Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/a713e0-d164-4fbb-b4ae-7a58ba3ddf43/1/RmI6xd-e7899JPMXx7aUKX5PNio.mft
File: RmI6xd-e7899JPMXx7aUKX5PNio.mft (raw, json)
Hash identifier: LEwxcRbVdNaYx7iflld8gZh+yQRaMXndAtz3/tRrcDU=
Subject key identifier: 8A:F2:F0:B1:47:49:C8:EB:E9:F6:8E:CF:93:57:7A:7D:C9:90:72:E8
Authority key identifier: 46:62:3A:C5:DF:9E:EF:CF:7D:24:F3:17:C7:B6:94:29:7E:4F:36:2A
Certificate issuer: /CN=46623ac5df9eefcf7d24f317c7b694297e4f362a
Certificate serial: 0194BD85A6CB41393ABE899B7E8A0F278147
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RmI6xd-e7899JPMXx7aUKX5PNio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/a713e0-d164-4fbb-b4ae-7a58ba3ddf43/1/RmI6xd-e7899JPMXx7aUKX5PNio.mft
Manifest number: 0512
Signing time: Fri 31 Jan 2025 18:00:40 +0000
Manifest this update: Fri 31 Jan 2025 18:00:40 +0000
Manifest next update: Sat 01 Feb 2025 18:00:40 +0000
Files and hashes: 1: RmI6xd-e7899JPMXx7aUKX5PNio.crl (hash: x7gcOqMGYLtIhHcr6SlA2fgpDIyB2sgYTSuGoz49urQ=)
2: nCIxCjPPY6DWPKx_WJ_D213f1h8.roa (hash: TAjRe+1L1yReCVm9dO/sWTs7kJtd/3RFn58xjlrbP+A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:a6:cb:41:39:3a:be:89:9b:7e:8a:0f:27:81:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46623ac5df9eefcf7d24f317c7b694297e4f362a
Validity
Not Before: Jan 31 18:00:40 2025 GMT
Not After : Feb 1 18:00:40 2025 GMT
Subject: CN=8af2f0b14749c8ebe9f68ecf93577a7dc99072e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c2:84:91:f1:fc:7a:14:ca:ee:b0:ad:d2:62:
64:0a:bb:11:61:39:d5:65:07:6c:f4:13:af:f1:12:
0f:6c:3e:2c:95:23:a2:7c:ff:6b:ee:b4:e9:b1:7c:
e0:4d:69:6b:97:31:68:7c:d1:3b:85:bd:62:6b:8b:
45:2c:82:a2:88:1e:25:b7:a7:65:06:3b:e6:b5:54:
f8:2b:a2:63:d1:c4:76:a4:01:8e:27:41:14:35:ab:
31:53:f2:83:23:6e:f5:d4:80:9a:c0:6a:ff:d9:48:
fc:e7:d1:e0:67:c7:ef:67:c2:f0:11:3e:13:52:ea:
e7:b3:f8:40:0b:44:3c:e5:3d:05:a0:ba:51:64:9d:
7d:95:23:50:13:7c:da:83:6f:c4:dc:79:38:48:03:
14:ba:08:b1:e4:16:7a:6b:66:b5:d3:bf:de:43:0a:
7e:3a:2a:00:dd:30:c4:82:98:70:9c:fd:df:e3:e3:
87:cb:f8:67:7a:8d:92:17:2c:77:d0:cc:b9:48:7c:
02:0b:72:ab:f2:b4:ae:8d:94:1d:82:eb:43:ed:f8:
04:79:7a:db:fa:ff:34:2c:71:e9:dd:84:d8:32:5f:
60:f5:d8:2e:4f:af:9d:c9:dd:83:c0:64:fc:f1:5a:
e9:ff:c2:f4:7e:da:61:f3:e1:31:48:39:2a:e2:3c:
11:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:F2:F0:B1:47:49:C8:EB:E9:F6:8E:CF:93:57:7A:7D:C9:90:72:E8
X509v3 Authority Key Identifier:
keyid:46:62:3A:C5:DF:9E:EF:CF:7D:24:F3:17:C7:B6:94:29:7E:4F:36:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RmI6xd-e7899JPMXx7aUKX5PNio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a713e0-d164-4fbb-b4ae-7a58ba3ddf43/1/RmI6xd-e7899JPMXx7aUKX5PNio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a713e0-d164-4fbb-b4ae-7a58ba3ddf43/1/RmI6xd-e7899JPMXx7aUKX5PNio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:16:11:d5:52:d3:6d:3e:98:ae:c0:92:cd:83:30:7f:e1:ad:
ab:40:6c:e9:98:45:c8:93:84:23:67:0c:3f:aa:0c:ea:6d:c9:
8b:a6:ee:f5:7b:40:ec:91:da:4f:fd:16:6b:61:1b:4c:92:8a:
13:ed:d7:f6:a6:01:f3:3a:a1:0d:c9:bd:e2:35:f9:ab:08:2f:
36:41:a5:e2:3e:27:25:7a:de:a6:ee:0a:11:c8:27:b3:5c:59:
dc:b8:da:06:0e:cc:90:63:98:16:5b:f1:6f:6c:0a:05:5a:ee:
e3:73:35:9b:e1:c3:a0:83:78:16:f0:30:e4:28:9d:3f:15:97:
74:fd:77:3a:51:5d:2d:39:9a:cb:2c:12:c6:38:5b:20:c8:de:
92:0e:6a:40:28:c5:6c:78:31:45:74:68:9b:92:37:95:38:86:
35:56:f6:38:86:1f:7b:a6:62:85:17:b4:59:f2:85:12:cc:e9:
4a:b5:35:cb:55:3f:cc:56:f8:6e:e4:d6:d3:a1:b4:49:db:4d:
bf:02:d3:8b:be:d1:33:82:38:d3:3d:c7:bf:06:85:56:5f:8f:
58:26:ca:18:2f:28:c7:82:0a:7d:0c:c1:d2:3e:1e:bd:a5:fb:
9c:4b:2e:22:f6:7b:75:1f:0b:f7:04:e4:c1:30:85:60:79:b4:
87:3b:44:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:36 2025 by rpki-client