
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/22fa42-b02f-4311-90fb-45a112a1e7ac/1/RDSBQfxG3AGHCHy8hlVumkSe4ec.mft
File: RDSBQfxG3AGHCHy8hlVumkSe4ec.mft (raw, json)
Hash identifier: 8Le+KP+ksLM4ECg3CtXX0ZHE6YlsvPrFTzUg91Ehybo=
Subject key identifier: FF:EA:EE:FC:CD:C0:E3:57:61:C4:9B:15:43:79:46:E4:92:07:FD:29
Authority key identifier: 44:34:81:41:FC:46:DC:01:87:08:7C:BC:86:55:6E:9A:44:9E:E1:E7
Certificate issuer: /CN=44348141fc46dc0187087cbc86556e9a449ee1e7
Certificate serial: 0194BD4E8799161ECF6C855AB4653B768627
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RDSBQfxG3AGHCHy8hlVumkSe4ec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/22fa42-b02f-4311-90fb-45a112a1e7ac/1/RDSBQfxG3AGHCHy8hlVumkSe4ec.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 17:00:27 +0000
Manifest this update: Fri 31 Jan 2025 17:00:27 +0000
Manifest next update: Sat 01 Feb 2025 17:00:27 +0000
Files and hashes: 1: HUIjR9WK2Lr5ogt7lVoiyA1Q06s.roa (hash: PMZpn3mSe7dzqUCZsgF/pY1r/L52E+g3ibBHFvHVhL0=)
2: RDSBQfxG3AGHCHy8hlVumkSe4ec.crl (hash: jgFAELwIWhMvNPhBI8+o4pspH6mWHbxrFYDzG2zrJBI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:87:99:16:1e:cf:6c:85:5a:b4:65:3b:76:86:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44348141fc46dc0187087cbc86556e9a449ee1e7
Validity
Not Before: Jan 31 17:00:27 2025 GMT
Not After : Feb 1 17:00:27 2025 GMT
Subject: CN=ffeaeefccdc0e35761c49b15437946e49207fd29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f6:5a:cb:cf:7f:29:f1:88:f9:5d:23:9f:71:
bc:30:5e:b5:5f:79:ec:9f:47:94:62:f4:bb:fd:2c:
08:f4:f5:54:71:31:44:82:20:8b:51:87:84:9d:74:
1c:c7:9d:e7:ed:52:5d:a8:b1:0a:5a:4c:0f:9a:b1:
ab:dd:97:87:4c:32:68:7d:e2:84:98:6f:78:9a:3c:
47:71:18:4d:7e:3e:ae:b1:6f:e0:6d:50:5c:bc:ea:
85:e6:b2:2d:b0:ee:93:40:5d:90:89:05:d2:0a:a8:
56:8f:2f:e2:bf:26:25:1f:a4:5f:e8:d6:be:e9:18:
c1:17:1b:89:59:3f:f2:72:b7:29:cc:45:91:78:7d:
ae:50:03:c9:a7:31:56:81:30:a7:a5:ba:68:50:17:
c4:c2:3d:05:4c:4f:83:a9:86:80:b1:8d:17:28:7a:
99:17:d4:3f:36:20:ca:1c:a8:f2:b4:c1:0a:a5:72:
8a:18:96:29:b8:6f:85:e2:a7:bf:92:c0:7e:14:0a:
f0:29:7c:2b:2a:ab:c5:90:bd:b6:af:01:35:92:c2:
4f:83:15:8f:02:48:4e:f5:5d:9e:92:bf:90:3d:b0:
fd:9b:42:62:77:b1:e4:0e:ba:b3:59:51:dc:26:aa:
5b:19:7f:e1:6c:2a:b6:f5:b9:05:d2:6e:9e:45:da:
6a:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:EA:EE:FC:CD:C0:E3:57:61:C4:9B:15:43:79:46:E4:92:07:FD:29
X509v3 Authority Key Identifier:
keyid:44:34:81:41:FC:46:DC:01:87:08:7C:BC:86:55:6E:9A:44:9E:E1:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RDSBQfxG3AGHCHy8hlVumkSe4ec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/22fa42-b02f-4311-90fb-45a112a1e7ac/1/RDSBQfxG3AGHCHy8hlVumkSe4ec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/22fa42-b02f-4311-90fb-45a112a1e7ac/1/RDSBQfxG3AGHCHy8hlVumkSe4ec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:3c:e4:29:02:a1:6e:1e:05:4e:b4:33:cf:bd:8b:83:8c:b7:
2d:41:91:cb:f1:a4:37:7d:92:42:fa:94:70:14:ab:55:f0:57:
22:13:4d:ff:0c:5b:7c:a9:2f:d9:9b:5e:37:1d:c8:2f:0e:89:
44:6f:68:41:da:c7:3d:62:38:0b:89:9d:d4:27:c5:ee:2c:e4:
e0:38:a4:2e:bf:2f:49:55:9c:ca:5e:23:94:9e:e2:e5:9d:f5:
8f:f2:b9:8c:e4:33:57:4a:6b:cf:3e:84:85:f4:fa:e1:13:31:
f3:06:3f:e9:3d:a6:3d:76:e5:76:50:d0:65:88:06:ff:b9:29:
cd:de:49:4a:5c:35:27:d9:36:d0:34:05:17:12:e1:2b:06:b9:
13:7b:e7:73:20:2a:f1:38:c6:dd:68:3b:ed:5c:7b:06:73:cf:
88:65:fa:b6:13:73:76:4a:5d:02:47:cf:cf:f8:b0:f6:59:57:
53:25:7d:52:b6:9b:3b:e2:57:d4:ce:5b:8e:a9:6a:0a:94:f8:
e9:76:a8:79:d5:6d:7a:16:7a:a1:4d:53:fa:cd:b3:16:3c:65:
b2:ad:4e:9d:2b:59:78:be:cd:50:72:a0:bf:33:6e:34:24:f2:
d7:3e:fd:7d:13:5b:57:00:31:7b:80:24:a6:76:da:0a:b6:c6:
ee:c5:08:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:24:57 2025 by rpki-client