Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/R928ziYovwn65r8EQhjGV-i9PG4.mft
File: R928ziYovwn65r8EQhjGV-i9PG4.mft (raw, json)
Hash identifier: FMNCoAmsSI5cF7yad1eyzHekZk9bxXT2OLSmtVKoO90=
Subject key identifier: 8B:FB:2B:88:39:99:69:9E:6B:CC:6C:D1:A7:B1:91:80:31:87:B0:EC
Authority key identifier: 47:DD:BC:CE:26:28:BF:09:FA:E6:BF:04:42:18:C6:57:E8:BD:3C:6E
Certificate issuer: /CN=47ddbcce2628bf09fae6bf044218c657e8bd3c6e
Certificate serial: 0194BD8542F705D5DBB529CA727E20C35E11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R928ziYovwn65r8EQhjGV-i9PG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/R928ziYovwn65r8EQhjGV-i9PG4.mft
Manifest number: 032A
Signing time: Fri 31 Jan 2025 18:00:14 +0000
Manifest this update: Fri 31 Jan 2025 18:00:14 +0000
Manifest next update: Sat 01 Feb 2025 18:00:14 +0000
Files and hashes: 1: O9Ajtyg883LEr8Ee-m5Sgn7FXHw.roa (hash: Im6AzYvYZrYyzytszKHEKC4yclMHkP5K8b4hpoNpsHk=)
2: R928ziYovwn65r8EQhjGV-i9PG4.crl (hash: 7mklh7MGYw/thqzL4Nm7eZttFxDP9DjPCt0GETE8BGM=)
3: tx8PeD2NpfiRfHK9lGj-BUDFkyM.roa (hash: d3qvWfloftoYFMAYjWvL1QMprH3WKAy7gGfoEkSLBEo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:42:f7:05:d5:db:b5:29:ca:72:7e:20:c3:5e:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47ddbcce2628bf09fae6bf044218c657e8bd3c6e
Validity
Not Before: Jan 31 18:00:14 2025 GMT
Not After : Feb 1 18:00:14 2025 GMT
Subject: CN=8bfb2b883999699e6bcc6cd1a7b191803187b0ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:16:88:49:dd:60:f0:ac:d4:ae:69:cc:b6:9a:
ac:89:e1:23:37:0c:1a:11:09:8f:e7:de:b2:13:7e:
03:a1:9c:b7:fb:74:04:3a:96:07:29:96:e7:66:35:
27:40:57:64:24:11:cc:f3:67:3a:60:37:ee:ff:c1:
c2:72:ee:05:56:d4:f4:f8:e8:21:bb:c9:ed:9a:1f:
f4:47:f7:38:4f:a8:be:7e:4b:10:98:d7:a0:d9:45:
1b:e6:6e:96:db:0e:48:47:7e:d7:ba:00:c1:76:ef:
b4:61:5c:dd:b1:d3:db:eb:f9:82:81:75:19:41:2d:
25:28:a0:67:b2:f7:50:20:44:eb:da:cf:10:bb:ed:
29:57:54:db:86:28:c3:cd:2c:8d:d7:87:92:15:82:
ae:cb:0a:50:5c:0c:00:9d:e8:82:78:dd:fb:fc:13:
82:0d:4a:33:31:49:f9:29:a8:25:e8:51:d7:0e:16:
f6:f4:4a:60:dd:30:5b:d6:fa:bf:9a:53:7b:d7:4d:
c6:e9:c8:32:4f:a8:4b:0c:c4:05:45:b7:89:99:3d:
8d:b4:07:f6:e6:89:cb:8f:4b:e7:8e:4e:fb:1a:25:
6e:9f:79:7e:a8:2e:70:71:05:d5:f8:95:28:ce:1e:
18:8f:99:b6:58:70:16:68:34:52:e2:70:77:23:e4:
83:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:FB:2B:88:39:99:69:9E:6B:CC:6C:D1:A7:B1:91:80:31:87:B0:EC
X509v3 Authority Key Identifier:
keyid:47:DD:BC:CE:26:28:BF:09:FA:E6:BF:04:42:18:C6:57:E8:BD:3C:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R928ziYovwn65r8EQhjGV-i9PG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/R928ziYovwn65r8EQhjGV-i9PG4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/R928ziYovwn65r8EQhjGV-i9PG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:46:f4:7a:f0:91:f3:d7:54:59:32:2f:70:fe:d6:4c:e1:fd:
2a:89:06:21:87:90:94:f6:df:68:99:64:0b:85:93:c6:40:31:
57:8a:bb:95:65:d5:f4:15:1b:c5:26:be:1b:36:4a:b5:61:bf:
ca:2c:91:98:56:ea:d7:05:05:3c:b9:ec:5a:51:fd:3b:0a:e3:
11:f4:59:59:eb:37:e6:0f:d2:87:7c:4f:0f:68:ab:1d:1a:b2:
dd:0c:4f:80:f6:93:9c:89:db:e3:50:ab:8e:71:24:93:5f:73:
16:60:3d:3e:63:73:fb:20:dd:51:0a:4c:8a:5d:6a:d3:f1:81:
f5:44:41:f1:14:13:7c:a6:d2:63:4f:b8:54:47:b6:c0:4a:40:
82:5e:ac:ae:38:15:a8:a4:5b:91:bd:f3:c4:b7:66:b0:cd:9c:
b0:ee:d0:19:d1:9e:fe:7d:07:cc:7c:0d:e3:c4:59:93:f2:bf:
cf:ab:f1:54:a6:d0:19:51:70:9b:b2:c0:f4:ff:f4:87:11:3f:
bb:1c:c9:32:8e:8c:85:1b:bc:10:d5:49:82:d1:ba:17:1f:78:
96:80:39:b8:93:8b:74:b6:b6:78:a3:b7:f9:79:7d:91:d1:ab:
8f:bf:55:dd:52:20:4d:7a:9d:39:c3:68:1c:7d:a8:ec:b6:31:
b7:f2:75:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:07 2025 by rpki-client