Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/06e27a-c039-48df-ae7e-3f8e7f103899/1/Ru0nXFpziIjVgGle3TZxWVlEeSE.mft
File: Ru0nXFpziIjVgGle3TZxWVlEeSE.mft (raw, json)
Hash identifier: QdxtsGbJTnt1ZwtsU9rweZX+Ts4MBuBozxEEck9q15Q=
Subject key identifier: B6:E2:05:8A:EF:61:6A:09:57:5C:9E:27:A7:0F:CC:D8:44:13:86:7F
Authority key identifier: 46:ED:27:5C:5A:73:88:88:D5:80:69:5E:DD:36:71:59:59:44:79:21
Certificate issuer: /CN=46ed275c5a738888d580695edd36715959447921
Certificate serial: 0194BC04C11B2ECF31C990431C5AFCD680EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ru0nXFpziIjVgGle3TZxWVlEeSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/06e27a-c039-48df-ae7e-3f8e7f103899/1/Ru0nXFpziIjVgGle3TZxWVlEeSE.mft
Manifest number: 047B
Signing time: Fri 31 Jan 2025 11:00:15 +0000
Manifest this update: Fri 31 Jan 2025 11:00:15 +0000
Manifest next update: Sat 01 Feb 2025 11:00:15 +0000
Files and hashes: 1: Ru0nXFpziIjVgGle3TZxWVlEeSE.crl (hash: 7ntOKVMEf9s+EXjZERsW3N6MeVxTSv5/Wa7pserQgfg=)
2: uOExWuSOVw3WsjvU2eYOWMWKUpM.roa (hash: hA0HItJlYM+q1aZPrXih9b73zlhaFUPXGNtsx6XoxS0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:c1:1b:2e:cf:31:c9:90:43:1c:5a:fc:d6:80:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46ed275c5a738888d580695edd36715959447921
Validity
Not Before: Jan 31 11:00:15 2025 GMT
Not After : Feb 1 11:00:15 2025 GMT
Subject: CN=b6e2058aef616a09575c9e27a70fccd84413867f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b8:42:66:4e:bc:9d:07:0d:27:78:cc:27:28:
eb:34:64:84:f2:77:3d:d2:8c:d5:67:23:8c:cc:d2:
12:1b:70:61:e7:0b:28:fe:9e:a6:1f:bc:64:b3:97:
2f:40:73:6b:ee:3f:e9:8d:33:09:08:89:cd:d7:73:
93:f9:e0:33:e7:a5:e1:01:c7:08:b4:a9:1e:36:b9:
5e:79:1a:42:1e:1b:49:05:57:be:8a:58:d4:10:a2:
41:bd:a6:a6:8a:ce:a3:a7:be:f3:8f:7e:23:09:26:
03:03:15:93:f3:fb:4b:6a:31:3e:25:4d:12:3a:ef:
c0:71:e3:1d:f1:70:0e:4f:40:c7:f3:8f:6d:c6:af:
fa:7f:77:a1:e5:fe:03:6f:73:dd:b6:6e:ef:90:7e:
76:90:c0:fb:3a:67:c2:13:c9:d0:a5:66:2b:fd:48:
70:8f:82:16:2b:af:26:9b:04:e0:4a:42:e2:62:4c:
5e:3e:00:6e:ab:30:9e:e5:35:24:87:23:8b:fb:1a:
60:4c:1d:cd:a2:05:e2:d1:af:36:21:26:27:c6:a7:
6c:cf:b8:90:e8:f2:b1:2e:36:e7:4d:85:d6:b5:85:
23:a4:03:63:b1:c2:39:0c:06:4c:f4:33:49:5f:62:
c2:ac:ec:d2:f7:87:d9:d8:c7:18:ee:d2:59:19:b7:
b8:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:E2:05:8A:EF:61:6A:09:57:5C:9E:27:A7:0F:CC:D8:44:13:86:7F
X509v3 Authority Key Identifier:
keyid:46:ED:27:5C:5A:73:88:88:D5:80:69:5E:DD:36:71:59:59:44:79:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ru0nXFpziIjVgGle3TZxWVlEeSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/06e27a-c039-48df-ae7e-3f8e7f103899/1/Ru0nXFpziIjVgGle3TZxWVlEeSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/06e27a-c039-48df-ae7e-3f8e7f103899/1/Ru0nXFpziIjVgGle3TZxWVlEeSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:97:f7:b3:26:87:fe:bf:eb:60:00:bb:ca:51:d6:e1:75:fc:
fc:ac:a2:20:8b:bb:65:14:30:cf:2e:53:6e:a2:39:15:6f:cd:
21:21:03:d8:47:9d:e4:6a:83:7d:c3:25:0e:91:ce:48:30:29:
b4:98:6c:55:49:91:13:20:f9:77:9a:05:36:08:f8:54:f3:9a:
1c:5d:c9:92:ae:f2:60:59:82:73:0f:ee:c2:7a:d4:4e:ea:15:
a9:94:27:fc:bb:c8:12:db:9d:1b:dc:27:66:88:f8:69:f9:c4:
de:30:66:e1:9f:30:65:d9:16:04:37:f1:52:9a:1d:77:21:d6:
0f:bb:cc:22:33:09:38:32:ee:15:0b:41:84:ae:de:b4:ab:52:
4e:75:7d:10:55:ff:07:8d:06:8e:64:8a:14:81:97:3f:d7:f1:
41:de:8b:52:79:86:91:8e:56:13:36:14:f9:aa:70:7f:0d:ad:
20:db:7e:9e:d8:3c:8d:29:19:80:ba:41:ab:26:f3:67:0d:64:
52:b6:9d:2a:8a:d8:9d:43:7c:38:bf:11:a7:4f:84:4e:ad:cf:
56:fd:ce:b2:ba:b4:60:cc:e9:d5:e0:1a:ad:57:f9:7b:2b:fe:
82:c8:1c:30:19:e8:0a:81:cb:9f:c7:e7:3a:c6:fa:2b:85:a6:
93:cc:98:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:48:19 2025 by rpki-client