Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/32a353-6659-480b-abf7-eb073797ac66/1/RXDSj8SaoK6AjDg_WH8-pM_rBJ0.mft
File: RXDSj8SaoK6AjDg_WH8-pM_rBJ0.mft (raw, json)
Hash identifier: H1od5HZmbdUsTOvnLN7L9Zrk3GmbJ2OfkUhlvRILZmo=
Subject key identifier: C3:18:3F:C9:A3:44:8B:23:5B:93:D3:2F:76:E6:33:6E:CC:C3:54:AC
Authority key identifier: 45:70:D2:8F:C4:9A:A0:AE:80:8C:38:3F:58:7F:3E:A4:CF:EB:04:9D
Certificate issuer: /CN=4570d28fc49aa0ae808c383f587f3ea4cfeb049d
Certificate serial: 0194BC3BD06ACB69C6C961CE171F2C4D88CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RXDSj8SaoK6AjDg_WH8-pM_rBJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/32a353-6659-480b-abf7-eb073797ac66/1/RXDSj8SaoK6AjDg_WH8-pM_rBJ0.mft
Manifest number: 0EDF
Signing time: Fri 31 Jan 2025 12:00:24 +0000
Manifest this update: Fri 31 Jan 2025 12:00:24 +0000
Manifest next update: Sat 01 Feb 2025 12:00:24 +0000
Files and hashes: 1: GL43VxH_h-aWzE3G-2pFMtY1WM4.roa (hash: GegNsbMfLWk2tMOCfqZsrF9iNh5KkVnxnNq29fJOObI=)
2: RXDSj8SaoK6AjDg_WH8-pM_rBJ0.crl (hash: Gdg+UPnwdjEcqxl3X9KU7pLwuf/jhlTMaaWMRi7IPEs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:d0:6a:cb:69:c6:c9:61:ce:17:1f:2c:4d:88:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4570d28fc49aa0ae808c383f587f3ea4cfeb049d
Validity
Not Before: Jan 31 12:00:24 2025 GMT
Not After : Feb 1 12:00:24 2025 GMT
Subject: CN=c3183fc9a3448b235b93d32f76e6336eccc354ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a0:12:d6:b7:aa:0e:ae:37:0b:1f:f3:4b:ee:
2c:9a:01:26:d5:65:91:3f:cd:90:01:ac:f0:b5:34:
b7:77:12:72:f9:aa:d1:04:b9:cc:39:cb:43:72:ae:
34:bc:32:cc:05:b6:7c:ed:6b:6e:04:3f:2f:c3:2e:
b8:7a:e2:ef:64:17:33:57:76:47:6f:98:5f:42:0b:
0c:56:8f:77:35:de:aa:84:ea:29:c6:e1:80:f3:fd:
29:6c:85:18:f5:15:fa:a9:8b:de:f1:05:88:b9:e1:
f9:b5:8e:e7:f3:88:51:7b:67:00:61:f5:0d:e3:49:
cd:77:a4:d7:9b:7f:db:7d:48:b6:e5:bf:fa:ae:2b:
01:8e:49:41:9c:36:e1:ce:75:8a:9d:d5:26:d0:ce:
78:f2:e0:70:a0:86:a5:d5:0c:35:75:5c:f2:4b:c8:
35:8f:e2:54:7d:62:be:b1:7d:53:17:cd:71:77:87:
e8:44:b2:ca:8d:0a:c0:f5:ed:ed:4c:2d:fe:aa:84:
ec:f0:1e:8d:57:1c:6c:d5:58:e8:40:c5:11:55:86:
20:73:64:6b:01:b6:75:6f:c5:71:fb:83:42:8b:0b:
f3:92:64:0c:0d:ef:ed:a3:e6:15:ef:5a:d0:19:a4:
e7:16:1a:f6:f8:0b:06:ce:af:d8:62:74:bf:a3:17:
2a:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:18:3F:C9:A3:44:8B:23:5B:93:D3:2F:76:E6:33:6E:CC:C3:54:AC
X509v3 Authority Key Identifier:
keyid:45:70:D2:8F:C4:9A:A0:AE:80:8C:38:3F:58:7F:3E:A4:CF:EB:04:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RXDSj8SaoK6AjDg_WH8-pM_rBJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/32a353-6659-480b-abf7-eb073797ac66/1/RXDSj8SaoK6AjDg_WH8-pM_rBJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/32a353-6659-480b-abf7-eb073797ac66/1/RXDSj8SaoK6AjDg_WH8-pM_rBJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:25:04:62:f2:8d:e9:15:9e:0f:2d:ab:03:d0:a4:28:5d:d6:
63:af:85:bf:48:83:5a:c9:df:df:3f:56:c9:e3:3b:1e:62:71:
88:86:fb:ef:8a:76:cd:0a:e7:0f:48:e8:09:2a:59:6b:91:ad:
75:21:03:0c:8d:30:36:b1:cd:41:59:85:6b:70:7d:e6:dd:7e:
77:2e:07:ca:da:60:b5:8f:db:4a:d8:6f:77:ba:d6:26:11:47:
71:0a:7c:79:58:21:84:da:b7:eb:69:07:3f:3a:47:90:2a:30:
31:2b:4f:ef:21:f8:6a:6c:16:5b:c1:d0:fd:6f:a9:4c:a7:33:
eb:7c:96:d0:14:7d:35:20:c1:24:48:24:16:8c:4f:d9:ae:cb:
ce:db:a3:ab:7b:20:a6:eb:5f:e1:4f:bd:d7:eb:aa:0a:41:c5:
1e:80:d3:31:3d:9e:45:41:bf:4f:0c:55:82:27:fb:66:91:22:
84:e3:76:fd:46:05:6a:9c:a8:ca:5c:bd:0e:7e:be:d2:7f:b9:
c5:3f:ed:c8:27:c9:21:24:6b:63:6c:2c:32:32:9a:bc:97:b0:
9f:2b:93:9b:df:d8:96:50:1f:c6:3c:eb:38:c7:61:8e:57:94:
9a:c2:db:54:4a:65:b3:28:4d:18:56:1c:48:c8:4b:cd:a4:8a:
83:a9:ec:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:06 2025 by rpki-client