
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/c96291-5efb-41b3-bcfb-92b0fd5d7644/1/RjUoxUCm1XfC0cwabuoXEks5I4Y.mft
File: RjUoxUCm1XfC0cwabuoXEks5I4Y.mft (raw, json)
Hash identifier: HK+/AFLyf5mUQsWsPyThF8bOh3hDSje0GLjZJLe9OaY=
Subject key identifier: B9:B6:B6:C6:EA:A5:10:F8:9D:AC:40:CE:1D:91:6C:66:B7:8B:7E:A5
Authority key identifier: 46:35:28:C5:40:A6:D5:77:C2:D1:CC:1A:6E:EA:17:12:4B:39:23:86
Certificate issuer: /CN=463528c540a6d577c2d1cc1a6eea17124b392386
Certificate serial: 0194BCAA27D92CC7843A2DF4D2D32ABF87B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RjUoxUCm1XfC0cwabuoXEks5I4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/c96291-5efb-41b3-bcfb-92b0fd5d7644/1/RjUoxUCm1XfC0cwabuoXEks5I4Y.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 14:00:55 +0000
Manifest this update: Fri 31 Jan 2025 14:00:55 +0000
Manifest next update: Sat 01 Feb 2025 14:00:55 +0000
Files and hashes: 1: CgYapJdE3lATpkmQavkm2MlhTAs.roa (hash: leTUYkK/UbPoz5ypT99weLoqPEKtLynpZc0EJfzHDjs=)
2: RjUoxUCm1XfC0cwabuoXEks5I4Y.crl (hash: Dni1WM5uH0/OlHV0U5ezd9we14iPSWMr6Kd0+NYr8YU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:27:d9:2c:c7:84:3a:2d:f4:d2:d3:2a:bf:87:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=463528c540a6d577c2d1cc1a6eea17124b392386
Validity
Not Before: Jan 31 14:00:55 2025 GMT
Not After : Feb 1 14:00:55 2025 GMT
Subject: CN=b9b6b6c6eaa510f89dac40ce1d916c66b78b7ea5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:6f:86:75:29:f4:d6:86:fe:09:11:20:ac:d8:
15:8e:c7:cb:df:c7:26:21:2f:22:d1:9d:58:14:90:
b0:32:65:82:10:66:eb:04:f4:b4:a1:43:99:b6:f8:
fb:97:f2:26:ef:90:3f:8a:79:55:8c:03:69:7d:90:
f0:38:82:79:c3:aa:1b:03:c8:ae:04:97:6a:5c:6d:
41:29:98:ad:36:ef:f6:0d:5e:46:fc:29:fb:c4:9b:
f1:df:c1:0a:ce:9d:d9:33:7e:5a:dc:3a:11:e2:6c:
b5:fd:89:cb:a0:b6:ad:dc:1c:cb:0d:20:d4:67:6b:
52:01:26:3c:87:58:82:93:d8:ec:df:9c:aa:ac:c3:
9a:94:89:cb:7e:72:a9:bf:d7:73:7f:84:de:ec:de:
33:7e:75:d8:55:9b:af:7f:b5:25:b1:af:3f:89:71:
0e:81:61:0c:d0:c0:97:8a:ac:fd:f6:73:24:d2:57:
93:6d:b2:3c:10:18:63:e9:d2:73:2c:21:39:3f:6e:
65:6a:c4:5c:59:e0:49:ad:32:eb:ab:ec:c4:be:5c:
44:41:19:ba:ed:80:1b:91:f0:1e:4f:c5:3f:a4:9b:
75:f4:8f:71:76:18:0e:fb:5e:00:1b:4e:84:8e:6a:
04:78:ef:81:db:3b:71:35:5d:84:c0:e0:55:48:3b:
41:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:B6:B6:C6:EA:A5:10:F8:9D:AC:40:CE:1D:91:6C:66:B7:8B:7E:A5
X509v3 Authority Key Identifier:
keyid:46:35:28:C5:40:A6:D5:77:C2:D1:CC:1A:6E:EA:17:12:4B:39:23:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RjUoxUCm1XfC0cwabuoXEks5I4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c96291-5efb-41b3-bcfb-92b0fd5d7644/1/RjUoxUCm1XfC0cwabuoXEks5I4Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c96291-5efb-41b3-bcfb-92b0fd5d7644/1/RjUoxUCm1XfC0cwabuoXEks5I4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:53:80:08:c4:dc:0e:b4:7f:6d:29:3a:b8:85:5e:29:67:72:
77:0c:70:f2:1d:3c:95:a6:ef:ec:9a:f4:42:5f:01:68:c1:d7:
fd:32:83:22:de:d5:16:a1:f6:e7:8d:fa:32:70:c0:aa:7d:07:
a8:b9:d7:e2:fe:e0:81:8c:9d:a9:90:71:6f:5e:d7:bb:b2:80:
94:90:e8:19:79:00:3e:9c:ec:af:21:5f:e7:2d:7d:74:b7:7f:
86:12:83:45:2a:e4:3c:f5:6e:41:4e:63:f7:e1:d8:8e:72:25:
0e:bd:d5:51:3f:e6:3b:22:a4:22:c5:1f:2c:6a:61:65:1a:f1:
05:4a:81:6d:fa:ff:47:18:9d:32:bc:1f:db:4c:74:58:cb:6a:
3e:88:29:4f:b4:98:fd:cd:d5:27:ac:ed:23:44:18:35:bf:d3:
15:7d:14:1b:6c:1a:73:c0:a3:f3:e2:69:2d:aa:1c:48:4d:7a:
29:6d:c4:77:53:c6:3c:ee:22:0d:90:bf:41:b6:e5:ca:35:df:
fe:c9:25:a8:f1:6b:3e:e0:5a:2d:f9:8a:29:72:8b:fa:1f:65:
6e:91:b1:cf:25:46:08:86:71:f0:88:ae:f8:dd:1f:b6:bc:98:
33:7a:51:ce:57:50:fe:07:1f:fd:06:d9:56:27:28:b1:ed:09:
e2:91:f8:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:08:08 2025 by rpki-client