Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/3123d0-7caa-4df3-ad23-aba4e643058e/1/RwFMkm6nbVZunoqW1YYdR1fIsOo.mft
File: RwFMkm6nbVZunoqW1YYdR1fIsOo.mft (raw, json)
Hash identifier: 71QuqTB1QWDCBxfzWOIaN7Bmf9RyEycSIZ2c8SHr7VQ=
Subject key identifier: 1B:40:6E:08:82:71:9E:81:A3:9F:43:B3:71:4E:FF:10:13:D5:EE:49
Authority key identifier: 47:01:4C:92:6E:A7:6D:56:6E:9E:8A:96:D5:86:1D:47:57:C8:B0:EA
Certificate issuer: /CN=47014c926ea76d566e9e8a96d5861d4757c8b0ea
Certificate serial: 0194BD4E93F50C1E917FC46D6F344067978C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RwFMkm6nbVZunoqW1YYdR1fIsOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/3123d0-7caa-4df3-ad23-aba4e643058e/1/RwFMkm6nbVZunoqW1YYdR1fIsOo.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 17:00:30 +0000
Manifest this update: Fri 31 Jan 2025 17:00:30 +0000
Manifest next update: Sat 01 Feb 2025 17:00:30 +0000
Files and hashes: 1: RwFMkm6nbVZunoqW1YYdR1fIsOo.crl (hash: 3vYLxzPrsGqGGd3K8n76z7W8lVQkDJurGCbOIVmx1J4=)
2: pFLpzrM-iV1fQ_hTxX2xOEHMjt0.roa (hash: aLstNITfJuEBD1I0LdnhTrgtI2g65BeTn/qvRZrCSW8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:93:f5:0c:1e:91:7f:c4:6d:6f:34:40:67:97:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47014c926ea76d566e9e8a96d5861d4757c8b0ea
Validity
Not Before: Jan 31 17:00:30 2025 GMT
Not After : Feb 1 17:00:30 2025 GMT
Subject: CN=1b406e0882719e81a39f43b3714eff1013d5ee49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:9a:e4:0a:66:29:d8:b0:19:21:03:f7:a3:1d:
e2:3f:07:07:12:e8:da:10:fe:38:3b:1e:8b:e7:30:
89:7d:75:7d:8d:58:59:46:20:2f:e1:7e:28:b8:d9:
fc:0a:9e:7a:3b:46:81:7b:01:2f:c5:ca:76:71:fb:
ff:84:69:a6:b3:e3:df:51:06:5b:b0:b8:a7:0d:f6:
27:a1:50:e0:41:bb:af:fc:43:fb:78:0b:9d:ef:0a:
44:bd:6f:20:01:84:e4:2f:84:53:0d:7c:e1:b6:91:
e3:6c:d5:0e:66:76:1c:d7:4b:82:70:9a:fb:4f:72:
4f:a8:65:96:97:27:96:d7:d7:00:4c:b3:de:d9:af:
3e:69:4d:1f:80:ef:0b:2b:59:c3:e0:69:a3:90:a2:
22:b0:03:01:26:5f:46:7b:0f:d2:69:8e:c2:5d:4c:
07:d4:b0:6b:75:cc:e3:29:40:a9:ed:70:eb:86:a4:
e4:c3:e0:9e:00:cf:9f:aa:c8:8a:65:a3:f9:f5:fb:
91:f2:b6:5a:5a:cf:66:ff:e2:f0:c3:4e:63:5b:77:
1f:60:99:8a:62:d2:fd:93:7c:26:bc:87:97:e7:fd:
29:c3:3e:84:e2:7c:bb:f6:7b:38:53:80:2e:bb:1a:
f2:ea:d3:a5:19:77:26:55:bf:33:51:05:a1:bc:55:
d7:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:40:6E:08:82:71:9E:81:A3:9F:43:B3:71:4E:FF:10:13:D5:EE:49
X509v3 Authority Key Identifier:
keyid:47:01:4C:92:6E:A7:6D:56:6E:9E:8A:96:D5:86:1D:47:57:C8:B0:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RwFMkm6nbVZunoqW1YYdR1fIsOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/3123d0-7caa-4df3-ad23-aba4e643058e/1/RwFMkm6nbVZunoqW1YYdR1fIsOo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/3123d0-7caa-4df3-ad23-aba4e643058e/1/RwFMkm6nbVZunoqW1YYdR1fIsOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:66:68:9c:bb:aa:77:ed:32:89:ce:bc:7e:81:dc:27:1e:41:
64:9f:03:26:ef:74:b0:b7:e7:44:c8:04:8f:12:ed:e2:72:39:
6c:fc:c2:ef:bf:e8:98:f7:10:d3:30:69:c0:47:4e:09:b5:27:
70:60:60:67:e1:e4:a2:44:19:cc:74:92:84:bb:d6:66:05:a1:
98:7f:77:15:63:95:2b:0f:98:b9:2f:db:7d:96:49:cc:c3:a1:
59:56:8e:f4:76:aa:f4:81:51:1f:84:76:66:e7:cd:ff:65:a1:
91:76:d5:f0:88:79:da:4e:f6:cf:f1:4e:2e:a7:23:42:60:70:
37:dc:72:be:9d:bd:df:8b:f9:d9:0a:6f:dd:92:0c:5f:cc:79:
c9:38:01:47:9b:9c:3a:f6:93:c7:f6:a4:56:2c:75:1a:ce:bc:
bd:b0:f8:05:f7:98:cb:08:2f:6d:c0:3c:04:c1:82:62:66:3d:
a2:eb:e0:17:c3:e2:80:e0:53:ed:dd:d6:4e:5b:01:93:dc:fc:
41:e1:2e:0e:fe:0b:c2:65:33:e6:59:71:70:01:9d:53:a0:6a:
65:d0:c3:12:40:ae:ce:4d:8b:ea:28:1a:76:62:97:b6:09:0c:
b6:e4:b5:65:b6:19:c6:87:fd:14:e4:07:28:c0:2a:e7:de:a7:
f7:d5:b7:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:52:35 2025 by rpki-client