Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/638bc3-e945-400a-af79-0b6f002d1978/1/R01HT5RpSoEE9eQTqyucCVWbefA.mft
File: R01HT5RpSoEE9eQTqyucCVWbefA.mft (raw, json)
Hash identifier: CrA7/m1nsk7CtfXXLqR9xMBcmFOy0DWBvcSn+uXZ7/U=
Subject key identifier: E1:F1:DC:41:65:AE:83:E2:EE:A1:7E:8A:EA:3E:D9:89:1A:52:66:F1
Authority key identifier: 47:4D:47:4F:94:69:4A:81:04:F5:E4:13:AB:2B:9C:09:55:9B:79:F0
Certificate issuer: /CN=474d474f94694a8104f5e413ab2b9c09559b79f0
Certificate serial: 0194BCE07F94E14D922E32104F7B7A957979
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R01HT5RpSoEE9eQTqyucCVWbefA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/638bc3-e945-400a-af79-0b6f002d1978/1/R01HT5RpSoEE9eQTqyucCVWbefA.mft
Manifest number: 4D
Signing time: Fri 31 Jan 2025 15:00:16 +0000
Manifest this update: Fri 31 Jan 2025 15:00:16 +0000
Manifest next update: Sat 01 Feb 2025 15:00:16 +0000
Files and hashes: 1: K09nrG0KqTizFLHUaMNyxM0z2ro.roa (hash: cExkaCJNm1PmYW065hiBGP/O4kugBu6fZ2Nczp2MsYg=)
2: R01HT5RpSoEE9eQTqyucCVWbefA.crl (hash: Yp1+5t+oZkF3VNkzi2U2vwHmx7YJg8+qfDi1x1zmAxE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:7f:94:e1:4d:92:2e:32:10:4f:7b:7a:95:79:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=474d474f94694a8104f5e413ab2b9c09559b79f0
Validity
Not Before: Jan 31 15:00:16 2025 GMT
Not After : Feb 1 15:00:16 2025 GMT
Subject: CN=e1f1dc4165ae83e2eea17e8aea3ed9891a5266f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:33:6d:d0:24:49:7a:e7:af:5a:67:8e:c4:60:
a0:e5:34:3e:ed:39:07:47:a2:4a:83:4f:e6:3c:0b:
45:0a:94:2f:b9:50:32:fe:9e:6f:68:a5:33:2e:eb:
b6:0b:37:2e:db:5c:2f:b7:30:0a:ba:c3:91:c7:af:
25:41:f5:16:4c:df:e7:c1:7f:ee:33:df:3a:f1:2c:
9b:48:b3:a5:8d:15:7c:6d:63:8b:ff:65:21:cb:87:
26:57:82:58:93:c6:5f:ff:b5:f5:9a:7a:03:69:26:
96:f3:95:2f:7e:f6:b6:a4:d8:ef:4e:82:4e:c1:16:
21:57:12:7a:a5:48:86:ee:67:b1:89:bb:e0:8e:b2:
12:61:91:f0:0e:92:01:cc:12:b0:46:00:9c:c9:82:
b3:78:7e:65:71:47:c1:be:a5:ff:0c:36:79:03:4a:
c6:4e:cb:58:df:8e:74:81:2a:9c:e7:1b:53:29:28:
cb:32:87:f2:e4:65:a6:1a:0c:fc:03:19:85:cd:0a:
4f:6b:e5:c7:04:ca:de:8e:53:f9:15:b8:2a:33:3b:
8c:72:6b:85:93:b5:96:f9:2d:6d:12:59:3d:61:db:
54:07:13:48:12:99:41:c6:4f:9f:8b:c3:93:5d:f6:
f2:69:89:9d:94:98:a1:88:e7:bf:fc:ea:b0:be:01:
2a:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:F1:DC:41:65:AE:83:E2:EE:A1:7E:8A:EA:3E:D9:89:1A:52:66:F1
X509v3 Authority Key Identifier:
keyid:47:4D:47:4F:94:69:4A:81:04:F5:E4:13:AB:2B:9C:09:55:9B:79:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R01HT5RpSoEE9eQTqyucCVWbefA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/638bc3-e945-400a-af79-0b6f002d1978/1/R01HT5RpSoEE9eQTqyucCVWbefA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/638bc3-e945-400a-af79-0b6f002d1978/1/R01HT5RpSoEE9eQTqyucCVWbefA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:06:9e:34:63:00:8f:34:88:a4:6e:8b:2c:9d:e7:b4:7c:09:
85:35:50:df:7a:fa:ea:d1:0a:b7:77:c7:39:8c:b0:b1:d7:b5:
ed:b6:0a:32:49:b9:89:23:74:46:17:35:3e:2a:3a:46:89:6b:
6d:82:0d:d7:f2:a8:21:a7:5e:96:d0:ac:4b:a5:ee:a2:f0:53:
fa:a2:e0:cf:93:18:91:ef:9b:46:ca:92:62:c5:c3:7b:72:54:
51:b7:fc:98:47:23:19:2f:91:6d:00:62:de:aa:d7:b4:de:4e:
15:8b:b6:4c:d5:c3:fc:2c:3d:66:50:71:2e:6a:d5:86:4a:ea:
1d:23:34:6c:2f:f6:46:35:59:ac:6d:3d:cd:77:d1:5c:35:95:
3b:20:e9:a3:7d:ff:eb:f6:1b:ae:48:b2:1d:9b:71:44:c8:ec:
40:50:b7:0c:4a:13:4d:9e:13:de:7a:55:d0:ab:8e:90:36:04:
c3:4c:c7:e5:11:de:a3:b4:75:59:0a:4f:a0:eb:a2:03:a8:d9:
31:05:2c:46:00:01:fc:3b:31:d4:18:c7:86:77:cd:34:3a:14:
df:b5:5b:04:75:65:e6:c5:26:05:65:b9:8b:9c:3f:5d:bd:de:
89:4c:c2:27:22:bf:a0:be:17:ab:da:4f:4e:71:a4:56:42:ee:
e4:0b:40:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:36:59 2025 by rpki-client