Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/f090be-422b-4f2a-864f-9fca29decda8/1/rgMnvx57e_vdLyFMjvYpqink1m8.mft
File: rgMnvx57e_vdLyFMjvYpqink1m8.mft (raw, json)
Hash identifier: zImse5A4kWuAO0v8gJQ08TCndkfDUkSWAsZwkHk6drk=
Subject key identifier: E2:6E:A7:7F:8A:72:65:AA:48:6F:2F:E9:6A:37:7A:5B:AE:6F:11:53
Authority key identifier: AE:03:27:BF:1E:7B:7B:FB:DD:2F:21:4C:8E:F6:29:AA:29:E4:D6:6F
Certificate issuer: /CN=ae0327bf1e7b7bfbdd2f214c8ef629aa29e4d66f
Certificate serial: 0194BD17C170E45E028F0A7BCBC3482BA116
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rgMnvx57e_vdLyFMjvYpqink1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/f090be-422b-4f2a-864f-9fca29decda8/1/rgMnvx57e_vdLyFMjvYpqink1m8.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 16:00:38 +0000
Manifest this update: Fri 31 Jan 2025 16:00:38 +0000
Manifest next update: Sat 01 Feb 2025 16:00:38 +0000
Files and hashes: 1: D07K9M73JE_RghORuqvEImVGd0Q.roa (hash: kPt/ZOiMf9T1o4/zGBCvETiXAjwGaiEUsN/6gQ2oC8U=)
2: rgMnvx57e_vdLyFMjvYpqink1m8.crl (hash: UBESya0LhrDEouAnfja4IJx/LrGxdWYe0xK/it6N6Wo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:c1:70:e4:5e:02:8f:0a:7b:cb:c3:48:2b:a1:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae0327bf1e7b7bfbdd2f214c8ef629aa29e4d66f
Validity
Not Before: Jan 31 16:00:38 2025 GMT
Not After : Feb 1 16:00:38 2025 GMT
Subject: CN=e26ea77f8a7265aa486f2fe96a377a5bae6f1153
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:cb:68:d6:9c:3c:c4:11:77:21:cf:4b:de:5e:
f2:20:74:92:80:78:4c:1e:8f:4f:99:fe:7c:b4:72:
af:bd:d6:b2:6e:17:4c:09:49:9f:e0:ff:28:54:1c:
c1:5c:1c:cc:cc:1f:19:98:d5:b1:89:7f:77:cf:10:
31:1f:4d:8d:e5:13:1a:2a:b3:e8:ad:d1:1d:58:99:
9d:ed:d1:fb:5a:a3:dc:31:2e:21:fc:8e:b3:af:d0:
5a:19:cc:64:c4:0d:8a:ee:e5:a1:46:ca:1b:8c:f2:
ae:41:0a:75:c4:dc:c3:e6:84:58:99:f7:79:26:dd:
28:dd:59:99:0a:31:18:71:1c:09:dc:56:5a:f6:80:
25:87:2d:f0:f4:38:15:dc:a2:64:24:d7:f1:ca:a9:
f7:f8:c8:6f:a9:25:ef:61:b8:65:e4:d8:9d:34:b7:
53:51:01:c0:e5:8d:2b:b8:8e:b1:37:d0:62:75:84:
76:a9:94:db:0f:a5:37:25:0a:3a:6e:93:65:dc:40:
ed:56:e7:f3:7f:34:ef:ba:47:69:a6:da:d1:4b:47:
e9:0a:fc:b6:07:69:6a:e3:8b:b4:43:39:0e:1a:c4:
91:9c:17:40:41:e8:f6:95:b9:c9:82:5a:32:2e:08:
55:5e:cb:df:4f:f8:48:57:c7:b8:fc:07:8a:a2:b7:
42:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:6E:A7:7F:8A:72:65:AA:48:6F:2F:E9:6A:37:7A:5B:AE:6F:11:53
X509v3 Authority Key Identifier:
keyid:AE:03:27:BF:1E:7B:7B:FB:DD:2F:21:4C:8E:F6:29:AA:29:E4:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rgMnvx57e_vdLyFMjvYpqink1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f090be-422b-4f2a-864f-9fca29decda8/1/rgMnvx57e_vdLyFMjvYpqink1m8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f090be-422b-4f2a-864f-9fca29decda8/1/rgMnvx57e_vdLyFMjvYpqink1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:ba:3c:d6:25:88:e8:4b:32:54:49:5b:41:a0:83:4a:68:ac:
eb:4d:9d:bb:0a:04:95:c7:d8:d1:0a:77:af:1c:6a:af:1b:e9:
0d:be:2f:fc:87:19:df:57:2b:15:d8:38:3b:ff:4f:4f:68:c5:
65:b2:fd:f4:52:ae:8e:a7:91:43:9c:f9:5f:fd:b0:b5:69:e7:
c8:f4:c9:e7:a2:81:86:c1:a6:64:82:03:29:f5:60:cc:b4:37:
00:a9:06:ca:d7:33:36:ea:69:45:3c:67:ff:74:53:45:9b:0a:
17:92:ae:ed:4e:cf:07:e8:8e:84:0c:e1:17:f7:d3:c0:2f:88:
36:94:87:7b:4e:b9:26:62:89:3d:5c:fc:c9:10:49:4b:c0:b5:
19:aa:20:8b:15:a3:66:11:b8:6a:06:41:db:45:b4:b3:7b:68:
03:62:e2:38:9c:49:68:3c:45:a4:0d:80:de:b6:80:b4:01:38:
28:31:75:d9:c8:45:da:2a:ca:28:c7:b7:50:a2:dc:c5:38:1a:
0f:1a:ad:70:27:34:78:82:3f:aa:d2:09:26:ec:fb:e5:c1:55:
8e:fe:d0:54:67:4d:a5:d9:6f:01:bd:05:b9:e6:42:59:91:c2:
b8:9d:41:88:aa:86:e5:b1:71:24:a0:d8:08:b1:2c:08:be:25:
06:1d:ce:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:09 2025 by rpki-client