Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/9ff8a1-3647-4134-b15f-e5dd6382a1c7/1/RgeLLcCGzllV5i25IvNUuC0TzVs.mft
File: RgeLLcCGzllV5i25IvNUuC0TzVs.mft (raw, json)
Hash identifier: Ar1QiWHPN9V0zjFP4Oxu2KskcQPrYZrzMnBqjHVXtSY=
Subject key identifier: F3:45:8A:6D:24:4E:42:7A:55:53:F3:8D:32:A4:00:F3:15:15:C3:6F
Authority key identifier: 46:07:8B:2D:C0:86:CE:59:55:E6:2D:B9:22:F3:54:B8:2D:13:CD:5B
Certificate issuer: /CN=46078b2dc086ce5955e62db922f354b82d13cd5b
Certificate serial: 0194BC3C4D09A7C4440D3EB5788362B005AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RgeLLcCGzllV5i25IvNUuC0TzVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/9ff8a1-3647-4134-b15f-e5dd6382a1c7/1/RgeLLcCGzllV5i25IvNUuC0TzVs.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 12:00:55 +0000
Manifest this update: Fri 31 Jan 2025 12:00:55 +0000
Manifest next update: Sat 01 Feb 2025 12:00:55 +0000
Files and hashes: 1: RgeLLcCGzllV5i25IvNUuC0TzVs.crl (hash: XzjR1a5FxVDyqZTsvRiF6wlw2nG7nKmkYwBYHTmB1gA=)
2: tev87foGLf9TpZQHMwDHXLYnBL4.roa (hash: jHI7Ehm4mIeH8EgzDR4OOBosKPRgVoLZvuWOXFcKqHU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:4d:09:a7:c4:44:0d:3e:b5:78:83:62:b0:05:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46078b2dc086ce5955e62db922f354b82d13cd5b
Validity
Not Before: Jan 31 12:00:55 2025 GMT
Not After : Feb 1 12:00:55 2025 GMT
Subject: CN=f3458a6d244e427a5553f38d32a400f31515c36f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:32:b2:0a:78:e9:20:f2:d3:2e:f6:bf:9b:5c:
ae:28:44:70:7a:0f:c8:4a:4f:21:3a:b9:e7:e5:0a:
da:7d:9f:70:ad:46:a8:3a:c7:9c:8d:8e:f9:d4:8d:
7a:f3:38:a3:de:af:16:20:70:78:72:ef:ce:29:fc:
b3:78:6a:08:38:55:91:22:64:b0:a7:02:7e:a1:20:
56:5a:1e:08:1d:f2:0f:4e:d2:6a:8f:a6:57:07:27:
1a:fc:3a:0b:ac:e6:fd:69:84:4e:6f:e2:64:16:c6:
cc:f1:7c:83:90:5d:12:e4:6b:3f:80:fb:ec:ed:07:
19:d5:6d:4b:2e:8b:dc:2d:78:db:82:c5:47:c6:ed:
fe:ad:66:28:be:13:fe:ef:25:8d:96:72:d9:12:d8:
27:9b:11:c1:68:7e:c1:94:d5:6e:a1:81:58:4d:57:
01:fa:71:dc:36:48:75:ac:f3:75:88:64:02:a8:5c:
ac:b6:31:a3:c0:ba:c2:9c:73:c1:bc:e4:f1:d5:b5:
99:86:eb:5b:69:75:98:5d:53:0f:91:22:40:25:24:
23:2f:25:89:f1:68:1e:4e:2a:3f:65:d6:99:45:5c:
90:84:63:da:0e:49:68:8f:a2:fe:f2:11:97:b4:1e:
89:36:1e:39:2e:97:7a:de:cf:9e:c3:37:c4:38:08:
9b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:45:8A:6D:24:4E:42:7A:55:53:F3:8D:32:A4:00:F3:15:15:C3:6F
X509v3 Authority Key Identifier:
keyid:46:07:8B:2D:C0:86:CE:59:55:E6:2D:B9:22:F3:54:B8:2D:13:CD:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RgeLLcCGzllV5i25IvNUuC0TzVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/9ff8a1-3647-4134-b15f-e5dd6382a1c7/1/RgeLLcCGzllV5i25IvNUuC0TzVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/9ff8a1-3647-4134-b15f-e5dd6382a1c7/1/RgeLLcCGzllV5i25IvNUuC0TzVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:1b:bd:20:79:c7:95:d0:9b:da:3e:a3:c5:0c:f4:59:87:9e:
c3:94:c8:e1:3a:4e:15:c6:b0:ba:ed:e0:29:57:c7:a7:00:b1:
af:b5:9f:4d:fa:c2:c9:dd:58:f5:82:8e:f4:1c:04:05:e1:4f:
cc:20:ed:73:28:b1:34:8d:11:bc:a2:89:8a:5d:9b:80:1d:92:
ea:4f:67:74:33:f0:cb:fa:62:20:73:f0:69:b3:10:62:d8:3a:
64:1d:d0:86:38:77:7c:01:ee:98:5c:a8:ce:02:f5:44:64:81:
3a:3f:2b:3d:83:b5:79:4d:a8:21:51:1f:e6:34:6f:ee:d6:ca:
c7:db:30:d8:cd:09:c8:5d:2d:35:60:35:67:fd:f9:ea:48:62:
15:28:2a:cf:13:3c:ca:60:9e:90:59:dd:32:73:3f:60:45:d1:
ab:ea:83:24:4d:c4:c0:67:51:58:a0:80:cb:cc:46:ec:2f:ca:
67:95:14:66:6c:c2:32:1e:6a:df:43:c0:8b:85:fe:fa:d5:9d:
c9:02:6f:11:00:f3:39:40:ff:4b:e9:21:7e:ac:af:59:e7:67:
97:69:0d:38:fd:74:1d:e9:2f:af:b2:03:9a:78:10:fd:7c:22:
02:db:44:d0:88:4c:0e:92:6c:c5:f0:62:6a:2b:d5:f4:32:a6:
24:b4:f5:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:53:56 2025 by rpki-client