Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/b463a6-282f-45f0-b4ba-cdf92fbe8f0b/1/rJHyMKDi7to4EFIudKaYIAcT5iA.mft
File: rJHyMKDi7to4EFIudKaYIAcT5iA.mft (raw, json)
Hash identifier: Ikg/GSuHmaPZOuKMS4CLn0GyAaK8PcSUxZhZJbcOVgg=
Subject key identifier: 18:89:4C:0D:B9:20:E5:77:FD:7F:1C:E8:4A:A2:13:68:B8:E1:AF:A3
Authority key identifier: AC:91:F2:30:A0:E2:EE:DA:38:10:52:2E:74:A6:98:20:07:13:E6:20
Certificate issuer: /CN=ac91f230a0e2eeda3810522e74a698200713e620
Certificate serial: 0194BCE0741B0F4D1EA762F615D494BA2731
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJHyMKDi7to4EFIudKaYIAcT5iA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/b463a6-282f-45f0-b4ba-cdf92fbe8f0b/1/rJHyMKDi7to4EFIudKaYIAcT5iA.mft
Manifest number: 0D3A
Signing time: Fri 31 Jan 2025 15:00:13 +0000
Manifest this update: Fri 31 Jan 2025 15:00:13 +0000
Manifest next update: Sat 01 Feb 2025 15:00:13 +0000
Files and hashes: 1: gP_zsXfkqrzssG9MD4Zd7ibjL_Y.roa (hash: I686Ip553hliGvYAsWQzyhxBsV7CF+b8RDLkN0tXgB4=)
2: rJHyMKDi7to4EFIudKaYIAcT5iA.crl (hash: HyG1kOF5UUMqX/VVlfxUnnuu9q8RBJYLsaRLav8aGQE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:74:1b:0f:4d:1e:a7:62:f6:15:d4:94:ba:27:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac91f230a0e2eeda3810522e74a698200713e620
Validity
Not Before: Jan 31 15:00:13 2025 GMT
Not After : Feb 1 15:00:13 2025 GMT
Subject: CN=18894c0db920e577fd7f1ce84aa21368b8e1afa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:0f:c4:d3:2a:4f:cf:24:22:57:05:d0:40:b1:
16:d5:25:30:04:47:0c:75:02:ed:ec:f1:33:a8:f1:
57:b3:ba:e8:de:a6:70:77:53:79:a9:f6:84:5d:da:
05:3a:7d:c8:df:ee:ad:97:28:0a:d5:c4:37:a3:22:
01:85:82:97:c6:75:1f:09:8e:a3:0b:fc:60:64:7e:
08:1a:89:72:a2:64:e2:d6:c1:86:03:6d:aa:0d:3e:
bb:ae:94:0b:4a:9a:25:71:78:bb:59:21:bd:c7:91:
30:cc:d5:1a:28:39:30:63:69:92:7a:bc:96:d1:84:
8a:f8:09:87:7f:56:71:d8:b0:61:9e:4a:4c:09:25:
4e:99:49:a9:d0:5f:c9:6b:01:a7:e5:69:e5:d2:a8:
16:87:c2:ca:ff:53:67:57:de:e5:33:94:78:00:e1:
c9:a0:8c:2d:d8:4c:f4:26:a3:30:31:c6:b0:db:58:
e1:71:24:27:8d:b8:39:7e:b8:de:09:dc:ed:d6:f5:
e0:61:7d:70:55:96:70:cb:f5:96:8c:67:aa:04:01:
f2:57:e3:b7:c2:bc:3f:7d:70:4e:8f:ae:6b:98:8b:
e6:80:ca:0c:48:9c:38:a7:5e:df:16:72:c6:d6:db:
aa:92:ef:5e:a6:11:66:bf:2c:7d:07:ba:04:e3:c9:
9e:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:89:4C:0D:B9:20:E5:77:FD:7F:1C:E8:4A:A2:13:68:B8:E1:AF:A3
X509v3 Authority Key Identifier:
keyid:AC:91:F2:30:A0:E2:EE:DA:38:10:52:2E:74:A6:98:20:07:13:E6:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJHyMKDi7to4EFIudKaYIAcT5iA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/b463a6-282f-45f0-b4ba-cdf92fbe8f0b/1/rJHyMKDi7to4EFIudKaYIAcT5iA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/b463a6-282f-45f0-b4ba-cdf92fbe8f0b/1/rJHyMKDi7to4EFIudKaYIAcT5iA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:7d:89:a8:23:69:f9:03:d9:ec:6b:f0:93:38:aa:1b:1b:a7:
2e:e0:cc:b4:bb:a8:82:60:54:47:6a:c7:e9:ba:02:a4:08:2b:
c9:03:df:42:73:0b:c3:e0:f8:d8:1e:ce:c7:89:13:21:58:92:
f5:5d:5d:d5:75:7b:8e:69:e5:99:72:82:3a:81:cb:cb:8a:da:
92:f5:86:5f:e6:cb:2e:5c:32:f7:77:44:b8:59:ff:64:13:49:
b4:91:4f:98:fd:96:59:b5:42:4c:c5:ac:71:f4:07:f7:c9:5e:
11:b4:62:a0:70:80:2e:31:58:ca:de:22:fe:a7:8c:1f:59:9d:
bd:49:e2:e6:e6:3d:c9:f4:1b:26:20:0e:f6:b3:dc:a8:eb:bd:
88:61:70:e0:9d:6a:91:0d:f6:b0:29:9e:c5:85:99:9b:b6:bc:
72:11:70:06:66:a3:b4:19:4f:e8:96:56:b7:e0:cb:60:ef:08:
31:2d:89:23:f3:24:08:21:76:36:36:3a:10:32:fd:e6:ee:3b:
d0:42:8b:61:76:2c:6e:27:2f:d4:62:87:52:91:ef:48:d5:ad:
af:c5:3e:7d:c6:0c:a2:e2:02:ad:b0:a4:09:b7:d0:7a:a1:38:
6c:11:80:57:84:97:ad:fc:cf:89:9b:7c:14:a8:47:96:54:1d:
5d:8b:42:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:03 2025 by rpki-client