Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/cac593-6074-4221-befd-0a892ab47db3/1/RVffPlRtVtu10jD2EcckxZmnIlE.mft
File: RVffPlRtVtu10jD2EcckxZmnIlE.mft (raw, json)
Hash identifier: websOUUPYAQmr/JPAnwb/i5NQ0K7aup+zFlPbMXJyls=
Subject key identifier: 3E:24:D7:F1:B2:1B:F0:36:BD:6C:51:6B:72:DA:8B:DD:23:0F:86:63
Authority key identifier: 45:57:DF:3E:54:6D:56:DB:B5:D2:30:F6:11:C7:24:C5:99:A7:22:51
Certificate issuer: /CN=4557df3e546d56dbb5d230f611c724c599a72251
Certificate serial: 0194BBCDB2F7BD78C16D56B0EF375F11766A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RVffPlRtVtu10jD2EcckxZmnIlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/cac593-6074-4221-befd-0a892ab47db3/1/RVffPlRtVtu10jD2EcckxZmnIlE.mft
Manifest number: 0511
Signing time: Fri 31 Jan 2025 10:00:07 +0000
Manifest this update: Fri 31 Jan 2025 10:00:07 +0000
Manifest next update: Sat 01 Feb 2025 10:00:07 +0000
Files and hashes: 1: 8bsQRC6tEXl8CBwmVFzVd76zzgI.roa (hash: C8qiZHuVAIBOKIv/baZ/CLEIEY2S6o8WOpdp6qtA5us=)
2: RVffPlRtVtu10jD2EcckxZmnIlE.crl (hash: apgulobPZr+vTpDeEutRwqGBN6EN0jE8g0EOkUo0Idw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:b2:f7:bd:78:c1:6d:56:b0:ef:37:5f:11:76:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4557df3e546d56dbb5d230f611c724c599a72251
Validity
Not Before: Jan 31 10:00:07 2025 GMT
Not After : Feb 1 10:00:07 2025 GMT
Subject: CN=3e24d7f1b21bf036bd6c516b72da8bdd230f8663
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:0b:77:15:bf:be:b2:7e:68:82:43:74:7a:cc:
3e:fa:9b:70:36:70:ba:56:48:8b:11:4b:95:26:60:
bf:97:a3:47:e9:49:dc:31:91:55:b7:56:dd:df:a6:
28:26:26:e4:77:9a:6c:4f:cc:7d:2c:14:d7:56:92:
2e:3c:17:69:02:d4:c6:9d:cf:95:1b:3b:5b:c5:25:
99:69:7f:93:9d:6e:4a:7e:e1:7a:03:ff:53:98:f3:
e1:99:76:e3:dc:4c:04:5b:b3:77:f1:dc:9a:4a:65:
6f:ce:76:ef:48:e3:83:b0:32:fa:ef:2a:5f:ed:10:
bd:e8:25:47:76:09:ed:32:31:45:6f:49:f0:19:7f:
ad:44:c2:cd:51:b9:3e:3c:c0:1e:5d:97:76:88:2d:
6f:d8:a3:37:bd:bf:64:03:6a:45:f5:d9:c0:6c:c6:
19:34:82:f0:02:55:dd:1f:3c:43:21:1d:9d:34:7f:
44:bc:84:7e:d6:8d:db:10:b2:24:ee:97:65:32:ca:
58:fc:71:6f:0a:64:3d:bd:57:a6:13:5c:e8:67:0c:
52:4d:be:70:bb:cd:7d:19:ca:91:3c:01:9e:bd:9d:
71:0c:4a:a9:45:dd:5b:7a:2a:16:2c:25:ef:70:e9:
f0:9d:3a:9e:ee:05:7f:92:a0:75:be:4f:8d:44:56:
fe:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:24:D7:F1:B2:1B:F0:36:BD:6C:51:6B:72:DA:8B:DD:23:0F:86:63
X509v3 Authority Key Identifier:
keyid:45:57:DF:3E:54:6D:56:DB:B5:D2:30:F6:11:C7:24:C5:99:A7:22:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RVffPlRtVtu10jD2EcckxZmnIlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/cac593-6074-4221-befd-0a892ab47db3/1/RVffPlRtVtu10jD2EcckxZmnIlE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/cac593-6074-4221-befd-0a892ab47db3/1/RVffPlRtVtu10jD2EcckxZmnIlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:88:3f:75:88:44:95:5f:0f:50:70:95:a0:51:94:f8:9a:bc:
64:e5:9f:22:00:96:6a:98:83:4e:ba:ba:d0:bc:0c:e9:ea:37:
8e:37:cb:40:3a:40:c0:d2:3c:cf:b0:fc:f2:af:df:8e:08:05:
ab:9a:2e:35:29:57:f7:3e:a6:73:0e:32:0f:d5:f5:b7:8e:42:
73:0e:25:6f:9b:ab:b7:49:d2:9e:dc:de:2c:ad:26:8f:27:06:
24:8c:ac:54:92:7b:d4:78:e1:7d:cf:a4:77:f0:44:97:c3:6d:
c9:45:75:2b:74:8d:f9:18:ed:8b:3c:1b:23:56:f8:2d:b7:35:
ea:00:17:a5:80:62:6a:18:50:3b:ed:cb:ea:5b:d2:b3:42:2f:
cc:5b:ec:65:96:af:98:e6:c7:1c:ac:30:b4:10:83:f0:a6:ce:
f3:2c:90:99:6f:2b:a9:d7:50:b5:e5:61:0d:fc:b3:dc:28:07:
0d:40:32:2f:1f:f3:77:0c:e0:47:2b:03:3e:bb:04:10:f4:95:
63:50:f9:62:de:af:08:11:0f:13:58:72:2a:78:b2:37:2f:21:
b9:e9:67:0d:13:0a:d6:46:2f:7a:32:b5:0a:24:b5:fc:3d:e5:
38:1d:98:54:e4:71:e8:29:59:e2:2c:6e:8c:fa:ca:1e:a3:f9:
c9:52:81:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:34 2025 by rpki-client