Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/5be80b-3382-4448-a1cc-dca04270b9d5/1/RKiGN0mLGI_AvOrgu_BoF2GknUs.mft
File: RKiGN0mLGI_AvOrgu_BoF2GknUs.mft (raw, json)
Hash identifier: QZIESj/q3vA5fQYSsBgp33mvhdLZeuw2b0zy4BMmAT8=
Subject key identifier: 08:AD:42:D5:5D:3E:C5:89:33:36:77:04:43:1E:5C:12:35:8A:B0:78
Authority key identifier: 44:A8:86:37:49:8B:18:8F:C0:BC:EA:E0:BB:F0:68:17:61:A4:9D:4B
Certificate issuer: /CN=44a88637498b188fc0bceae0bbf0681761a49d4b
Certificate serial: 0194BC3BF516BB0AD12B7460B45ADEF675E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RKiGN0mLGI_AvOrgu_BoF2GknUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/5be80b-3382-4448-a1cc-dca04270b9d5/1/RKiGN0mLGI_AvOrgu_BoF2GknUs.mft
Manifest number: 0B7B
Signing time: Fri 31 Jan 2025 12:00:33 +0000
Manifest this update: Fri 31 Jan 2025 12:00:33 +0000
Manifest next update: Sat 01 Feb 2025 12:00:33 +0000
Files and hashes: 1: RKiGN0mLGI_AvOrgu_BoF2GknUs.crl (hash: SE6DkCThR7ycVFOC3vZHpQzNe/MA3K2/C+t6lXovyGU=)
2: flFkC3rLYTBJuae6k7suUXp0M98.roa (hash: gGcr7qntIVbHpwIxa4HyUbLLKIvBfx5RllQ/0MIi+VA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:f5:16:bb:0a:d1:2b:74:60:b4:5a:de:f6:75:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44a88637498b188fc0bceae0bbf0681761a49d4b
Validity
Not Before: Jan 31 12:00:33 2025 GMT
Not After : Feb 1 12:00:33 2025 GMT
Subject: CN=08ad42d55d3ec58933367704431e5c12358ab078
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:43:13:70:cb:b0:1c:7a:5c:5a:0d:8f:25:7b:
5e:48:01:9d:2e:a0:e2:7d:ce:54:26:64:8c:66:b0:
37:d2:44:df:f7:2f:19:ce:cc:37:c9:cf:45:88:be:
01:ef:fd:61:51:98:6a:d4:f0:9b:7f:5e:91:a4:d3:
72:f8:84:b3:1e:78:f8:f5:41:d3:fe:44:76:18:d2:
7d:26:4e:02:c9:66:ea:19:a0:b2:f3:da:72:82:1c:
24:ff:ea:05:4c:fe:84:7d:c7:43:04:95:18:d0:ef:
39:8d:ce:34:d7:76:43:8c:4c:2b:4f:ae:08:dd:d9:
e3:d5:76:9e:f8:93:88:6b:79:3e:4a:f5:2f:5a:e5:
93:17:89:5f:8f:de:9b:79:c4:ab:85:50:ed:4d:d4:
be:67:fb:e8:09:4f:e3:cf:6d:53:e4:7a:c7:c1:1b:
0a:4c:aa:30:45:93:d8:10:ef:d1:b1:d0:50:37:e6:
d0:9f:c2:82:a7:b3:29:a1:2e:01:7b:14:63:55:29:
eb:8b:3b:5f:2d:5a:8c:d9:fc:78:b4:9f:15:79:b5:
26:21:a6:b8:56:22:b4:7a:31:5c:51:42:82:7d:3d:
21:85:ea:44:5b:aa:56:7b:fd:72:ca:28:4c:bc:12:
df:d7:fa:d9:48:c2:86:82:13:ce:3c:cd:80:b5:28:
1d:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:AD:42:D5:5D:3E:C5:89:33:36:77:04:43:1E:5C:12:35:8A:B0:78
X509v3 Authority Key Identifier:
keyid:44:A8:86:37:49:8B:18:8F:C0:BC:EA:E0:BB:F0:68:17:61:A4:9D:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RKiGN0mLGI_AvOrgu_BoF2GknUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/5be80b-3382-4448-a1cc-dca04270b9d5/1/RKiGN0mLGI_AvOrgu_BoF2GknUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/5be80b-3382-4448-a1cc-dca04270b9d5/1/RKiGN0mLGI_AvOrgu_BoF2GknUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:40:3e:52:82:87:40:db:ad:b7:1f:50:ec:4e:cb:d3:4f:e7:
78:e4:bc:d2:33:57:04:17:cd:b0:be:22:87:75:b3:7c:8e:4b:
40:6e:43:b7:aa:c3:26:fb:f8:a7:58:83:cd:50:38:57:68:1c:
4a:2b:88:7f:20:8e:a5:61:38:0f:65:ce:b3:a8:3c:16:8e:da:
12:5b:41:82:59:61:ce:49:0c:d5:ec:50:c1:8c:ec:20:85:77:
e6:aa:4b:5a:93:dd:15:d3:9a:4a:24:6a:05:d1:f6:38:82:98:
8b:0d:e6:72:27:6e:31:6b:16:02:87:84:ae:77:32:af:b2:b3:
b7:03:dd:e4:b3:27:3b:14:8d:99:68:f7:dc:c2:63:2a:ef:c5:
01:da:86:b0:61:3e:42:e9:46:7f:d4:c4:07:e4:11:9c:4c:0d:
c2:80:9e:d5:01:e8:7c:1c:90:72:14:be:15:44:6a:d5:24:75:
3f:c3:33:53:08:e8:c5:b9:d2:52:5a:7c:d9:06:60:d0:1e:e4:
ac:d6:a2:3d:00:84:4d:db:ed:70:c8:35:1a:2f:e8:00:ac:15:
ae:64:bf:10:1b:06:36:a7:45:23:fa:07:82:64:90:df:6e:0d:
30:9b:e0:be:76:56:ff:16:2c:74:a7:ad:a1:9f:30:cb:24:cf:
07:11:53:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:46:46 2025 by rpki-client