be:98:f5:46:59:c2:69:37:46:2b:a3:c3:af:ce:05:
c2:ec:6a:3a:82:0e:46:ba:e8:57:65:ec:43:3c:8c:74:e7:04:
5f:17:4e:ed:5e:17:27:43:95:9d:69:0e:92:89:5e:10:6b:af:
30:af:b0:07:86:b4:f0:db:1d:89:d8:32:a3:59:ba:db:f4:31:
aa:13:e4:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:20 2025 by rpki-client