Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/9fedd0-4ed7-4419-8e73-b5ca0adf2f08/1/__RCr_uhz67zECyYHXVpUCzmUVw.mft
File: __RCr_uhz67zECyYHXVpUCzmUVw.mft (raw, json)
Hash identifier: L+Kbm6kZ/2K1G0yu0e9TwajShR5VNgXDxRfE05j+gik=
Subject key identifier: CB:C5:62:A8:25:11:6B:51:B4:90:B7:5C:CC:1C:20:91:C2:C5:C2:3F
Authority key identifier: FF:F4:42:AF:FB:A1:CF:AE:F3:10:2C:98:1D:75:69:50:2C:E6:51:5C
Certificate issuer: /CN=fff442affba1cfaef3102c981d7569502ce6515c
Certificate serial: 0194BBCECFC828E43A2FE5D6B3E58DE1C181
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/__RCr_uhz67zECyYHXVpUCzmUVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/9fedd0-4ed7-4419-8e73-b5ca0adf2f08/1/__RCr_uhz67zECyYHXVpUCzmUVw.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 10:01:20 +0000
Manifest this update: Fri 31 Jan 2025 10:01:20 +0000
Manifest next update: Sat 01 Feb 2025 10:01:20 +0000
Files and hashes: 1: __RCr_uhz67zECyYHXVpUCzmUVw.crl (hash: l4i9FUgPo9ECEEWyLxlpC1w9wrjf8vkJjaV4ZYDco94=)
2: cfHPpH74hHCJK1pLDEwyQ7AMZJY.roa (hash: Gmnr746njngjtdW+doOVMtWLzbG5WcOtPqH2dI9MOLw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:cf:c8:28:e4:3a:2f:e5:d6:b3:e5:8d:e1:c1:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fff442affba1cfaef3102c981d7569502ce6515c
Validity
Not Before: Jan 31 10:01:20 2025 GMT
Not After : Feb 1 10:01:20 2025 GMT
Subject: CN=cbc562a825116b51b490b75ccc1c2091c2c5c23f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:de:66:e2:76:16:f2:22:19:ec:cb:e5:b4:10:
c6:d3:32:c2:0a:08:03:b9:4b:0a:41:ec:80:e7:2b:
fb:82:23:fd:95:79:27:cd:39:8d:a2:dc:10:04:da:
d5:29:49:59:83:37:66:b8:26:e1:74:7d:b9:5b:5f:
96:3f:6f:bc:3d:1f:13:62:11:54:74:71:b8:47:51:
49:3f:f2:cc:e5:59:06:fc:2a:0e:b7:eb:54:e5:e8:
bd:43:91:8d:32:36:39:49:79:59:5e:fd:90:fb:6e:
7f:8f:92:81:3b:aa:17:1e:39:04:10:07:4b:da:d6:
47:54:41:59:ec:05:5e:39:81:e3:c8:9d:68:ef:00:
e9:7e:dd:a0:a3:5b:d8:7b:76:13:4f:68:46:c4:ee:
b9:93:f1:86:f9:f5:7d:1a:8b:41:b7:18:28:bd:d5:
40:7c:c9:53:8e:f8:87:b1:8f:2a:15:28:40:2e:48:
a4:40:56:91:8c:73:01:7a:9c:55:e8:a2:7e:9e:fc:
81:9f:fa:cd:c8:a7:21:11:c8:a6:7b:b8:b4:23:6c:
ef:99:e5:16:48:56:7c:10:7f:8c:65:9e:1a:f3:59:
1a:69:13:09:c0:bf:03:d6:27:4a:86:28:b2:45:2c:
6f:23:c0:c4:73:ac:22:9c:59:22:15:64:ce:4a:12:
8c:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:C5:62:A8:25:11:6B:51:B4:90:B7:5C:CC:1C:20:91:C2:C5:C2:3F
X509v3 Authority Key Identifier:
keyid:FF:F4:42:AF:FB:A1:CF:AE:F3:10:2C:98:1D:75:69:50:2C:E6:51:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/__RCr_uhz67zECyYHXVpUCzmUVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/9fedd0-4ed7-4419-8e73-b5ca0adf2f08/1/__RCr_uhz67zECyYHXVpUCzmUVw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/9fedd0-4ed7-4419-8e73-b5ca0adf2f08/1/__RCr_uhz67zECyYHXVpUCzmUVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:63:45:e4:e9:f4:60:82:26:3a:16:ee:9f:95:64:8d:fb:29:
33:44:5f:ad:2a:7a:b5:c7:ee:df:01:5f:ef:50:92:98:07:b5:
be:ea:b8:ea:27:fc:87:f2:1c:e9:f4:7b:e9:08:f1:20:76:19:
25:eb:c5:9b:25:df:56:3f:db:a7:e4:a0:cc:ad:65:ec:bb:33:
4a:d9:7d:fd:ed:56:92:97:4f:67:d7:1c:2f:21:5b:0e:9a:cb:
55:05:ba:68:07:dc:4e:95:03:e1:10:72:d2:93:76:72:cc:7b:
ee:2d:02:13:ce:c4:e1:1c:bb:52:17:aa:04:7c:4b:e5:1e:c4:
90:75:e5:3a:aa:b3:31:ca:6e:ed:a9:38:1e:f7:cf:fc:6e:10:
4c:f8:fa:b2:a8:7b:4d:d0:bb:06:ac:7b:ea:f1:8d:ac:d7:e0:
25:e2:d7:38:1e:c5:b9:43:84:5b:46:f3:34:c7:5d:e3:09:92:
b5:1f:23:38:7e:96:e5:89:76:f6:e3:ae:d3:1a:9d:b8:56:bc:
b0:24:ff:ea:d6:f5:27:f5:87:8a:00:ff:0f:96:d0:3b:24:da:
40:7c:80:75:5e:b3:c9:ae:e3:cd:4a:d8:f1:2a:8b:43:82:76:
0a:64:ea:d9:19:83:a8:db:bc:7b:e4:1b:c0:10:b9:41:63:7f:
99:55:06:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:37 2025 by rpki-client