Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/0ccc08-dd35-4051-a185-a35e2bfed608/1/RoWpxIcmUu55Z7pfSieCDGcVKNY.mft
File: RoWpxIcmUu55Z7pfSieCDGcVKNY.mft (raw, json)
Hash identifier: q3iZtHSxGyxqmOfjDSZasxDgMRaWPZ4HP+4Eo0K/djw=
Subject key identifier: 42:14:2E:90:E1:F8:A6:73:8B:4D:82:B1:22:CD:56:E4:4F:49:F5:65
Authority key identifier: 46:85:A9:C4:87:26:52:EE:79:67:BA:5F:4A:27:82:0C:67:15:28:D6
Certificate issuer: /CN=4685a9c4872652ee7967ba5f4a27820c671528d6
Certificate serial: 0194BCAA229A1A20C1B4BEF3DDBD1CFCD783
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RoWpxIcmUu55Z7pfSieCDGcVKNY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/0ccc08-dd35-4051-a185-a35e2bfed608/1/RoWpxIcmUu55Z7pfSieCDGcVKNY.mft
Manifest number: 0324
Signing time: Fri 31 Jan 2025 14:00:54 +0000
Manifest this update: Fri 31 Jan 2025 14:00:54 +0000
Manifest next update: Sat 01 Feb 2025 14:00:54 +0000
Files and hashes: 1: RoWpxIcmUu55Z7pfSieCDGcVKNY.crl (hash: FM7GGEU9cw2r60WqQYnLLU7XHutd3jdH0aTpKw+GAtk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:22:9a:1a:20:c1:b4:be:f3:dd:bd:1c:fc:d7:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4685a9c4872652ee7967ba5f4a27820c671528d6
Validity
Not Before: Jan 31 14:00:54 2025 GMT
Not After : Feb 1 14:00:54 2025 GMT
Subject: CN=42142e90e1f8a6738b4d82b122cd56e44f49f565
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:3a:f5:69:8a:51:ae:45:fb:ff:c9:44:9d:1e:
4d:7e:3d:79:76:bb:08:b4:86:9c:71:c8:26:c1:b8:
62:b9:20:3b:0e:2a:88:9c:f6:4f:a3:a7:3e:9f:54:
2b:2d:b3:cf:df:82:7b:e5:62:2f:b9:68:57:63:7b:
38:d7:22:b7:91:5c:58:a6:71:4e:10:b7:8d:26:64:
08:9d:a8:ec:2f:ba:8d:bf:ad:07:53:b7:84:4a:38:
63:1e:56:1f:4f:3a:76:c5:6b:14:1b:dc:77:34:74:
ab:48:1a:db:c2:b9:2b:89:66:59:bc:94:dd:54:f9:
b5:a7:4a:7d:ea:b8:ab:5e:79:c6:a5:88:ae:f7:0d:
aa:29:e0:ba:c7:b8:26:7e:04:c2:29:b1:33:37:25:
bc:c7:d7:04:85:4e:37:23:4f:e7:7b:d5:83:d6:ca:
e4:ed:4d:89:f5:7d:5e:c4:a1:96:5b:39:20:75:a8:
98:00:40:84:02:7e:39:54:15:b4:c5:d6:b4:46:d3:
3a:2b:67:81:4f:ce:ec:ca:1b:4f:43:26:59:a9:38:
5d:f5:89:f0:51:3b:bf:b7:07:fc:14:08:18:51:49:
76:78:f2:b5:b3:ab:83:a1:81:e7:52:d8:39:4a:00:
50:37:00:3c:c9:92:58:01:9f:eb:81:45:d0:01:56:
ec:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:14:2E:90:E1:F8:A6:73:8B:4D:82:B1:22:CD:56:E4:4F:49:F5:65
X509v3 Authority Key Identifier:
keyid:46:85:A9:C4:87:26:52:EE:79:67:BA:5F:4A:27:82:0C:67:15:28:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RoWpxIcmUu55Z7pfSieCDGcVKNY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/0ccc08-dd35-4051-a185-a35e2bfed608/1/RoWpxIcmUu55Z7pfSieCDGcVKNY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/0ccc08-dd35-4051-a185-a35e2bfed608/1/RoWpxIcmUu55Z7pfSieCDGcVKNY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:99:b6:4e:bb:c4:16:83:e0:1e:57:27:06:3c:63:1d:0b:3f:
62:37:b4:61:2c:19:22:81:6f:a8:5a:2a:74:7a:4d:f5:bf:3c:
d3:e1:49:7f:a1:63:7d:01:a7:31:de:09:73:83:8c:6e:9d:62:
50:66:c1:2d:07:fc:6a:0a:0b:05:d5:df:14:dd:ac:06:2d:70:
dc:14:f3:d8:97:ff:b3:b6:92:7c:1d:b9:73:bc:74:32:ad:7d:
d5:69:f6:f8:9e:dc:16:38:10:75:94:d4:1c:02:0e:97:e9:56:
89:eb:c9:51:86:d6:51:02:04:d8:bc:3e:cd:58:24:55:5a:9b:
eb:bf:ab:bf:11:21:79:e2:66:1e:67:9c:c0:21:8b:c4:15:6a:
14:f0:19:47:45:32:f2:b8:e1:5f:1a:d2:35:c3:65:a6:f1:40:
35:0c:8d:cd:34:2e:9f:ad:bf:9b:02:cd:17:07:70:be:bc:df:
59:49:59:68:e1:82:e6:8e:ff:5b:f5:24:c2:b0:5a:09:ef:4e:
e9:61:d3:06:d9:fa:29:4b:af:77:82:1b:e3:e7:d6:11:c2:69:
76:56:b5:ca:ce:56:a6:12:21:44:bd:eb:19:d9:63:42:68:b1:
92:48:16:6e:f6:b4:bc:2d:33:31:5c:46:f1:75:a4:51:bd:10:
3d:41:7a:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:49:48 2025 by rpki-client