Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/95a02c-df3b-40ba-bde5-262438e859e4/1/R7u3TUGymPWe3U2iPRi2u1FD9kQ.mft
File: R7u3TUGymPWe3U2iPRi2u1FD9kQ.mft (raw, json)
Hash identifier: xfn0g+G50rTOMdyhc+xS9224031tX1RdTITnfFmm/NQ=
Subject key identifier: 1B:D2:2F:C4:A7:A2:9A:62:93:30:9B:76:7A:93:2C:BD:EB:1D:D0:B0
Authority key identifier: 47:BB:B7:4D:41:B2:98:F5:9E:DD:4D:A2:3D:18:B6:BB:51:43:F6:44
Certificate issuer: /CN=47bbb74d41b298f59edd4da23d18b6bb5143f644
Certificate serial: 0194BD177BFBB3044AC73C1809CC3BA592EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R7u3TUGymPWe3U2iPRi2u1FD9kQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/95a02c-df3b-40ba-bde5-262438e859e4/1/R7u3TUGymPWe3U2iPRi2u1FD9kQ.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 16:00:20 +0000
Manifest this update: Fri 31 Jan 2025 16:00:20 +0000
Manifest next update: Sat 01 Feb 2025 16:00:20 +0000
Files and hashes: 1: 6CJuWYcvaw-acDsC8fypVGv6nZs.roa (hash: wT9pXkMIK5iq/Fr3VYtO4ReEPTUzPvr9i2oggz8Pizc=)
2: R7u3TUGymPWe3U2iPRi2u1FD9kQ.crl (hash: NLBlafIWXWCGJ1LKsupHR4c1jzJEqGTxUdnkXYC6BMo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:7b:fb:b3:04:4a:c7:3c:18:09:cc:3b:a5:92:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47bbb74d41b298f59edd4da23d18b6bb5143f644
Validity
Not Before: Jan 31 16:00:20 2025 GMT
Not After : Feb 1 16:00:20 2025 GMT
Subject: CN=1bd22fc4a7a29a6293309b767a932cbdeb1dd0b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ff:e4:f2:98:55:2c:7c:87:a3:15:ba:7e:88:
4a:66:c3:73:d7:93:a3:a5:33:06:d9:8f:b5:58:75:
33:4a:6e:cf:64:d0:c8:ea:67:b6:cf:6f:55:63:45:
74:69:00:ee:d3:3e:ce:95:cb:1d:02:35:2d:3a:c8:
61:1b:6e:4c:08:fd:fa:e8:76:51:00:66:07:5d:6b:
29:ad:f8:db:64:a0:aa:ab:24:02:72:23:07:31:55:
48:25:1e:6a:c7:2e:4c:09:f4:39:67:70:77:06:42:
d2:5e:21:c2:e5:9e:59:e1:1f:52:a6:6a:d0:d7:52:
93:28:15:7b:df:ab:2a:5f:b7:7b:6e:3f:63:eb:bb:
3c:a2:b6:32:b7:67:bf:7d:6a:e6:58:a7:81:08:c0:
87:47:e6:b5:e4:7f:a8:56:c0:0e:1c:12:11:ac:5c:
9b:e7:86:4e:17:56:07:13:6a:63:40:ae:8a:fd:c7:
c1:01:d4:ef:f2:7c:71:44:41:35:b2:b9:a4:ad:d6:
06:97:df:9e:ef:e0:4b:68:4c:60:34:64:c3:b6:97:
cf:12:a5:15:c1:66:ee:03:d9:68:83:c1:e5:50:32:
81:da:8c:49:ca:7a:58:9c:26:9d:55:b2:85:3f:ae:
dd:53:81:7c:36:10:25:de:8c:04:36:fa:18:1a:87:
af:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:D2:2F:C4:A7:A2:9A:62:93:30:9B:76:7A:93:2C:BD:EB:1D:D0:B0
X509v3 Authority Key Identifier:
keyid:47:BB:B7:4D:41:B2:98:F5:9E:DD:4D:A2:3D:18:B6:BB:51:43:F6:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R7u3TUGymPWe3U2iPRi2u1FD9kQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/95a02c-df3b-40ba-bde5-262438e859e4/1/R7u3TUGymPWe3U2iPRi2u1FD9kQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/95a02c-df3b-40ba-bde5-262438e859e4/1/R7u3TUGymPWe3U2iPRi2u1FD9kQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:62:c6:1e:2a:b5:5a:64:22:94:fc:64:23:d5:e8:33:33:c6:
6e:85:90:d6:d1:57:72:03:f0:9c:27:e0:9c:82:54:90:a7:66:
5f:f5:87:20:5a:14:1d:12:a7:a4:4f:61:73:62:1e:63:e3:b3:
ca:c2:45:b8:2b:d6:fc:57:48:0e:9e:e6:31:00:de:b3:0d:15:
a7:5a:2a:bd:16:ee:6e:ab:49:f4:34:c4:de:d6:2a:85:97:73:
a8:07:7b:5e:b4:2a:9a:f0:0d:7b:56:c8:5c:96:d0:e0:94:d9:
f7:41:80:e7:e6:8e:2a:ab:a9:cd:48:17:e6:c6:a4:c3:1e:5a:
df:f7:45:ea:65:ba:d3:71:f5:c2:dc:07:f3:4f:89:2e:f0:30:
ea:b1:80:65:c5:e5:e2:0c:81:36:aa:67:72:6c:66:6e:26:a4:
d7:ab:d9:3d:76:03:97:0f:50:a2:05:1c:c3:2b:88:a1:95:7f:
61:2e:cc:61:35:4e:b0:1f:e8:40:12:7c:d2:c5:d8:df:48:9e:
42:ac:16:73:ac:d3:06:f1:0a:f5:19:b9:d1:8d:f4:45:a4:88:
4c:75:39:53:ed:7e:95:8b:c1:1e:ea:65:1d:3b:68:0b:b6:c1:
b4:05:d9:1b:e5:e7:9f:76:b0:72:2f:a7:2f:9a:d9:88:d3:a5:
8a:94:b8:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:47:25 2025 by rpki-client