Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/a08520-7f06-4f12-8640-49785fcdd9c4/1/rX2N6MoGHqFk5nHDTrM3f1c2u8M.mft
File: rX2N6MoGHqFk5nHDTrM3f1c2u8M.mft (raw, json)
Hash identifier: oqJDujskeTBfK832gPDpbbaf3tuOV2Qedmk09PD/dFc=
Subject key identifier: C5:90:8E:64:B6:1B:F9:B1:84:84:5E:A9:5F:7E:7E:C6:66:14:5E:35
Authority key identifier: AD:7D:8D:E8:CA:06:1E:A1:64:E6:71:C3:4E:B3:37:7F:57:36:BB:C3
Certificate issuer: /CN=ad7d8de8ca061ea164e671c34eb3377f5736bbc3
Certificate serial: 0194BCE07E1781000D6C6C0515107B306589
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rX2N6MoGHqFk5nHDTrM3f1c2u8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/a08520-7f06-4f12-8640-49785fcdd9c4/1/rX2N6MoGHqFk5nHDTrM3f1c2u8M.mft
Manifest number: 1021
Signing time: Fri 31 Jan 2025 15:00:16 +0000
Manifest this update: Fri 31 Jan 2025 15:00:16 +0000
Manifest next update: Sat 01 Feb 2025 15:00:16 +0000
Files and hashes: 1: 0_n0dJGdGPC54n6Su3XhjRpEGaE.roa (hash: ecsdCD7tgZtKRsUvKu336lhnysfVM1v2m6QNHH0P3gg=)
2: rX2N6MoGHqFk5nHDTrM3f1c2u8M.crl (hash: qMLgF16DomDvxTwdKPSarg5yebJSGw13jt6791tNXpo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:7e:17:81:00:0d:6c:6c:05:15:10:7b:30:65:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad7d8de8ca061ea164e671c34eb3377f5736bbc3
Validity
Not Before: Jan 31 15:00:16 2025 GMT
Not After : Feb 1 15:00:16 2025 GMT
Subject: CN=c5908e64b61bf9b184845ea95f7e7ec666145e35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:17:be:24:d2:12:dc:41:e8:ba:9c:7e:9b:8f:
4b:0a:11:2d:41:b0:21:14:b8:49:b2:fc:09:42:4a:
f7:7d:34:42:03:68:09:d1:97:9c:46:bc:b8:5a:32:
73:1f:57:7f:dc:c3:df:17:95:e3:9f:57:6b:95:7c:
63:6b:50:0d:78:9e:68:39:60:95:25:32:74:4f:7e:
76:85:9a:13:c1:a7:98:1d:54:4b:78:ff:4d:2b:93:
aa:66:84:c9:b3:2f:38:8f:ad:67:c3:11:0a:c8:c5:
2e:e6:67:53:7c:03:ca:4c:a7:0a:a4:10:fa:c6:64:
08:8f:01:2e:d9:b7:52:f2:2b:ca:ad:28:62:8f:7a:
9f:ac:f0:af:83:0e:63:23:92:0b:55:46:e7:35:91:
4a:ff:e3:87:bd:51:fc:7b:c4:de:2f:d7:dc:0b:41:
a0:71:3a:fa:3e:3a:e2:ae:38:b8:9d:46:60:cc:da:
96:d8:85:c7:b2:ba:b0:99:bd:d8:4d:39:a7:47:eb:
3d:ad:62:01:d4:87:5a:f0:a1:be:80:e5:14:72:52:
4d:35:65:ac:c5:e1:5e:ce:76:ad:76:9a:8e:18:56:
f4:8a:fd:da:fc:fa:2c:fc:cd:63:7f:ba:cb:8f:f1:
f5:f9:c6:b8:1c:ff:cd:b5:82:e5:cd:de:ec:3d:9d:
64:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:90:8E:64:B6:1B:F9:B1:84:84:5E:A9:5F:7E:7E:C6:66:14:5E:35
X509v3 Authority Key Identifier:
keyid:AD:7D:8D:E8:CA:06:1E:A1:64:E6:71:C3:4E:B3:37:7F:57:36:BB:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rX2N6MoGHqFk5nHDTrM3f1c2u8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/a08520-7f06-4f12-8640-49785fcdd9c4/1/rX2N6MoGHqFk5nHDTrM3f1c2u8M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/a08520-7f06-4f12-8640-49785fcdd9c4/1/rX2N6MoGHqFk5nHDTrM3f1c2u8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:2a:9c:2b:28:f7:ed:c2:0f:77:3a:e1:91:bb:08:1c:2e:87:
c1:0b:b7:fc:d3:9a:e3:e7:71:67:b7:52:41:96:0c:04:46:fd:
35:c1:6c:6b:68:58:ed:6d:44:f1:ac:2a:48:20:a9:ed:5a:15:
fb:ea:ee:cf:3e:02:79:07:b5:37:6d:9a:84:e5:b5:0f:51:10:
fc:88:da:ce:bf:ca:ee:d1:70:4d:49:af:b3:30:ce:03:84:45:
6c:17:9c:a2:2b:c4:95:d0:1f:62:71:d4:cc:4a:e3:a2:64:a4:
01:6a:6d:72:33:c2:c3:00:fb:72:61:90:67:c9:b0:a8:70:9d:
62:47:76:4b:52:ed:bd:11:7c:3b:2f:c6:b2:94:72:08:29:3f:
49:68:1f:0e:03:1b:09:f7:5d:ad:18:b3:21:9e:c9:e1:d9:ae:
39:f1:d5:74:2c:7a:06:b1:14:87:06:ba:a1:7e:72:d8:7b:54:
12:31:1d:bb:9b:ce:45:9d:34:5d:2c:b1:57:59:17:52:b6:32:
cf:be:f3:40:2a:ad:5d:c9:19:6b:a2:db:ea:3d:8c:d9:90:db:
e9:b3:cb:c1:ff:3a:37:cf:c0:2a:dc:25:4e:af:e7:2f:88:89:
e6:61:87:c4:83:56:b6:86:03:6d:b7:2c:07:9b:d9:bb:32:dc:
82:ae:c0:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:53 2025 by rpki-client