Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/09c865-ac9c-4913-9cce-e1fd0b1f0efd/1/RRDGm-0DRlv_ivnXGmrpsYO3wk0.mft
File: RRDGm-0DRlv_ivnXGmrpsYO3wk0.mft (raw, json)
Hash identifier: EtPD66y8cFS92HJTf0Usd/u9/sEsT34IVocsOJMmlzI=
Subject key identifier: B9:AD:98:B8:01:DD:8E:DD:EE:76:F8:68:4C:42:E1:D5:F7:87:96:E3
Authority key identifier: 45:10:C6:9B:ED:03:46:5B:FF:8A:F9:D7:1A:6A:E9:B1:83:B7:C2:4D
Certificate issuer: /CN=4510c69bed03465bff8af9d71a6ae9b183b7c24d
Certificate serial: 0194BC3C677EEA9768E67AF3C79D950CB86F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RRDGm-0DRlv_ivnXGmrpsYO3wk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/09c865-ac9c-4913-9cce-e1fd0b1f0efd/1/RRDGm-0DRlv_ivnXGmrpsYO3wk0.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 12:01:02 +0000
Manifest this update: Fri 31 Jan 2025 12:01:02 +0000
Manifest next update: Sat 01 Feb 2025 12:01:02 +0000
Files and hashes: 1: RRDGm-0DRlv_ivnXGmrpsYO3wk0.crl (hash: ts6ZqFLUfmujIvF4/9drKYhzzSu3XcfNTb83d5glxdA=)
2: zUnV9ug3DC1aZ-iIErb5v566M9c.roa (hash: 6FsHFRxJPUFm1fS2P0PMN2T/cQiz6Vr2yCENn0tZp3k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:67:7e:ea:97:68:e6:7a:f3:c7:9d:95:0c:b8:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4510c69bed03465bff8af9d71a6ae9b183b7c24d
Validity
Not Before: Jan 31 12:01:02 2025 GMT
Not After : Feb 1 12:01:02 2025 GMT
Subject: CN=b9ad98b801dd8eddee76f8684c42e1d5f78796e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:0a:e8:6f:60:f4:a1:d3:bb:2c:9d:5a:ef:1b:
4c:66:72:1e:fe:e4:db:ba:71:35:1d:95:cf:b3:f4:
34:83:87:de:9e:3b:56:1c:2c:07:c2:84:87:de:6c:
11:84:c6:67:f6:ea:41:3c:87:4c:ce:b3:1b:38:5f:
60:24:db:2c:34:e9:4e:a3:36:cc:3c:20:ae:28:b6:
92:4c:9c:fc:64:4f:35:76:a4:4c:69:66:78:c5:e4:
4f:b8:b4:60:94:33:ca:de:fa:e7:46:74:11:34:c6:
6f:c3:6a:de:86:d9:3b:23:a7:92:8f:c5:c7:a8:84:
52:76:77:62:9c:f2:82:c9:33:ad:46:d1:50:ba:e0:
22:27:d4:f7:7a:aa:b5:be:ae:1c:77:d8:74:c2:44:
b0:4a:eb:37:f3:50:6a:ba:48:5b:b2:41:ef:11:55:
91:d5:55:e7:ae:95:68:70:10:d9:5d:48:31:15:c4:
cf:b3:e7:1d:79:95:55:ac:21:7b:5e:d4:13:df:31:
a5:40:58:1e:69:18:5a:56:e5:79:a5:6e:fc:a0:31:
0d:08:27:5e:04:fe:b9:47:e6:ed:95:90:47:d1:6c:
6c:cb:3d:9a:d5:92:30:7e:0a:2f:7e:c6:90:0b:10:
73:9d:52:aa:3f:71:94:e1:82:ad:1d:e7:27:ce:69:
1d:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:AD:98:B8:01:DD:8E:DD:EE:76:F8:68:4C:42:E1:D5:F7:87:96:E3
X509v3 Authority Key Identifier:
keyid:45:10:C6:9B:ED:03:46:5B:FF:8A:F9:D7:1A:6A:E9:B1:83:B7:C2:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RRDGm-0DRlv_ivnXGmrpsYO3wk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/09c865-ac9c-4913-9cce-e1fd0b1f0efd/1/RRDGm-0DRlv_ivnXGmrpsYO3wk0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/09c865-ac9c-4913-9cce-e1fd0b1f0efd/1/RRDGm-0DRlv_ivnXGmrpsYO3wk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:f1:45:b4:20:33:cf:e5:e5:c4:30:ad:9b:1a:f9:f2:42:df:
03:e8:c7:2b:a8:33:5b:2b:30:65:b2:77:76:03:8f:0f:66:30:
63:c8:21:94:74:65:ed:c6:2d:fa:3a:67:7b:f2:11:6d:f9:55:
97:7d:6a:3b:3a:ad:2f:3d:13:7a:b3:1f:3e:f9:2c:77:7c:79:
d1:12:c7:69:58:2a:f5:9a:b4:23:80:a7:c1:33:e1:6d:8b:1f:
f5:f1:92:d2:b4:12:31:de:f5:5e:ee:30:32:87:31:55:47:66:
af:e8:bd:11:00:b2:58:6b:d8:4d:78:f0:d1:f5:1e:7f:13:ba:
e2:3b:6d:12:c2:b4:85:53:c3:d5:ed:06:0f:37:a5:ae:2f:e7:
5c:f7:42:14:99:ce:77:10:e6:b0:66:ad:1f:d2:9f:e5:c9:53:
04:f2:8b:c2:1d:bc:47:8a:a4:10:db:ac:98:6f:e9:e3:13:ab:
04:20:41:5a:aa:4e:9b:14:44:43:cb:8d:b7:db:68:b7:26:09:
a0:9f:eb:4b:d2:c2:92:02:41:36:fe:48:59:d1:eb:5f:8c:5a:
d3:27:7c:2c:c5:f1:a7:fa:84:25:6f:48:40:e9:c4:d2:47:b4:
05:62:a2:95:c6:7a:14:f9:6a:c9:34:92:6a:0f:98:8f:26:2b:
5d:ac:37:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:55 2025 by rpki-client