Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/d021f9-a001-452b-a5ee-abbf1f078ad3/1/rbxfdyGkrMuWNd4XW7xtMeF8mo0.mft
File: rbxfdyGkrMuWNd4XW7xtMeF8mo0.mft (raw, json)
Hash identifier: 31t9nnEaht3Woo6O5qTi6urS8ez8C+N/PpAmk9a7QwA=
Subject key identifier: B0:96:35:81:96:59:9B:95:8D:C0:6A:E4:6B:91:38:6C:59:2D:4A:AD
Authority key identifier: AD:BC:5F:77:21:A4:AC:CB:96:35:DE:17:5B:BC:6D:31:E1:7C:9A:8D
Certificate issuer: /CN=adbc5f7721a4accb9635de175bbc6d31e17c9a8d
Certificate serial: 0194BD4E9B98CFCB1B2E891453C336609B8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rbxfdyGkrMuWNd4XW7xtMeF8mo0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/d021f9-a001-452b-a5ee-abbf1f078ad3/1/rbxfdyGkrMuWNd4XW7xtMeF8mo0.mft
Manifest number: 0B53
Signing time: Fri 31 Jan 2025 17:00:32 +0000
Manifest this update: Fri 31 Jan 2025 17:00:32 +0000
Manifest next update: Sat 01 Feb 2025 17:00:32 +0000
Files and hashes: 1: CDUJExHuCJVPUownDG0KoC95j6g.roa (hash: ec1LWrgiCmmzqFwlIQnZ7qEB99QoLDe3mTnBITPZ9Fo=)
2: rbxfdyGkrMuWNd4XW7xtMeF8mo0.crl (hash: EEyELqVV/ywx+XdPonCsCvxXwaIZ9l1fHrwTh3sVPKI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:9b:98:cf:cb:1b:2e:89:14:53:c3:36:60:9b:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adbc5f7721a4accb9635de175bbc6d31e17c9a8d
Validity
Not Before: Jan 31 17:00:32 2025 GMT
Not After : Feb 1 17:00:32 2025 GMT
Subject: CN=b096358196599b958dc06ae46b91386c592d4aad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:18:0b:9c:bc:13:21:16:f4:f0:33:9c:8a:32:
79:e1:c5:15:92:a3:57:62:3f:32:37:b6:32:7c:af:
7d:94:98:4f:d6:7a:c1:42:6e:32:f1:cb:05:52:ae:
6a:34:9e:85:fa:bd:6d:2b:65:3f:85:3f:34:8e:f5:
69:74:53:9c:89:04:b2:0f:a4:69:dc:d1:bb:cc:b1:
4a:11:8f:9b:d5:df:75:c6:aa:d6:88:43:86:fe:51:
37:91:40:7c:0a:75:4f:6e:01:4c:2c:22:96:c3:d8:
e2:76:5e:4d:de:f3:46:83:8c:d7:05:ca:98:44:9a:
f8:cd:b8:71:af:60:72:ae:65:7a:f0:d5:06:66:85:
82:86:18:94:a2:d9:62:73:a1:55:db:4a:45:a9:11:
49:fe:d4:28:7f:5c:8f:2f:e1:b1:61:7c:ea:ff:4a:
ab:ca:de:3b:41:4b:98:a4:6f:4a:80:dd:d6:4e:03:
71:0e:53:be:fc:5c:f3:2e:23:8f:50:a8:b5:76:4a:
97:c3:e2:3c:71:bc:3c:36:25:7a:6d:c2:cd:b9:36:
56:2f:b0:6e:67:77:4c:f7:ab:db:81:80:74:03:b3:
7b:06:c1:fe:a0:91:7d:01:b6:64:02:f8:98:d9:0f:
72:1b:f9:8b:96:e7:20:9e:de:67:bd:d4:6d:9e:26:
45:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:96:35:81:96:59:9B:95:8D:C0:6A:E4:6B:91:38:6C:59:2D:4A:AD
X509v3 Authority Key Identifier:
keyid:AD:BC:5F:77:21:A4:AC:CB:96:35:DE:17:5B:BC:6D:31:E1:7C:9A:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rbxfdyGkrMuWNd4XW7xtMeF8mo0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/d021f9-a001-452b-a5ee-abbf1f078ad3/1/rbxfdyGkrMuWNd4XW7xtMeF8mo0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/d021f9-a001-452b-a5ee-abbf1f078ad3/1/rbxfdyGkrMuWNd4XW7xtMeF8mo0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:56:94:70:05:bf:5f:f5:0e:d3:44:95:18:c3:b9:2f:2e:4a:
0e:9f:8e:a8:98:c8:4b:d3:6b:52:ca:ce:6d:f5:bb:f8:4e:5a:
b0:ff:e3:b5:ef:10:85:2e:55:19:62:5a:d2:1a:7c:ed:09:50:
af:a6:47:41:65:d4:0c:85:17:33:45:47:10:ad:e8:f2:5d:19:
b2:13:8d:de:d3:61:44:eb:a4:22:13:7d:9b:5c:52:12:62:a2:
4b:0c:ce:97:24:3c:ad:4e:65:fc:80:6d:8c:a2:d1:b5:55:59:
4d:f1:01:92:69:7d:93:2b:99:48:bf:d5:3a:ad:30:ac:fb:ec:
04:9b:54:a7:c0:06:64:3c:d7:dd:1d:dd:8d:33:b1:99:76:55:
64:5a:24:41:5f:95:8a:4e:02:ef:95:75:17:68:73:4e:b6:13:
0b:36:6d:25:39:a3:2a:e4:54:fb:24:c4:bc:eb:f8:57:cd:d2:
8e:95:65:59:93:7a:0b:77:a0:a9:c8:6d:9d:e2:7f:8a:c9:88:
ad:80:4f:4d:46:80:82:db:b8:f4:c4:95:35:5f:4d:f5:8d:43:
e6:ba:f1:da:ac:25:47:d8:31:95:99:27:48:91:29:1a:98:fb:
4d:33:3d:58:71:f2:8a:43:33:aa:6d:69:38:25:91:88:a3:78:
18:75:60:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:47:41 2025 by rpki-client