Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b29d96-da9e-47a0-9fb1-1243b46795f8/1/re6JwT1t5zqJRAS_fq-e5eQN6jM.mft
File: re6JwT1t5zqJRAS_fq-e5eQN6jM.mft (raw, json)
Hash identifier: vSOMH2Pg6tDWQ/4/Ur0v+SzsDEAAuDWCCtFZTbJGu2c=
Subject key identifier: 3C:4E:92:31:AC:18:1F:89:9D:58:76:BC:38:CC:A9:3A:45:5F:08:82
Authority key identifier: AD:EE:89:C1:3D:6D:E7:3A:89:44:04:BF:7E:AF:9E:E5:E4:0D:EA:33
Certificate issuer: /CN=adee89c13d6de73a894404bf7eaf9ee5e40dea33
Certificate serial: 0194BC730C105F1C5E9F9DF63147F822097F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/re6JwT1t5zqJRAS_fq-e5eQN6jM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b29d96-da9e-47a0-9fb1-1243b46795f8/1/re6JwT1t5zqJRAS_fq-e5eQN6jM.mft
Manifest number: 0498
Signing time: Fri 31 Jan 2025 13:00:43 +0000
Manifest this update: Fri 31 Jan 2025 13:00:43 +0000
Manifest next update: Sat 01 Feb 2025 13:00:43 +0000
Files and hashes: 1: GGsR3CTZp_ySYvfRDUPF91N6wRs.roa (hash: +hbDhYAqa8s6kUaFV+M346NJRpWW83Nz49mGZoVut4k=)
2: re6JwT1t5zqJRAS_fq-e5eQN6jM.crl (hash: 1q+aaTXqPy4+U9Yni1yyvaGIRZxaEOdxgF7gt7JrOik=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:0c:10:5f:1c:5e:9f:9d:f6:31:47:f8:22:09:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adee89c13d6de73a894404bf7eaf9ee5e40dea33
Validity
Not Before: Jan 31 13:00:43 2025 GMT
Not After : Feb 1 13:00:43 2025 GMT
Subject: CN=3c4e9231ac181f899d5876bc38cca93a455f0882
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:9a:0c:52:b9:f5:a3:40:42:de:61:b0:7b:3d:
a1:f5:45:f7:be:54:bb:38:35:5e:df:81:8a:74:50:
8d:59:76:2d:4f:20:95:38:c8:4c:57:1b:f6:60:bf:
82:86:fc:0b:e4:ca:78:d1:a2:e7:40:42:1b:4b:ee:
41:94:5d:e3:fa:b6:16:e1:8c:67:26:4b:a6:28:73:
d4:65:57:1e:70:91:3a:69:e7:f4:f4:2b:41:2b:10:
2d:a3:7c:1a:36:6c:11:11:f4:be:91:b6:03:36:e8:
11:67:6e:23:23:ca:e6:8c:cc:b7:07:50:7c:40:98:
38:88:90:8e:50:9f:61:6a:51:c9:ca:8a:a1:3e:3c:
0f:8e:b3:46:fa:d3:00:f0:9d:b5:40:7a:14:f9:4b:
34:94:3b:d1:0d:50:29:4b:47:9a:86:26:51:0e:fd:
03:7e:d0:17:1b:83:2d:89:ec:1d:e2:83:01:bc:9e:
c0:e7:57:86:89:8a:9b:08:51:2e:af:a0:f3:03:19:
91:a0:e4:43:7b:53:ae:33:1a:c1:c6:21:6d:13:8a:
51:cc:82:da:46:f0:57:34:05:0b:f8:5e:88:cb:0d:
78:65:1a:00:64:51:72:37:08:0d:c6:e4:05:09:0a:
d1:9d:ec:51:aa:2f:a0:10:28:75:ef:b2:d8:35:90:
07:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:4E:92:31:AC:18:1F:89:9D:58:76:BC:38:CC:A9:3A:45:5F:08:82
X509v3 Authority Key Identifier:
keyid:AD:EE:89:C1:3D:6D:E7:3A:89:44:04:BF:7E:AF:9E:E5:E4:0D:EA:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/re6JwT1t5zqJRAS_fq-e5eQN6jM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b29d96-da9e-47a0-9fb1-1243b46795f8/1/re6JwT1t5zqJRAS_fq-e5eQN6jM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b29d96-da9e-47a0-9fb1-1243b46795f8/1/re6JwT1t5zqJRAS_fq-e5eQN6jM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:c5:07:ad:c6:b3:51:4c:f5:61:e0:43:c3:6a:37:9a:e8:1f:
5c:f3:0c:cb:d3:2a:6d:81:b4:06:1e:72:05:05:c6:68:33:06:
57:77:63:54:b3:98:8f:1b:c0:2c:91:5f:0c:69:f3:ec:51:18:
35:e4:59:c8:6d:2d:a2:5e:80:77:23:72:9e:5e:4b:03:5b:1e:
8e:b7:15:d5:75:a0:d5:69:6d:1e:fd:89:1a:3b:e6:59:36:7c:
be:ea:b1:38:03:b7:a7:a4:fb:f0:45:fc:bb:66:8e:26:2f:26:
4a:07:29:3d:c4:19:01:3f:10:de:db:51:85:fd:13:b8:41:3d:
b6:8c:62:7d:f4:76:9e:a2:fb:44:17:df:6c:f1:f2:3c:e6:83:
a8:fb:b1:36:e0:47:26:4a:c7:1f:5c:39:8d:7d:bf:80:a5:5a:
06:43:1f:3e:06:48:bf:3e:c3:e3:c5:d3:c4:d0:06:f3:5f:ca:
47:92:e7:51:5a:24:99:6f:70:91:3c:7d:0c:cf:08:b3:db:98:
3d:99:59:55:37:c2:61:07:a5:39:50:e5:f1:07:50:f9:cb:57:
69:8d:82:97:f6:65:99:8b:5d:6a:bb:13:ef:2a:ef:52:94:c6:
bd:7f:30:11:4d:d0:ce:de:62:6f:c5:96:ca:89:08:7e:27:f7:
41:00:66:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:34:51 2025 by rpki-client