Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/15541d-a7ba-4710-a5cf-965cc208ee40/1/Rtbr6m5uqeYAaoE0TRFj--xPqEg.mft
File: Rtbr6m5uqeYAaoE0TRFj--xPqEg.mft (raw, json)
Hash identifier: +lK9SzPwqBUp8Kr7vDYRKD63hwUk5IEIRv1dWXSOnVE=
Subject key identifier: 09:78:4B:22:EA:D2:9A:DD:EB:4E:BF:AF:92:26:5B:29:2E:E2:D4:53
Authority key identifier: 46:D6:EB:EA:6E:6E:A9:E6:00:6A:81:34:4D:11:63:FB:EC:4F:A8:48
Certificate issuer: /CN=46d6ebea6e6ea9e6006a81344d1163fbec4fa848
Certificate serial: 0194BCA9787F51F2BA0BF49169189F8FFA66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rtbr6m5uqeYAaoE0TRFj--xPqEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/15541d-a7ba-4710-a5cf-965cc208ee40/1/Rtbr6m5uqeYAaoE0TRFj--xPqEg.mft
Manifest number: 029E
Signing time: Fri 31 Jan 2025 14:00:10 +0000
Manifest this update: Fri 31 Jan 2025 14:00:10 +0000
Manifest next update: Sat 01 Feb 2025 14:00:10 +0000
Files and hashes: 1: 8qKws60nW6Z3LiJs0eyANnP0SG4.roa (hash: 9lHqUiw7ZlL+8c06Gu/fNSQfRoy60xmd5tsMPvOvsaw=)
2: Rtbr6m5uqeYAaoE0TRFj--xPqEg.crl (hash: 8GU7glfxA3nzmQRVvNAQPfthIgUD0v6jONlvTltYCak=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:78:7f:51:f2:ba:0b:f4:91:69:18:9f:8f:fa:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46d6ebea6e6ea9e6006a81344d1163fbec4fa848
Validity
Not Before: Jan 31 14:00:10 2025 GMT
Not After : Feb 1 14:00:10 2025 GMT
Subject: CN=09784b22ead29addeb4ebfaf92265b292ee2d453
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:43:8a:42:a6:d7:6b:9f:a9:fb:dc:f9:9a:f3:
26:be:3f:c7:40:56:38:0f:7b:6b:20:d0:42:c5:af:
46:3c:3c:ae:8f:61:0c:17:ba:13:d3:bb:f3:fa:84:
8c:8a:b4:91:77:5b:44:a1:5d:ba:31:f1:f3:37:37:
bf:4c:1b:01:8f:aa:5f:92:de:d1:82:63:32:0d:14:
21:7d:33:e5:39:e6:0c:ff:4c:6c:4c:5d:ec:30:62:
2b:d8:32:9b:93:22:a6:0c:58:47:14:f1:a4:b8:06:
4e:cb:58:89:72:69:0d:78:ef:21:c5:02:ff:f4:3c:
fc:c8:c0:06:b9:81:da:12:d8:53:73:7d:b0:77:dd:
11:26:63:51:23:ef:11:84:d3:51:36:f6:61:5b:13:
1a:1e:bc:86:73:2d:32:48:ff:e6:20:1f:0a:9a:1c:
ef:4f:03:9a:57:02:53:86:dc:72:f4:14:c4:56:83:
29:cc:46:24:dd:55:ce:5c:35:ad:4e:ed:0c:2c:31:
12:8c:42:54:df:2b:24:a1:63:39:53:8b:74:3f:07:
01:a2:04:12:5a:92:10:c9:51:5d:89:08:51:ab:16:
05:12:2f:bc:4a:b6:c9:f3:ba:2e:d2:84:a0:c2:00:
91:69:5c:62:57:32:77:78:83:7d:d0:4a:34:76:ea:
1b:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:78:4B:22:EA:D2:9A:DD:EB:4E:BF:AF:92:26:5B:29:2E:E2:D4:53
X509v3 Authority Key Identifier:
keyid:46:D6:EB:EA:6E:6E:A9:E6:00:6A:81:34:4D:11:63:FB:EC:4F:A8:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rtbr6m5uqeYAaoE0TRFj--xPqEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/15541d-a7ba-4710-a5cf-965cc208ee40/1/Rtbr6m5uqeYAaoE0TRFj--xPqEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/15541d-a7ba-4710-a5cf-965cc208ee40/1/Rtbr6m5uqeYAaoE0TRFj--xPqEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:7d:36:ab:f0:e9:08:02:37:43:2b:50:12:8e:13:4d:85:99:
8f:2c:9f:fc:85:19:e1:b7:97:3f:89:81:e7:eb:c3:18:4c:46:
e6:22:c2:b1:8a:d4:60:49:70:cc:0a:83:6b:4d:5b:a9:ff:20:
6a:37:8e:6d:33:d8:07:2f:7e:36:10:d7:17:49:83:94:f0:5e:
c6:52:7f:6e:65:87:cd:b8:a3:f5:e0:74:c5:cf:66:65:a1:70:
7f:be:21:cd:2e:d9:c4:26:f4:da:1b:53:ea:6d:e9:34:95:6c:
91:14:99:64:10:b3:a8:6a:43:87:d0:35:c6:ee:22:2d:a7:c3:
22:68:93:15:23:7b:2d:70:1f:b4:2f:33:1f:32:9a:bf:a7:01:
40:16:69:b7:ae:47:a0:f1:5b:f7:d1:82:c6:1b:1b:87:fd:32:
60:4b:9b:f5:b0:af:0c:8a:dc:e6:45:cf:e4:43:76:50:0a:56:
45:3d:71:e4:f9:bf:39:1f:a5:f6:ae:de:b4:23:d4:f2:e8:39:
98:fa:8b:80:b8:66:37:21:6a:f1:ed:c7:05:8c:27:26:69:63:
cd:14:ec:14:da:78:2b:0b:15:aa:45:0d:90:6e:03:22:a2:17:
74:67:98:82:d4:a9:4f:df:86:31:b7:cb:cc:40:e8:2c:ec:65:
cc:31:74:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:41:44 2025 by rpki-client