Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/73c60b-18cd-425b-8e6f-92719b00bbd4/1/RfwKpabDOR7__6g0JbI7JkxxCF8.mft
File: RfwKpabDOR7__6g0JbI7JkxxCF8.mft (raw, json)
Hash identifier: UXRsKvfImmezy+T8rB4mXv5puvYJODjJjfRKNB4xT4c=
Subject key identifier: 1D:69:E5:A2:F1:FF:9B:D5:79:DE:71:71:8B:E1:95:CC:AE:E9:AB:DA
Authority key identifier: 45:FC:0A:A5:A6:C3:39:1E:FF:FF:A8:34:25:B2:3B:26:4C:71:08:5F
Certificate issuer: /CN=45fc0aa5a6c3391effffa83425b23b264c71085f
Certificate serial: 0194BD17B652E535CDF8C6A051F15476144F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RfwKpabDOR7__6g0JbI7JkxxCF8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/73c60b-18cd-425b-8e6f-92719b00bbd4/1/RfwKpabDOR7__6g0JbI7JkxxCF8.mft
Manifest number: 01DB
Signing time: Fri 31 Jan 2025 16:00:35 +0000
Manifest this update: Fri 31 Jan 2025 16:00:35 +0000
Manifest next update: Sat 01 Feb 2025 16:00:35 +0000
Files and hashes: 1: AtEE45wMuuWclU17cb1kVGtiK-k.roa (hash: zV0IMkpRcApVZ59kj9E+ybhQgMo26h1xRqM1Q3Q35gM=)
2: RfwKpabDOR7__6g0JbI7JkxxCF8.crl (hash: bGkQThSIst/nhFimTw070XOlM1NqKlHafFYmfupoka8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:b6:52:e5:35:cd:f8:c6:a0:51:f1:54:76:14:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45fc0aa5a6c3391effffa83425b23b264c71085f
Validity
Not Before: Jan 31 16:00:35 2025 GMT
Not After : Feb 1 16:00:35 2025 GMT
Subject: CN=1d69e5a2f1ff9bd579de71718be195ccaee9abda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:99:74:9d:f2:33:2b:93:3b:5f:b8:a3:3e:f8:
8e:46:d0:69:6f:cb:c0:a3:53:58:86:82:bf:32:b2:
48:3a:78:bf:19:7c:df:09:09:86:72:a9:b2:01:ff:
be:87:c7:f5:51:fc:b2:7e:ec:1e:55:09:f9:fe:cc:
4e:c7:ea:35:d0:88:5a:e1:7a:ab:a0:be:25:18:e3:
dd:95:3f:0f:42:62:be:7c:49:d7:b6:c7:62:33:65:
8e:eb:96:96:a6:05:7c:9f:85:86:b8:cd:1b:9b:8d:
9e:6b:4d:54:73:df:b2:88:cb:44:65:53:e4:ab:1d:
7a:6d:b1:d2:ff:75:d9:2d:7a:67:b0:e7:ab:43:04:
80:e8:58:5d:9c:b8:6a:c6:02:51:20:ca:b6:a3:bb:
6e:5d:3b:77:5f:65:4d:2b:07:38:6b:6e:77:4a:f5:
07:7d:17:95:e4:87:51:f0:c6:da:0a:60:64:0e:15:
ba:38:56:ca:26:02:ae:80:21:ea:41:97:6d:e4:5c:
b0:4f:74:7f:93:6f:01:f1:18:ab:43:ac:52:d8:da:
ac:03:ed:9d:a9:43:dc:1b:f8:dc:04:cd:ea:a7:3a:
29:e3:c3:64:27:d4:be:66:82:53:74:9e:99:1b:21:
6e:b7:58:ad:93:c9:2c:06:b1:1a:aa:6e:61:38:c4:
e6:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:69:E5:A2:F1:FF:9B:D5:79:DE:71:71:8B:E1:95:CC:AE:E9:AB:DA
X509v3 Authority Key Identifier:
keyid:45:FC:0A:A5:A6:C3:39:1E:FF:FF:A8:34:25:B2:3B:26:4C:71:08:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RfwKpabDOR7__6g0JbI7JkxxCF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/73c60b-18cd-425b-8e6f-92719b00bbd4/1/RfwKpabDOR7__6g0JbI7JkxxCF8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/73c60b-18cd-425b-8e6f-92719b00bbd4/1/RfwKpabDOR7__6g0JbI7JkxxCF8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:a1:e8:f7:85:18:f3:bb:86:fe:5f:79:7b:09:c7:40:13:a8:
0f:e3:4d:19:a5:47:3f:f3:7d:5a:25:51:af:8c:0f:20:cf:ef:
8b:67:e4:df:78:87:28:36:6f:bb:af:ac:32:86:68:b9:e6:2f:
1c:04:39:9e:72:e7:b7:92:52:66:01:da:99:62:dd:36:00:85:
a7:36:04:37:34:1d:8a:9b:d6:62:b1:21:78:7b:5d:27:ab:00:
d1:3e:a9:cb:31:a5:14:69:15:98:00:87:e7:c0:3e:ab:c4:54:
2f:8f:74:54:1e:78:25:e9:14:ec:ec:9d:05:e6:4c:de:c9:44:
9e:ef:71:e0:3d:99:4f:04:27:2b:e9:a2:2d:61:cd:dd:8a:2e:
77:a9:aa:67:93:3b:1b:ed:51:12:de:0c:ff:2a:a6:e8:11:49:
88:85:f0:df:08:d3:cb:3b:30:91:d5:43:73:2e:f9:c6:48:ac:
b4:ff:1a:48:bb:aa:dd:a6:ce:31:9c:2d:0c:a0:2f:69:8b:13:
ce:0b:0e:3a:8a:a8:81:d5:d9:b8:ea:f8:1e:eb:c4:46:40:13:
5d:f0:b2:98:0d:7a:2b:ef:cd:00:39:55:cd:3d:9a:e1:28:00:
09:3b:7f:17:25:d7:00:77:fa:7f:34:90:03:39:1f:ab:b2:86:
55:26:df:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:24:14 2025 by rpki-client