Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/deb874-f90b-42c4-bcd2-47bbf21eac9f/1/rRDN0Li3MwTJhf3hsQ5AGCvxOQI.mft
File: rRDN0Li3MwTJhf3hsQ5AGCvxOQI.mft (raw, json)
Hash identifier: GUPzHlEF/uVNASvRbTK5+Sf9FYHUx2rje+WrAtvspps=
Subject key identifier: 68:02:CC:4A:FD:C0:54:54:4A:8F:19:3E:2E:67:2F:3E:90:0D:14:E1
Authority key identifier: AD:10:CD:D0:B8:B7:33:04:C9:85:FD:E1:B1:0E:40:18:2B:F1:39:02
Certificate issuer: /CN=ad10cdd0b8b73304c985fde1b10e40182bf13902
Certificate serial: 0194BC3C533F388C9CE6142E2CD66E201246
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rRDN0Li3MwTJhf3hsQ5AGCvxOQI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/deb874-f90b-42c4-bcd2-47bbf21eac9f/1/rRDN0Li3MwTJhf3hsQ5AGCvxOQI.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 12:00:57 +0000
Manifest this update: Fri 31 Jan 2025 12:00:57 +0000
Manifest next update: Sat 01 Feb 2025 12:00:57 +0000
Files and hashes: 1: Ja_97273VAEHJD8U1oqoC_9aF9c.roa (hash: vJfC/52sLPqoQGFApNLbUAegOgUUxIE6GeG0+RQdWv8=)
2: rRDN0Li3MwTJhf3hsQ5AGCvxOQI.crl (hash: CsZi879QuUbFOg0A1k8QmEOxs9Kot5dUx51a6NoIMHs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:53:3f:38:8c:9c:e6:14:2e:2c:d6:6e:20:12:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad10cdd0b8b73304c985fde1b10e40182bf13902
Validity
Not Before: Jan 31 12:00:57 2025 GMT
Not After : Feb 1 12:00:57 2025 GMT
Subject: CN=6802cc4afdc054544a8f193e2e672f3e900d14e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:04:24:6f:aa:99:ab:72:f3:a6:e2:f8:d0:73:
dc:27:cb:9e:9c:a6:14:59:32:da:bc:83:20:f1:83:
44:9f:3a:ed:d3:25:fc:b3:0f:5a:c2:08:4e:b5:64:
8c:2a:ec:0c:42:d0:0f:3e:5c:80:e3:9c:ee:74:fd:
f8:b7:24:a3:f6:a5:f9:c6:60:7b:db:08:0b:df:11:
0b:53:8a:58:63:80:a5:97:eb:27:17:2d:f6:9f:49:
a7:a2:5a:f0:f5:19:17:9b:1b:94:1d:b2:60:68:95:
84:5a:1d:5f:7e:c3:9b:5c:a3:b2:0b:79:a8:36:86:
0d:42:7b:95:1f:ac:ff:95:c3:b1:7c:0e:dd:22:3d:
8f:ff:67:bb:ed:97:38:3b:ff:27:97:b2:22:62:ed:
7b:f7:2f:7c:7f:b2:bd:40:5e:6d:b1:9d:e5:2f:77:
0c:80:09:1e:71:82:c6:bd:a9:a1:83:05:b6:12:3d:
40:2f:b5:c3:f3:40:d1:3d:4d:91:19:c9:e6:9f:8c:
ff:47:2c:aa:8c:d6:da:38:d6:ce:8a:87:d0:35:f9:
36:5c:6d:f1:b8:c6:6b:eb:cd:db:78:7d:75:01:eb:
a1:b9:53:32:00:0d:31:90:cf:bc:f5:f6:c6:5a:87:
b8:d8:44:1e:19:46:59:52:69:ee:6b:63:3e:c4:f5:
d2:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:02:CC:4A:FD:C0:54:54:4A:8F:19:3E:2E:67:2F:3E:90:0D:14:E1
X509v3 Authority Key Identifier:
keyid:AD:10:CD:D0:B8:B7:33:04:C9:85:FD:E1:B1:0E:40:18:2B:F1:39:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rRDN0Li3MwTJhf3hsQ5AGCvxOQI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/deb874-f90b-42c4-bcd2-47bbf21eac9f/1/rRDN0Li3MwTJhf3hsQ5AGCvxOQI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/deb874-f90b-42c4-bcd2-47bbf21eac9f/1/rRDN0Li3MwTJhf3hsQ5AGCvxOQI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:8a:4c:2d:11:e7:37:9c:a6:1e:85:23:37:90:f9:f2:8c:bc:
bd:e1:7d:0e:df:8b:df:9b:02:5f:c3:bf:2a:d9:5d:72:80:16:
e8:8b:bd:7f:18:c7:28:a0:de:30:ee:97:68:e2:b1:04:2f:fd:
f0:6a:d4:74:c2:8f:07:eb:9d:7a:3e:19:ac:a4:36:35:31:04:
15:41:40:b5:2e:71:8c:7b:b1:74:4f:dc:67:f1:0b:a9:dd:68:
57:f3:b3:65:44:ff:46:16:73:9a:0c:50:37:e2:70:99:84:3b:
10:40:ce:2e:7f:3f:62:9a:68:23:52:b9:c1:62:62:3e:93:1e:
2a:bf:2b:1e:b6:54:09:d8:e0:1e:7f:b1:b7:c0:f7:da:4d:74:
c6:1f:bc:cc:1a:b9:21:39:70:3d:aa:e7:bc:56:aa:5e:33:44:
d7:7e:b8:e2:b4:af:4d:b4:0f:2e:65:23:f7:da:02:15:3e:ad:
b6:73:b9:4f:21:bf:1d:08:22:95:a7:b9:b4:5b:71:4d:85:25:
16:da:8f:cc:51:68:a8:e7:ba:2e:8f:b7:75:8a:2e:2e:c5:e2:
69:bb:7e:a6:b7:c1:8a:09:ed:b3:a4:66:c4:ee:28:da:60:50:
8c:23:64:10:c8:aa:74:42:d0:27:d7:1f:cd:bd:8c:85:0e:28:
be:bd:de:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:43 2025 by rpki-client