Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/b26859-9b14-450f-bb85-592ed73761ca/1/rSRk7MlG8pLkBPLDUZIuz0xZD9g.mft
File: rSRk7MlG8pLkBPLDUZIuz0xZD9g.mft (raw, json)
Hash identifier: Q1urc31ELBsL3BtXVh7veZc9bRFw3e4r7EEjnMzL6SU=
Subject key identifier: 7C:45:E0:77:5F:5D:B3:2A:B5:9B:FD:EC:D9:B8:97:92:6F:F3:E9:FC
Authority key identifier: AD:24:64:EC:C9:46:F2:92:E4:04:F2:C3:51:92:2E:CF:4C:59:0F:D8
Certificate issuer: /CN=ad2464ecc946f292e404f2c351922ecf4c590fd8
Certificate serial: 0194BC72AD4FD5359B88D964998CEBCCD808
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rSRk7MlG8pLkBPLDUZIuz0xZD9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/b26859-9b14-450f-bb85-592ed73761ca/1/rSRk7MlG8pLkBPLDUZIuz0xZD9g.mft
Manifest number: 05D5
Signing time: Fri 31 Jan 2025 13:00:19 +0000
Manifest this update: Fri 31 Jan 2025 13:00:19 +0000
Manifest next update: Sat 01 Feb 2025 13:00:19 +0000
Files and hashes: 1: rSRk7MlG8pLkBPLDUZIuz0xZD9g.crl (hash: XSWVh1zmvIfJy2G5GkvDAksdN3/8e5ybSa5ODTIzFHM=)
2: saC2CSGHzjfoqz_AyeGRfbO_Z4c.roa (hash: evXXOhKr0k/9XMT8MxumeZizzHV0YoG5/EuRYGW5sl4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:ad:4f:d5:35:9b:88:d9:64:99:8c:eb:cc:d8:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad2464ecc946f292e404f2c351922ecf4c590fd8
Validity
Not Before: Jan 31 13:00:19 2025 GMT
Not After : Feb 1 13:00:19 2025 GMT
Subject: CN=7c45e0775f5db32ab59bfdecd9b897926ff3e9fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:97:c4:9c:ab:4c:03:15:61:7f:b8:13:55:4e:
1a:c8:2d:c3:48:7c:9f:09:82:f0:63:73:05:8b:4a:
25:66:bd:fb:6e:da:7b:45:2c:d8:a2:b7:09:82:ff:
7a:bf:35:ba:d4:16:45:54:96:e9:4e:8c:cd:80:25:
40:d3:68:55:2a:32:bf:95:ab:8d:ea:2b:f6:92:ec:
f0:78:84:44:23:b5:ed:76:4d:e0:4e:6d:f1:11:8d:
90:8b:be:40:98:46:04:ce:3d:eb:bb:ca:22:10:a6:
1c:d4:d9:6d:2c:e1:b2:aa:7b:b2:4e:98:92:04:ea:
f8:bd:46:97:64:b9:b1:6d:fb:d7:6a:e6:39:3c:9d:
92:7b:6c:de:48:d4:93:ac:e6:1a:69:0a:3e:b9:3c:
50:38:92:73:ee:74:1f:28:80:dd:d5:8f:71:9b:a6:
e3:a2:e0:5b:cb:0c:e3:67:70:a2:09:da:36:3f:f7:
a0:1e:3b:e7:a2:13:f9:a2:c5:77:97:87:75:ed:0a:
7c:de:2e:b8:7a:4e:f8:a4:25:47:29:a0:c2:4d:f0:
bd:a6:53:19:a0:31:68:7b:cb:d4:26:f4:ea:40:79:
7c:8d:69:ca:bf:79:25:b6:cc:d5:5b:bb:5b:fd:a9:
cf:8e:93:a2:5c:f4:b9:c7:49:4b:2c:60:00:d1:ea:
e0:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:45:E0:77:5F:5D:B3:2A:B5:9B:FD:EC:D9:B8:97:92:6F:F3:E9:FC
X509v3 Authority Key Identifier:
keyid:AD:24:64:EC:C9:46:F2:92:E4:04:F2:C3:51:92:2E:CF:4C:59:0F:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSRk7MlG8pLkBPLDUZIuz0xZD9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b26859-9b14-450f-bb85-592ed73761ca/1/rSRk7MlG8pLkBPLDUZIuz0xZD9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b26859-9b14-450f-bb85-592ed73761ca/1/rSRk7MlG8pLkBPLDUZIuz0xZD9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:ce:13:de:8b:6c:ec:80:08:5e:12:09:2f:dd:ec:3d:84:b7:
e5:e8:c7:e6:d7:c3:75:72:03:21:16:db:4e:6f:28:40:37:b1:
9a:cb:82:80:73:7d:5b:0f:7a:1f:1b:f5:51:11:1f:69:84:e9:
14:5a:30:39:05:47:77:c8:24:9b:7e:f4:da:b7:99:76:cf:4a:
37:8f:ec:ff:2e:c9:4f:34:13:fc:36:1a:27:69:11:6a:fd:99:
fb:68:92:b8:77:3e:30:f1:e7:55:42:3a:30:cf:52:d9:d2:dc:
41:0f:4a:39:e9:d6:19:35:c0:25:7d:23:72:b4:1e:83:52:c4:
00:c4:db:11:6a:b6:e1:4e:64:54:c4:65:4e:39:c9:c7:ad:28:
aa:12:77:29:b5:e3:02:a1:42:c8:70:a0:a3:25:96:2e:69:44:
f7:10:75:7b:2a:45:05:f2:e8:f3:29:af:e7:3e:c1:43:b2:90:
85:a7:b5:6f:86:7d:01:93:e3:d4:16:b4:8d:46:a3:c1:28:8e:
1c:c8:3e:ed:d2:d5:89:b0:2b:3d:fb:fb:8e:1f:f0:ee:4c:2e:
c5:62:ab:d8:d6:79:8c:a8:90:e6:26:b2:91:bb:11:7d:60:72:
e5:ff:51:1e:81:8e:8e:69:f5:b1:d9:e2:25:3d:11:9f:e9:85:
9b:69:41:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:18:11 2025 by rpki-client