Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/3ccb85-918b-4de8-bda2-9c8bba664ff0/1/rImvYJhubZWDIvsCbGtlruyUmg0.mft
File: rImvYJhubZWDIvsCbGtlruyUmg0.mft (raw, json)
Hash identifier: Z5iArybYGvnT9oBSQ5a2C76Yx069edaA0dlpJNq0Q5U=
Subject key identifier: 25:BE:30:B3:51:12:DD:65:DC:24:60:71:53:45:53:83:E4:C9:14:AF
Authority key identifier: AC:89:AF:60:98:6E:6D:95:83:22:FB:02:6C:6B:65:AE:EC:94:9A:0D
Certificate issuer: /CN=ac89af60986e6d958322fb026c6b65aeec949a0d
Certificate serial: 0194BBCDE5FA451D4480876AFD6EB231E7BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rImvYJhubZWDIvsCbGtlruyUmg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/3ccb85-918b-4de8-bda2-9c8bba664ff0/1/rImvYJhubZWDIvsCbGtlruyUmg0.mft
Manifest number: 0574
Signing time: Fri 31 Jan 2025 10:00:20 +0000
Manifest this update: Fri 31 Jan 2025 10:00:20 +0000
Manifest next update: Sat 01 Feb 2025 10:00:20 +0000
Files and hashes: 1: HWWs6MqFS2nmbLw3ShctihMbNaY.roa (hash: KSXNNa9oIp9r32J4311J0aN03+Peflc2SZu+HPxriyM=)
2: NRcWwubnTv8pcHVpHOdNFWUlOXg.roa (hash: lkTccmpivW1Ado7K6LvAdLSPe3v56jZoJ1qzdiLTJCo=)
3: b81h_NWwhKjMbH2-sUXyjP4n64s.roa (hash: e3T+4A186w/5PvOch5tYGnvLHtBctNKp6kP6+X8+j/w=)
4: rImvYJhubZWDIvsCbGtlruyUmg0.crl (hash: 4F6BTh/1XGRsu+phJDQa8Wg1TXYGxfcRae15HdZ8e5M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:e5:fa:45:1d:44:80:87:6a:fd:6e:b2:31:e7:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac89af60986e6d958322fb026c6b65aeec949a0d
Validity
Not Before: Jan 31 10:00:20 2025 GMT
Not After : Feb 1 10:00:20 2025 GMT
Subject: CN=25be30b35112dd65dc24607153455383e4c914af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:74:83:44:3d:0d:50:9d:23:93:0a:71:fb:9d:
5e:f3:45:33:b7:34:74:ed:ff:38:01:c6:cc:d4:b4:
d9:8e:a9:17:79:bb:df:5b:b2:5c:fd:f9:bd:b3:c5:
a2:ba:03:24:bd:fa:63:22:fa:ee:81:ce:7e:48:b9:
74:cd:d8:9a:7b:74:e8:ef:ee:c4:44:1a:d0:5f:90:
ff:e6:2a:9b:e6:2c:73:8a:93:4e:ae:eb:64:8a:71:
37:01:c8:66:35:57:ff:39:1a:5b:3a:df:8a:9f:20:
9a:2b:4a:47:76:e6:e9:07:aa:d1:1c:1d:7f:9e:9c:
fb:c3:f1:e2:22:2c:23:ef:e1:e4:ef:e6:81:1d:04:
65:63:50:30:18:b6:1d:14:c7:82:95:49:19:86:20:
e2:e2:99:4a:fe:d9:ac:30:09:d0:56:6e:b2:c1:ce:
9e:69:6b:55:c3:24:ce:a8:e0:75:27:2b:90:38:9c:
ab:78:33:e9:3e:ba:44:a5:e7:b8:16:bf:c7:b0:7a:
4d:67:4d:9d:fe:1c:7a:54:3e:fa:89:9e:67:36:08:
c6:d3:a9:64:c1:7e:12:a8:0d:c5:c3:89:3f:53:b8:
3c:08:33:d3:2a:20:c7:38:be:c7:a9:15:8c:ce:6b:
aa:ec:06:32:df:aa:1b:83:a7:f9:b1:f0:4f:9d:3d:
3b:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:BE:30:B3:51:12:DD:65:DC:24:60:71:53:45:53:83:E4:C9:14:AF
X509v3 Authority Key Identifier:
keyid:AC:89:AF:60:98:6E:6D:95:83:22:FB:02:6C:6B:65:AE:EC:94:9A:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rImvYJhubZWDIvsCbGtlruyUmg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/3ccb85-918b-4de8-bda2-9c8bba664ff0/1/rImvYJhubZWDIvsCbGtlruyUmg0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/3ccb85-918b-4de8-bda2-9c8bba664ff0/1/rImvYJhubZWDIvsCbGtlruyUmg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:9c:71:8b:03:3b:50:b6:67:83:40:4d:ce:bb:b7:c7:b5:33:
fe:83:22:d7:f7:9e:10:cd:79:e7:80:0e:bd:b4:78:6d:fd:81:
d4:b3:6f:fd:2d:7f:37:37:69:5c:db:c1:7f:40:af:bb:d5:54:
0f:9c:27:f4:9b:e1:7d:98:bc:09:73:2d:f9:6a:2c:e4:cc:69:
c1:1a:21:59:5a:00:68:aa:e1:8a:a6:6c:3a:e7:d8:ee:56:d3:
9d:52:93:b8:4c:4e:e6:57:ab:a5:7e:05:57:88:0b:51:b0:17:
fd:2e:72:1d:82:b4:9b:d2:ca:74:41:8e:ac:a7:75:7b:83:21:
6f:2c:be:4d:8b:59:ab:25:53:e5:e8:dc:c2:57:73:08:12:4a:
ca:37:cb:f1:b7:6d:7d:ee:38:79:b9:3f:4f:58:9a:ed:c3:d7:
76:e7:d4:66:e9:b5:6d:17:6d:d0:31:97:db:e8:98:18:94:f0:
bb:31:f0:99:77:7d:71:38:7c:ca:96:fa:d8:d9:76:b9:e6:16:
86:29:14:4e:1a:26:94:a6:04:a2:eb:02:73:63:de:f4:ff:58:
a0:09:ba:db:79:b3:3b:05:96:b2:15:9e:c5:2a:9e:8b:57:f3:
f2:98:04:7c:cf:f6:f1:0b:17:d1:fc:e4:39:af:f5:67:8e:1f:
b3:88:3e:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:44 2025 by rpki-client