Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/9792b0-c9c4-4848-b713-83d09cefbe88/1/RovSl-go2l6hLA32zXQmt4MHRos.mft
File: RovSl-go2l6hLA32zXQmt4MHRos.mft (raw, json)
Hash identifier: eH/XvkbrZF24azIlBbpYQp9KNVjuGfhCm+Xyp3Gi6Cw=
Subject key identifier: FE:2A:9E:C0:77:B4:0A:9C:6E:00:8A:6E:10:CF:CB:CE:84:7C:DE:95
Authority key identifier: 46:8B:D2:97:E8:28:DA:5E:A1:2C:0D:F6:CD:74:26:B7:83:07:46:8B
Certificate issuer: /CN=468bd297e828da5ea12c0df6cd7426b78307468b
Certificate serial: 0194BCA9E303F19CADCF23A2DEA9517ADF0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RovSl-go2l6hLA32zXQmt4MHRos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/9792b0-c9c4-4848-b713-83d09cefbe88/1/RovSl-go2l6hLA32zXQmt4MHRos.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 14:00:37 +0000
Manifest this update: Fri 31 Jan 2025 14:00:37 +0000
Manifest next update: Sat 01 Feb 2025 14:00:37 +0000
Files and hashes: 1: RovSl-go2l6hLA32zXQmt4MHRos.crl (hash: Y96Ymj+euLNVgpzhV9FB/0L6kAo4skcVsY7DMGqGWUs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:e3:03:f1:9c:ad:cf:23:a2:de:a9:51:7a:df:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=468bd297e828da5ea12c0df6cd7426b78307468b
Validity
Not Before: Jan 31 14:00:37 2025 GMT
Not After : Feb 1 14:00:37 2025 GMT
Subject: CN=fe2a9ec077b40a9c6e008a6e10cfcbce847cde95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:5e:a8:27:b9:69:92:1d:df:b8:3a:3b:2b:3e:
fb:ac:7f:27:10:46:f0:75:2e:dc:df:27:52:52:16:
88:86:b9:5a:23:7b:b1:0b:fc:1f:c4:a4:f0:a8:0c:
e2:3e:42:c5:32:f7:a7:d7:8b:6d:a8:f1:19:48:0a:
12:fc:1f:cf:a3:a9:17:2b:79:dd:7c:99:05:25:69:
7c:cf:76:1a:bd:17:6c:2b:6d:77:6b:79:47:2f:20:
43:12:b2:9d:62:84:a8:05:0f:83:44:b0:06:94:5c:
c0:ad:b8:1b:69:8f:3c:6b:9f:4d:93:3b:36:09:61:
a7:bc:ac:51:3c:a6:3c:ee:e1:e4:4c:42:76:20:e4:
70:f8:ef:27:c2:a6:b0:23:4b:de:b5:54:2c:cd:31:
f5:70:8c:dc:b1:6c:55:46:59:83:2d:90:54:5c:88:
3a:e4:6a:bf:8e:7d:08:1b:f9:1b:68:51:f9:57:8e:
b4:07:c9:50:c9:d3:0b:37:be:b1:3f:c1:1b:51:c0:
2a:49:0b:59:b4:e6:2e:97:f9:c5:13:2d:7c:06:ae:
e4:3f:50:0f:4d:e1:56:c2:76:58:3e:34:95:6f:fd:
12:1d:20:76:1c:54:aa:ca:d2:ee:86:73:5b:a4:a0:
b2:0b:c4:e1:59:42:d1:0e:8a:3e:80:15:f6:a4:30:
0d:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:2A:9E:C0:77:B4:0A:9C:6E:00:8A:6E:10:CF:CB:CE:84:7C:DE:95
X509v3 Authority Key Identifier:
keyid:46:8B:D2:97:E8:28:DA:5E:A1:2C:0D:F6:CD:74:26:B7:83:07:46:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RovSl-go2l6hLA32zXQmt4MHRos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/9792b0-c9c4-4848-b713-83d09cefbe88/1/RovSl-go2l6hLA32zXQmt4MHRos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/9792b0-c9c4-4848-b713-83d09cefbe88/1/RovSl-go2l6hLA32zXQmt4MHRos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:b1:53:48:d0:b2:ed:3e:6b:e8:55:fc:79:21:d2:4c:89:d9:
95:51:b1:29:08:92:2b:a6:2e:17:06:23:dc:61:c5:de:c4:24:
4a:5c:47:1f:fd:50:19:ac:59:34:08:eb:cb:5c:8f:a7:44:f0:
44:37:58:8d:13:7b:52:52:00:a5:2d:1f:ff:bd:d2:0e:87:d4:
8e:78:a7:79:1f:40:fc:ad:fe:48:ce:19:98:00:79:31:f8:32:
d2:ad:85:68:c4:48:73:66:d1:15:c8:06:e4:87:e1:34:2a:4e:
59:81:c7:3e:b4:ec:07:c7:7e:e9:94:98:27:ef:60:ba:2b:81:
a0:18:ba:95:40:08:68:af:9e:4d:00:43:cb:93:f1:d2:31:88:
0e:65:db:07:ec:90:09:d2:80:cf:5c:04:5f:5e:6f:6b:80:d5:
3c:5c:13:a6:38:d5:0f:32:30:85:81:f9:e6:92:e9:1b:d3:be:
82:b0:c9:00:d3:da:31:90:77:00:2a:b3:61:43:42:32:06:ad:
24:29:ee:d6:50:bd:18:4d:a5:3d:f7:bc:c4:e0:24:9e:10:3c:
d6:24:98:c7:e1:8a:ca:0a:c0:35:e2:9b:a5:fb:54:24:20:81:
60:90:ff:d6:0e:bc:d1:6e:3e:99:c4:d7:26:d1:36:07:14:b8:
fd:e6:2c:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:47:15 2025 by rpki-client