Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/8c5dc7-bf41-4008-9cff-2c69985359c0/1/Ra7T0aGh4oMNQWr6BHuVIg6BQIQ.mft
File: Ra7T0aGh4oMNQWr6BHuVIg6BQIQ.mft (raw, json)
Hash identifier: vWWi9N5dnbNt5qsk8K/cza+utHtU/vYqstK/X7L9T8Q=
Subject key identifier: 78:19:C1:52:29:03:B3:A5:95:DA:03:9A:5C:10:3F:04:4D:DA:DB:9D
Authority key identifier: 45:AE:D3:D1:A1:A1:E2:83:0D:41:6A:FA:04:7B:95:22:0E:81:40:84
Certificate issuer: /CN=45aed3d1a1a1e2830d416afa047b95220e814084
Certificate serial: 0194BC04A125806190B35F3302316A9F5948
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ra7T0aGh4oMNQWr6BHuVIg6BQIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/8c5dc7-bf41-4008-9cff-2c69985359c0/1/Ra7T0aGh4oMNQWr6BHuVIg6BQIQ.mft
Manifest number: 0694
Signing time: Fri 31 Jan 2025 11:00:07 +0000
Manifest this update: Fri 31 Jan 2025 11:00:07 +0000
Manifest next update: Sat 01 Feb 2025 11:00:07 +0000
Files and hashes: 1: 5yM7l9glO5Y_kZZbeV1PY4oF4AI.roa (hash: Zrq7WRCOd9AEwWRm5k4u/56c3wqE+RlRfF9EKNORqJM=)
2: Ra7T0aGh4oMNQWr6BHuVIg6BQIQ.crl (hash: Jh79gaal5SFCdfyMdyQrNSFL/K6YTtGFje9pGnEtTGI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:a1:25:80:61:90:b3:5f:33:02:31:6a:9f:59:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45aed3d1a1a1e2830d416afa047b95220e814084
Validity
Not Before: Jan 31 11:00:07 2025 GMT
Not After : Feb 1 11:00:07 2025 GMT
Subject: CN=7819c1522903b3a595da039a5c103f044ddadb9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e4:c5:0a:f4:16:3d:cd:6c:38:b5:4f:6b:43:
b2:5f:f9:ea:6c:19:1a:74:6b:67:60:cd:dd:51:98:
c2:ff:53:15:d4:d5:90:4f:5c:49:57:73:e7:b1:4f:
5b:b5:3b:e0:dd:54:77:7a:10:b5:4d:ee:f2:5c:5b:
2e:c4:0a:5b:6f:88:3a:82:20:0d:34:c7:6e:1a:07:
ab:54:bc:b7:71:a4:a2:be:a2:cd:6b:ae:e5:bd:b0:
1e:0f:6f:13:2a:b3:bc:85:5e:dc:99:68:69:9a:86:
9a:34:2c:e0:c5:03:29:0c:c0:f9:e7:e5:71:05:48:
1d:34:37:d1:8d:87:c0:65:e1:84:9a:47:2a:17:8f:
ce:9e:f3:ff:a1:42:83:fa:66:9a:98:10:af:68:2a:
78:68:34:aa:bf:3d:eb:15:b1:3a:59:81:42:a6:b8:
e8:11:24:8e:dd:2c:fa:be:a7:e4:a5:d7:8e:e6:28:
f6:c2:58:7a:4a:a3:f6:80:75:65:4d:c1:3c:36:76:
cd:48:15:d0:0f:f6:9f:8e:f3:be:a6:04:3d:2b:50:
8a:ed:8f:8c:bc:fd:67:58:39:38:b9:1b:16:e0:bb:
06:90:57:c5:22:35:8d:45:e8:48:0f:46:53:1d:27:
27:7b:50:d3:c3:66:dc:5b:82:e2:b2:6a:78:f7:ea:
a1:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:19:C1:52:29:03:B3:A5:95:DA:03:9A:5C:10:3F:04:4D:DA:DB:9D
X509v3 Authority Key Identifier:
keyid:45:AE:D3:D1:A1:A1:E2:83:0D:41:6A:FA:04:7B:95:22:0E:81:40:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ra7T0aGh4oMNQWr6BHuVIg6BQIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/8c5dc7-bf41-4008-9cff-2c69985359c0/1/Ra7T0aGh4oMNQWr6BHuVIg6BQIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/8c5dc7-bf41-4008-9cff-2c69985359c0/1/Ra7T0aGh4oMNQWr6BHuVIg6BQIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:3a:59:9f:02:bc:37:bf:a0:17:11:90:b1:5f:49:fa:9d:b5:
25:d3:e3:d6:8f:5d:d8:1d:40:e1:3a:c9:e1:5a:ca:56:e2:c5:
dc:b3:84:48:01:b9:a8:ad:b9:64:c7:86:14:06:0d:4f:9d:94:
74:f7:7a:1e:03:11:79:2a:60:b4:17:54:3f:fa:c9:bd:7b:d8:
a8:70:e0:a9:a1:47:64:24:1d:b7:a7:53:19:2a:66:82:f1:67:
d3:74:a9:44:cf:77:51:41:f6:2f:5c:d8:4f:fe:b9:4c:7f:dc:
5e:56:5b:38:18:9b:09:b6:60:03:36:04:4e:5c:ef:e4:23:c6:
2f:bb:4d:61:6c:0f:c3:7a:90:66:3c:a4:b3:0a:c4:cb:29:e9:
9c:4f:6e:95:98:1d:ec:30:03:e0:bd:8d:2b:89:0e:27:68:63:
ac:6b:79:fa:cd:d0:54:42:79:b2:e3:c9:a5:df:06:d7:2f:91:
ba:5c:7d:92:69:05:e8:b8:46:96:c5:84:de:0e:9e:fc:e4:63:
e0:9f:76:fb:b9:8f:5a:16:b2:cc:04:35:ba:45:cc:6b:5f:46:
37:82:ee:cb:88:d4:be:50:47:70:e7:13:c1:59:a1:98:68:66:
e9:ee:e9:97:18:c0:9e:09:e4:e4:09:e5:b8:fe:35:b3:d8:63:
9b:92:09:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 17:49:40 2025 by rpki-client