Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/987c4e-789b-4c26-8ce5-abb222507f17/1/RoRlV7nkKVUWPlFrAtyOPuOCgRQ.mft
File: RoRlV7nkKVUWPlFrAtyOPuOCgRQ.mft (raw, json)
Hash identifier: K+v6CubVfe5WrzfromkNZ5cYVU3f/r4vvBGKtFfT13k=
Subject key identifier: C6:51:45:EE:1A:9C:D8:2A:77:D5:D4:B9:B7:3D:F3:37:02:A2:E2:0B
Authority key identifier: 46:84:65:57:B9:E4:29:55:16:3E:51:6B:02:DC:8E:3E:E3:82:81:14
Certificate issuer: /CN=46846557b9e42955163e516b02dc8e3ee3828114
Certificate serial: 0194BD858985BD80B758A979A4E3FB88872F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RoRlV7nkKVUWPlFrAtyOPuOCgRQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/987c4e-789b-4c26-8ce5-abb222507f17/1/RoRlV7nkKVUWPlFrAtyOPuOCgRQ.mft
Manifest number: 0777
Signing time: Fri 31 Jan 2025 18:00:32 +0000
Manifest this update: Fri 31 Jan 2025 18:00:32 +0000
Manifest next update: Sat 01 Feb 2025 18:00:32 +0000
Files and hashes: 1: RoRlV7nkKVUWPlFrAtyOPuOCgRQ.crl (hash: ih3ePUME8s2mqG3LymnmjfxPDeEeXvSnwNCcoR6geE4=)
2: Zg1oQlfTlRGn4mPizarntNQVifQ.roa (hash: VCNyDIITF1vB0XbRmzjr12dFWbtUbWzSK0fvTI9GVWQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:89:85:bd:80:b7:58:a9:79:a4:e3:fb:88:87:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46846557b9e42955163e516b02dc8e3ee3828114
Validity
Not Before: Jan 31 18:00:32 2025 GMT
Not After : Feb 1 18:00:32 2025 GMT
Subject: CN=c65145ee1a9cd82a77d5d4b9b73df33702a2e20b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:98:a9:7c:8e:2e:8e:0a:6a:67:fd:84:5f:63:
16:53:47:5c:9b:e4:8c:3d:fe:60:d1:9e:00:9a:1a:
5a:44:be:d8:30:72:f8:87:fd:21:61:c3:9b:9b:7d:
df:52:eb:67:ea:65:40:95:d3:3c:29:7a:88:48:8e:
67:e6:29:43:95:a5:1e:a6:07:7c:84:53:91:fb:56:
98:1e:0d:76:4e:d0:8f:22:58:8e:51:2e:b6:3c:c4:
b6:3d:03:68:f1:e6:68:84:57:5b:86:f1:63:3e:33:
12:c4:97:a1:95:1e:fe:ac:f0:2f:78:0a:67:4e:a6:
ed:94:34:ca:ca:95:b9:bf:de:d1:64:e4:be:9d:ad:
8d:2c:1c:97:fc:c2:d6:be:35:d5:62:07:af:b3:cf:
cf:d0:69:c1:ef:53:77:f7:e6:3d:08:6f:e6:17:90:
3a:f5:03:09:9c:6c:d2:56:03:e1:21:d7:df:7c:87:
35:9e:7d:cd:8f:42:83:34:bc:57:dd:e4:e3:20:c5:
38:5d:21:e5:07:84:9f:e1:d1:f9:31:5a:00:00:6c:
31:79:f9:34:16:53:d4:c4:72:0b:1f:19:19:10:00:
01:02:ca:f3:fa:4e:58:cc:f6:f4:9b:0b:81:ed:b1:
d0:b8:d9:1b:64:ed:20:18:7b:5a:bb:9a:8e:0c:8a:
85:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:51:45:EE:1A:9C:D8:2A:77:D5:D4:B9:B7:3D:F3:37:02:A2:E2:0B
X509v3 Authority Key Identifier:
keyid:46:84:65:57:B9:E4:29:55:16:3E:51:6B:02:DC:8E:3E:E3:82:81:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RoRlV7nkKVUWPlFrAtyOPuOCgRQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/987c4e-789b-4c26-8ce5-abb222507f17/1/RoRlV7nkKVUWPlFrAtyOPuOCgRQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/987c4e-789b-4c26-8ce5-abb222507f17/1/RoRlV7nkKVUWPlFrAtyOPuOCgRQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:9f:4e:1b:a8:f0:e2:30:8c:be:45:70:f8:60:4c:a3:57:7e:
a6:39:1e:72:29:88:78:e4:f8:7d:6b:e3:26:dd:cc:4f:0c:ad:
be:c4:11:fb:5a:f9:1e:7c:56:7c:7c:d0:d8:98:0f:e8:8b:6d:
4b:8d:34:4b:91:94:d0:2e:de:df:6c:51:1c:d4:5c:97:ca:48:
b4:21:e7:19:92:97:c5:9d:c1:c3:08:e2:b5:6c:87:d2:4b:cb:
fc:16:13:02:f6:2d:39:9b:d2:73:36:c9:6d:38:e6:ef:a1:bf:
1f:40:a0:05:30:ff:73:fa:5d:3c:97:9c:59:6f:b3:c5:5d:bd:
ca:3a:63:4f:a4:8c:14:de:c1:3e:cf:ed:02:7e:62:00:b3:b2:
65:0d:f2:e1:fd:b2:10:21:4f:73:0b:bc:c2:e7:ad:9a:89:7c:
d5:2c:55:6a:6c:43:67:71:0b:6f:a1:cb:c5:44:4a:ad:08:bc:
9f:84:48:7d:7e:ad:4b:5b:1d:39:d0:bd:99:af:82:03:28:42:
13:92:48:27:b6:62:17:97:7d:7c:4a:f7:82:36:43:ed:4a:83:
31:b0:de:89:3e:da:df:30:ca:62:9d:a4:bf:63:08:d5:f2:26:
ae:f2:ce:2e:de:64:d0:cf:12:21:66:cc:6a:06:19:d0:77:8a:
36:ba:c1:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:44:57 2025 by rpki-client