Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/b688da-765c-4481-8eb3-730383211f25/1/46iYuhJQyJicx22fi1PR28YrKJA.mft
File: 46iYuhJQyJicx22fi1PR28YrKJA.mft (raw, json)
Hash identifier: vBk5J3KXkb6qBRdO657yWdbaIiQU2GCF5lpLwZvfoUc=
Subject key identifier: F1:B8:F7:56:DD:A3:F6:DF:4E:44:C4:A1:01:0D:E7:74:E1:D6:0D:87
Authority key identifier: E3:A8:98:BA:12:50:C8:98:9C:C7:6D:9F:8B:53:D1:DB:C6:2B:28:90
Certificate issuer: /CN=e3a898ba1250c8989cc76d9f8b53d1dbc62b2890
Certificate serial: 0194BCAA1B38FD2CCE72B407BD5F6D5E2BFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/46iYuhJQyJicx22fi1PR28YrKJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/b688da-765c-4481-8eb3-730383211f25/1/46iYuhJQyJicx22fi1PR28YrKJA.mft
Manifest number: 0983
Signing time: Fri 31 Jan 2025 14:00:52 +0000
Manifest this update: Fri 31 Jan 2025 14:00:52 +0000
Manifest next update: Sat 01 Feb 2025 14:00:52 +0000
Files and hashes: 1: 46iYuhJQyJicx22fi1PR28YrKJA.crl (hash: wtLM3UlAYy1emTrr8xCrl57Q6F8E4DxEDYL+frl7YH0=)
2: iPsc5cdyBdI5OoAXm1WxUyXcwKs.roa (hash: uev/ryB2qmGhnPuUk4GEhG25G76cZsNfJpVAjKwYXdQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:1b:38:fd:2c:ce:72:b4:07:bd:5f:6d:5e:2b:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3a898ba1250c8989cc76d9f8b53d1dbc62b2890
Validity
Not Before: Jan 31 14:00:52 2025 GMT
Not After : Feb 1 14:00:52 2025 GMT
Subject: CN=f1b8f756dda3f6df4e44c4a1010de774e1d60d87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:8c:6f:c3:1e:0f:bd:19:58:c6:d6:95:5c:75:
52:90:72:de:05:4e:36:bc:64:e6:2f:46:38:f6:ce:
2f:05:05:b5:ff:98:4a:86:73:60:c9:48:34:54:f4:
33:4a:c6:b4:a6:a5:98:d5:06:e3:0d:4d:d6:78:a2:
06:16:8d:1b:a5:fc:7c:20:b7:a1:c2:10:c5:9f:cf:
6d:9b:fd:ee:4a:1b:a9:9c:30:ad:3a:ec:7f:ef:35:
10:44:9a:dc:2e:8d:5e:39:8d:ae:33:0a:50:69:08:
4b:de:5c:f7:6c:1a:ff:ea:9a:7b:0e:cb:c8:e4:4f:
e4:d3:7d:71:25:4a:66:44:ba:f9:8e:76:a8:cf:c4:
40:ff:41:51:26:86:18:c1:b6:69:6d:fa:ba:30:1a:
25:27:38:2c:4b:e1:fe:aa:30:8e:68:11:55:6a:1e:
05:18:5e:39:d4:ed:0e:c6:7f:c3:02:9f:a4:e7:82:
41:95:36:d6:68:de:60:af:ef:a4:c5:74:80:ec:03:
42:cf:f0:13:6c:47:75:52:e8:5c:ec:38:5f:07:78:
b5:cd:cf:aa:b6:97:a6:02:19:8b:3e:ae:18:48:81:
27:13:d6:18:94:fb:c4:df:df:67:58:13:c8:8a:0e:
a2:05:a6:a8:2e:27:e7:e0:59:13:d1:eb:4e:42:05:
48:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:B8:F7:56:DD:A3:F6:DF:4E:44:C4:A1:01:0D:E7:74:E1:D6:0D:87
X509v3 Authority Key Identifier:
keyid:E3:A8:98:BA:12:50:C8:98:9C:C7:6D:9F:8B:53:D1:DB:C6:2B:28:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/46iYuhJQyJicx22fi1PR28YrKJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/b688da-765c-4481-8eb3-730383211f25/1/46iYuhJQyJicx22fi1PR28YrKJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/b688da-765c-4481-8eb3-730383211f25/1/46iYuhJQyJicx22fi1PR28YrKJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:ba:c6:fa:65:9b:4e:d1:68:8b:ef:a7:ef:e1:48:11:27:7a:
d5:bb:06:66:90:a5:d4:d7:bc:fb:bb:58:7a:50:19:be:e4:f3:
b4:3d:82:05:65:26:83:04:9d:89:01:fa:b7:09:c5:e8:2b:1f:
9d:07:ae:45:d0:0b:e2:ca:c9:19:4d:e5:cc:f0:f0:95:68:7e:
9c:da:4d:b8:52:51:0a:0c:94:2b:3d:f1:b4:b0:1d:8a:f0:47:
6e:27:6a:52:b5:22:db:02:44:55:ff:25:d1:58:1a:ab:41:a7:
85:3e:e2:90:06:b7:d3:ac:2c:78:c2:14:08:5a:62:83:e4:49:
7d:da:76:55:ac:15:8f:54:83:e3:ae:49:1a:cf:03:8b:9b:b2:
8d:6e:d3:c0:ab:2f:de:fe:17:cd:e0:a6:22:c3:ae:db:00:64:
85:ef:b2:c5:df:ad:6d:cb:e8:df:c2:c4:13:24:a2:b9:91:c3:
9b:61:79:64:e8:92:90:07:20:3a:de:0e:40:ac:cd:6f:cb:34:
6e:59:11:75:54:34:c5:c7:0f:99:5c:be:7b:fc:16:15:65:b3:
66:f7:9e:6f:e6:ad:1e:0d:f5:8a:6a:ec:5c:e0:bb:b0:15:f0:
20:de:0d:64:bc:c9:ab:f5:49:de:3b:79:8e:15:bb:4f:3a:02:
2f:21:2c:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:31:49 2025 by rpki-client