Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/7560e4-fc7d-4a64-b500-e7f05f029a48/1/rwXUKRyugYXGw0LiXe6bfpIPdt0.mft
File: rwXUKRyugYXGw0LiXe6bfpIPdt0.mft (raw, json)
Hash identifier: VGT+2YsvKK/hcOaQOspE90lXVFZVGeyIdFD2kxFrhyQ=
Subject key identifier: A9:9C:2D:29:B0:98:85:5A:52:70:03:56:C6:52:F2:A7:4B:2C:2D:21
Authority key identifier: AF:05:D4:29:1C:AE:81:85:C6:C3:42:E2:5D:EE:9B:7E:92:0F:76:DD
Certificate issuer: /CN=af05d4291cae8185c6c342e25dee9b7e920f76dd
Certificate serial: 0194BBCDDBFDBC01E83A9B6B6200206FCEC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rwXUKRyugYXGw0LiXe6bfpIPdt0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/7560e4-fc7d-4a64-b500-e7f05f029a48/1/rwXUKRyugYXGw0LiXe6bfpIPdt0.mft
Manifest number: 02F2
Signing time: Fri 31 Jan 2025 10:00:18 +0000
Manifest this update: Fri 31 Jan 2025 10:00:18 +0000
Manifest next update: Sat 01 Feb 2025 10:00:18 +0000
Files and hashes: 1: 41rmP0fRaJ_Rp04VkDrnen4Ff9k.roa (hash: hIEQZsD1Luj1wzFwd6Ncf1xZemUGDUraVaNuYs6VnsA=)
2: rwXUKRyugYXGw0LiXe6bfpIPdt0.crl (hash: pAi4owPShEmSuYdr3WY7J9LwhLSr9x7PTlf+OBXhxXI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:db:fd:bc:01:e8:3a:9b:6b:62:00:20:6f:ce:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af05d4291cae8185c6c342e25dee9b7e920f76dd
Validity
Not Before: Jan 31 10:00:18 2025 GMT
Not After : Feb 1 10:00:18 2025 GMT
Subject: CN=a99c2d29b098855a52700356c652f2a74b2c2d21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:6b:40:5f:fe:85:fd:54:1d:a9:bb:3d:7a:d1:
8f:47:ae:f7:95:60:1e:6c:20:95:7b:c4:4b:7c:ad:
a4:ed:c4:64:b1:7e:8f:ea:ba:8d:f7:d5:fd:07:2c:
57:f6:c6:66:2c:3b:17:df:49:04:63:04:a5:25:65:
e5:0f:fc:6e:7d:bf:81:ef:6f:e1:96:2e:82:83:6b:
18:76:8d:16:83:41:52:d6:86:59:c9:3d:b3:0f:59:
45:71:f1:7e:4e:4b:d0:70:c1:31:79:93:39:9d:59:
fb:07:6a:f4:e1:e5:f1:40:aa:91:a5:45:12:b1:22:
75:2f:d8:2c:6f:0e:07:a7:0b:14:89:f4:fe:a9:12:
4c:e8:cd:7d:ba:97:f1:2f:48:2d:ac:5e:e4:bd:c7:
b0:9b:f4:26:d8:f1:ec:96:df:0c:30:89:e1:4d:c0:
09:97:13:9a:2d:cd:50:54:89:45:84:cc:10:94:4e:
79:3b:71:4f:35:ee:3a:71:22:90:f9:63:87:2b:f5:
65:f2:0c:21:7e:6f:4b:5c:cf:4e:7c:20:a9:c3:35:
24:44:2c:a4:5d:ef:3e:67:5e:78:d4:9a:bc:98:0d:
c3:72:52:71:4a:7e:11:a0:2c:dd:64:be:3d:7d:3e:
c6:df:2a:64:ab:32:49:5d:4b:88:ee:06:64:63:f5:
75:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:9C:2D:29:B0:98:85:5A:52:70:03:56:C6:52:F2:A7:4B:2C:2D:21
X509v3 Authority Key Identifier:
keyid:AF:05:D4:29:1C:AE:81:85:C6:C3:42:E2:5D:EE:9B:7E:92:0F:76:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rwXUKRyugYXGw0LiXe6bfpIPdt0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/7560e4-fc7d-4a64-b500-e7f05f029a48/1/rwXUKRyugYXGw0LiXe6bfpIPdt0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/7560e4-fc7d-4a64-b500-e7f05f029a48/1/rwXUKRyugYXGw0LiXe6bfpIPdt0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:d9:90:28:2f:4c:02:c8:85:1e:fa:bb:60:f9:9a:45:c3:12:
ed:cd:b1:65:be:49:ac:20:12:87:d3:73:72:70:8e:10:9f:7b:
7b:be:65:d6:f6:3c:15:6e:ae:73:19:3a:b6:d4:3a:a3:ff:0a:
21:fc:80:bb:40:9c:d9:5f:e5:c1:63:6d:5e:17:37:ed:ce:3d:
02:ee:4e:37:96:7d:8d:f3:21:66:b0:4b:2b:dd:6b:28:83:b8:
6b:76:cd:93:af:c5:f2:f0:e6:e6:e0:fb:b2:11:a4:d8:d7:47:
fd:34:45:ac:dc:af:bd:62:15:d8:d2:35:c0:f1:9e:11:34:19:
6d:da:e1:45:8d:de:f1:51:92:be:c3:fb:10:65:fb:22:b8:ba:
ed:3d:89:5d:45:32:80:87:aa:3e:13:12:49:2b:82:e9:3f:0d:
c7:13:6b:d2:6d:c9:78:39:25:d2:29:29:49:61:1a:ae:56:9c:
73:33:8e:01:0e:6c:e1:45:0b:44:9b:d6:9d:e7:16:62:a1:c7:
8e:23:24:1e:4b:9e:bb:a8:fb:cd:1f:b4:02:dd:43:61:04:db:
8c:a1:c8:9b:86:79:95:ab:6f:c4:d4:e7:a0:a7:37:06:05:ec:
dd:a9:21:dd:db:27:7b:65:c4:ad:9a:75:d1:4f:a4:29:91:cb:
1a:23:58:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:05 2025 by rpki-client