Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/d54138-1308-4b42-a170-5492e0e4ebc3/1/RnSvG73Eykg8ZpxP4L3XZLisFnU.mft
File: RnSvG73Eykg8ZpxP4L3XZLisFnU.mft (raw, json)
Hash identifier: 4Lme1qq/z1Nn3WFU6gS8uoc9P03Q94bH2zPsq98JKUA=
Subject key identifier: FA:6B:78:BB:A6:6F:BD:9D:B8:32:11:87:D7:77:8D:5A:AD:E2:B0:93
Authority key identifier: 46:74:AF:1B:BD:C4:CA:48:3C:66:9C:4F:E0:BD:D7:64:B8:AC:16:75
Certificate issuer: /CN=4674af1bbdc4ca483c669c4fe0bdd764b8ac1675
Certificate serial: 0194BD17C5EC4280DFBD4926FE25CC07C01A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RnSvG73Eykg8ZpxP4L3XZLisFnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/d54138-1308-4b42-a170-5492e0e4ebc3/1/RnSvG73Eykg8ZpxP4L3XZLisFnU.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 16:00:39 +0000
Manifest this update: Fri 31 Jan 2025 16:00:39 +0000
Manifest next update: Sat 01 Feb 2025 16:00:39 +0000
Files and hashes: 1: RnSvG73Eykg8ZpxP4L3XZLisFnU.crl (hash: jgiMdqvxEBotWl9yUXGRHYYN2gSp3EHNLzxs7AsBXek=)
2: beiTDj2zXTqFS71TOFpPvmffaII.roa (hash: sXUiI9l6myIN9UkpCjgTw8A4sT8JADqa4WvJBsl/hwA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:c5:ec:42:80:df:bd:49:26:fe:25:cc:07:c0:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4674af1bbdc4ca483c669c4fe0bdd764b8ac1675
Validity
Not Before: Jan 31 16:00:39 2025 GMT
Not After : Feb 1 16:00:39 2025 GMT
Subject: CN=fa6b78bba66fbd9db8321187d7778d5aade2b093
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ff:9d:23:ee:0d:3a:ab:c6:30:1a:3a:18:ba:
02:bd:fb:d3:3b:d0:cc:69:f7:ce:b3:b3:7a:e1:ea:
f0:b6:39:22:ab:24:b7:53:c8:d2:85:62:d2:c9:77:
e8:9f:ec:53:7e:2a:d8:5d:54:86:f7:74:85:f4:ef:
17:e7:7a:c8:0d:6c:b3:78:7e:4f:a5:7a:21:ea:e7:
62:92:dd:da:c0:34:1a:de:21:37:5f:76:03:32:08:
c8:a3:6b:ba:ca:e5:82:26:47:02:13:7b:27:e8:43:
b1:c6:62:92:54:a3:0f:e5:5c:66:0a:51:d2:04:af:
94:cf:df:5e:88:de:5b:d2:04:3f:7c:e1:e6:c5:c3:
e4:3e:45:40:be:4e:c9:eb:e2:30:5f:3d:4a:45:d7:
2a:6c:b1:85:99:45:9e:f5:c4:03:4f:41:e3:24:84:
f1:d3:87:2a:f2:72:b1:da:16:83:92:54:0d:ee:33:
10:d9:87:3d:a5:e8:42:65:de:88:84:cb:85:37:2b:
cf:fa:35:13:30:01:0d:a9:51:53:a4:0a:8f:c2:27:
c8:a5:38:c0:a6:aa:c8:61:84:f9:a4:24:b1:80:55:
7c:8a:9e:23:da:b8:9d:41:c3:a2:c0:d0:08:40:56:
56:4b:e3:2c:b9:9d:c6:0b:27:dc:55:a9:65:6d:1d:
61:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:6B:78:BB:A6:6F:BD:9D:B8:32:11:87:D7:77:8D:5A:AD:E2:B0:93
X509v3 Authority Key Identifier:
keyid:46:74:AF:1B:BD:C4:CA:48:3C:66:9C:4F:E0:BD:D7:64:B8:AC:16:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RnSvG73Eykg8ZpxP4L3XZLisFnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/d54138-1308-4b42-a170-5492e0e4ebc3/1/RnSvG73Eykg8ZpxP4L3XZLisFnU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/d54138-1308-4b42-a170-5492e0e4ebc3/1/RnSvG73Eykg8ZpxP4L3XZLisFnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:61:5f:85:fb:d2:8b:ff:78:d1:61:7e:f9:19:0d:0f:8f:5f:
57:9a:68:da:f3:cd:69:ca:9f:1d:ba:1e:be:4b:ea:70:82:ad:
32:40:24:13:37:01:d1:3e:7b:3d:80:40:72:a8:3b:a0:37:57:
e4:c7:88:5d:0b:11:5b:41:95:12:22:74:31:a4:0e:4a:f1:b7:
98:14:f3:23:8d:e1:03:de:8b:8a:80:e3:88:35:64:76:f6:82:
4e:a2:e1:b3:06:bb:65:c9:87:7b:59:2a:cd:0e:40:59:be:4a:
62:ce:c1:b3:72:4a:51:86:3a:59:71:0f:bf:41:b0:c0:be:32:
e2:2e:77:a7:42:ea:3d:bb:af:90:11:d9:f5:83:d9:79:83:7e:
2d:0a:ee:0b:f2:b1:db:ef:fc:b0:10:4b:2a:14:4e:8e:49:06:
00:b7:71:86:ea:0b:03:83:b5:f9:0a:3b:82:ba:a8:25:0e:76:
65:b5:e3:16:b0:be:e8:2c:51:de:27:1a:59:f5:87:8c:3b:42:
8a:06:af:d3:bf:e9:a2:19:d1:7d:d3:9d:12:8b:2b:e7:70:86:
76:0b:ee:75:f9:88:e0:9b:54:3e:71:e4:80:fc:53:7f:b0:c8:
fc:05:97:42:5b:2a:b0:f0:61:7f:49:8c:06:64:b9:99:90:5c:
a9:f9:3e:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:06:18 2025 by rpki-client