Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/d661d4-c624-4a0c-9069-352cfc369ef3/1/R-XTM9rZ1i1TKNEleKMd70KvjzQ.mft
File: R-XTM9rZ1i1TKNEleKMd70KvjzQ.mft (raw, json)
Hash identifier: VpkE7xwEifI/9Ix9aeQF6yoY/9Vlyhy2UpYgcRc/hqg=
Subject key identifier: E1:DA:EF:D5:9C:24:1A:3A:BE:4C:03:F4:C3:72:4F:43:0B:A2:3C:20
Authority key identifier: 47:E5:D3:33:DA:D9:D6:2D:53:28:D1:25:78:A3:1D:EF:42:AF:8F:34
Certificate issuer: /CN=47e5d333dad9d62d5328d12578a31def42af8f34
Certificate serial: 0194BD85875CDBEBACC2FFF9D8E21C174891
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R-XTM9rZ1i1TKNEleKMd70KvjzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/d661d4-c624-4a0c-9069-352cfc369ef3/1/R-XTM9rZ1i1TKNEleKMd70KvjzQ.mft
Manifest number: 06AB
Signing time: Fri 31 Jan 2025 18:00:32 +0000
Manifest this update: Fri 31 Jan 2025 18:00:32 +0000
Manifest next update: Sat 01 Feb 2025 18:00:32 +0000
Files and hashes: 1: I_0zk_rD0Gdq5jU6WeRSly4SVcs.roa (hash: JHLttM3n9KjjQEXLZtpKJI1GYGGri8Vj45nM2EhgE4A=)
2: R-XTM9rZ1i1TKNEleKMd70KvjzQ.crl (hash: +WUzv/giWfOaAvK2qkDb60OqumNMqMenlXIW0SPbVbg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:87:5c:db:eb:ac:c2:ff:f9:d8:e2:1c:17:48:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47e5d333dad9d62d5328d12578a31def42af8f34
Validity
Not Before: Jan 31 18:00:32 2025 GMT
Not After : Feb 1 18:00:32 2025 GMT
Subject: CN=e1daefd59c241a3abe4c03f4c3724f430ba23c20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2b:fb:0b:11:ee:fd:e1:7d:11:ec:8e:4c:39:
af:3e:4e:2e:eb:bf:db:66:7b:77:18:09:72:7e:00:
cf:e9:4a:14:1c:3f:87:7f:99:de:8c:cb:83:7b:39:
bf:7f:e9:ed:1e:4c:0c:b8:d0:5b:7b:b4:84:b1:c3:
cb:89:51:1a:c6:69:7f:f8:ca:63:9f:0c:b4:6b:c9:
23:d7:8d:b1:ce:10:ee:92:d9:b2:14:81:4e:7e:11:
80:a7:96:45:78:bb:c4:7d:dd:0c:3d:6b:9e:27:6b:
5a:6f:77:b3:59:02:bf:d9:3b:d8:6d:04:8b:9a:7f:
33:10:d8:ab:53:29:8f:60:3b:ce:60:c8:e7:03:a6:
45:8e:0f:a0:50:ef:4a:49:55:c3:78:42:66:a0:89:
77:44:f0:99:dd:9b:98:df:53:78:f8:3a:cc:2c:f9:
e1:94:59:9c:02:3a:13:b1:b9:7b:38:79:e9:26:a4:
bf:eb:81:5c:07:a7:c5:6e:3e:c7:df:76:ec:f7:47:
cd:ea:b1:8a:af:e0:84:ac:91:38:cd:8d:cb:e1:8b:
b7:f5:44:94:ed:a2:57:82:cf:19:0b:1a:3c:78:7f:
f2:da:0f:8d:82:9e:12:31:56:6b:1d:eb:63:fb:15:
0d:8f:0d:99:55:6a:d7:e2:57:f8:c6:38:a3:57:d5:
08:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:DA:EF:D5:9C:24:1A:3A:BE:4C:03:F4:C3:72:4F:43:0B:A2:3C:20
X509v3 Authority Key Identifier:
keyid:47:E5:D3:33:DA:D9:D6:2D:53:28:D1:25:78:A3:1D:EF:42:AF:8F:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R-XTM9rZ1i1TKNEleKMd70KvjzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/d661d4-c624-4a0c-9069-352cfc369ef3/1/R-XTM9rZ1i1TKNEleKMd70KvjzQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/d661d4-c624-4a0c-9069-352cfc369ef3/1/R-XTM9rZ1i1TKNEleKMd70KvjzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:ed:54:91:45:01:09:de:2c:0b:9d:51:a4:08:18:ac:3e:04:
7d:dc:8b:fa:7a:2b:e6:bb:15:8c:06:bb:ac:bc:be:39:86:c1:
35:9e:96:4a:ab:3e:41:e0:44:55:6a:f8:55:b9:f5:59:89:33:
a7:b2:ad:c9:16:e3:74:22:56:6c:b9:28:45:b0:1a:ce:97:60:
86:15:ff:79:db:7c:08:83:0a:93:45:64:a5:f4:5a:62:19:22:
9b:0c:c4:fd:7c:ab:6e:ec:bc:a6:7d:42:b3:4a:a3:d3:fa:1e:
09:b7:19:5d:fb:da:a9:34:23:9f:c1:c0:8e:d7:35:a9:52:e4:
1e:50:b0:da:ca:36:ff:69:74:e2:6e:49:fc:cb:03:a3:c3:3a:
fe:8d:4b:07:a1:b5:f0:c1:c5:48:b2:71:36:d5:83:fb:2b:c3:
88:9f:64:d6:e2:da:d0:17:09:08:00:f9:74:6d:46:3f:54:78:
f5:6e:a2:3c:ad:ef:c0:b7:68:f4:5e:69:4c:c7:e6:aa:ee:ae:
5b:dd:7d:ca:3f:ef:0d:7d:bd:e1:b8:06:73:11:5d:94:3d:ba:
06:b2:23:e8:f7:a9:1e:78:e3:f2:9a:6e:d0:28:f2:a7:75:19:
b7:00:ef:bc:69:36:7f:c3:b1:78:a4:48:2a:54:86:49:e2:ae:
98:91:25:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:48:45 2025 by rpki-client