Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/915cbb-568a-4f42-8b80-ccb016ae1513/1/M29qyC9vKOPT5bZkdVlNgxjnWrM.mft
File: M29qyC9vKOPT5bZkdVlNgxjnWrM.mft (raw, json)
Hash identifier: glich/i/gzasOxOU5UlOxklL62gv+uTVkXEc3hfMytU=
Subject key identifier: 47:9F:C4:6F:C5:B3:44:24:9F:CD:2A:CA:2F:AD:83:C1:DD:8E:47:04
Authority key identifier: 33:6F:6A:C8:2F:6F:28:E3:D3:E5:B6:64:75:59:4D:83:18:E7:5A:B3
Certificate issuer: /CN=336f6ac82f6f28e3d3e5b66475594d8318e75ab3
Certificate serial: 0194BC3BDF08A9C0581CE4C5EAFCBBF54E13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M29qyC9vKOPT5bZkdVlNgxjnWrM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/915cbb-568a-4f42-8b80-ccb016ae1513/1/M29qyC9vKOPT5bZkdVlNgxjnWrM.mft
Manifest number: 0BE6
Signing time: Fri 31 Jan 2025 12:00:27 +0000
Manifest this update: Fri 31 Jan 2025 12:00:27 +0000
Manifest next update: Sat 01 Feb 2025 12:00:27 +0000
Files and hashes: 1: M29qyC9vKOPT5bZkdVlNgxjnWrM.crl (hash: RCMdjRN4zPkmajQlkRj9mUkv1hwBwZ3AoFzsC9XfDwM=)
2: dEZ5raqBPXnkqzr9_S0vwZwMrcc.roa (hash: A8CtSs9BqkWswlRrqESpgq4uIozS5L7wmlKnC6IFKQ8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:df:08:a9:c0:58:1c:e4:c5:ea:fc:bb:f5:4e:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=336f6ac82f6f28e3d3e5b66475594d8318e75ab3
Validity
Not Before: Jan 31 12:00:27 2025 GMT
Not After : Feb 1 12:00:27 2025 GMT
Subject: CN=479fc46fc5b344249fcd2aca2fad83c1dd8e4704
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:05:d7:92:e6:09:92:c1:05:b5:50:a0:07:6a:
ee:72:81:a4:95:76:e2:8c:ee:ee:72:a7:f0:4e:66:
27:2b:3e:89:34:32:f8:16:ef:04:c3:f0:6f:40:bb:
27:71:8f:66:98:9e:e7:a1:bf:43:7f:7e:80:2b:1b:
89:53:8c:7f:e8:eb:0f:e8:4b:aa:46:91:1c:7d:15:
c5:20:23:ea:41:c3:53:f5:f1:fa:22:77:29:6b:40:
26:74:75:b1:2b:26:50:17:bd:de:a7:2a:6c:6e:ef:
7f:a3:55:f6:97:74:3e:87:84:61:ee:c8:21:37:6a:
4b:0f:bd:aa:14:4e:de:ae:bf:bd:b9:0c:2d:88:7d:
2b:4c:a1:0a:d6:64:91:5b:fc:0f:64:84:eb:a8:c2:
09:99:c0:bf:58:be:49:a0:12:53:3e:72:ea:6d:d3:
64:fa:0b:c6:c5:b8:b4:48:b0:74:94:f2:4d:46:21:
9e:c7:17:dc:a7:11:59:9e:06:67:03:cd:c1:2d:0e:
58:2c:8b:db:55:4c:5e:52:38:ba:3d:e7:69:57:36:
f0:fe:f9:05:79:11:08:3d:87:0b:06:35:ba:70:5e:
b3:2c:d8:a4:07:14:22:31:52:23:46:05:c1:eb:1f:
6d:d2:30:2c:78:4b:25:2f:f3:15:a5:06:92:45:e6:
c9:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:9F:C4:6F:C5:B3:44:24:9F:CD:2A:CA:2F:AD:83:C1:DD:8E:47:04
X509v3 Authority Key Identifier:
keyid:33:6F:6A:C8:2F:6F:28:E3:D3:E5:B6:64:75:59:4D:83:18:E7:5A:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M29qyC9vKOPT5bZkdVlNgxjnWrM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/915cbb-568a-4f42-8b80-ccb016ae1513/1/M29qyC9vKOPT5bZkdVlNgxjnWrM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/915cbb-568a-4f42-8b80-ccb016ae1513/1/M29qyC9vKOPT5bZkdVlNgxjnWrM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:c0:a4:14:1c:cb:13:19:4c:d9:d9:f7:e9:ab:b8:77:7d:19:
fe:60:5c:fa:fd:da:74:ad:20:6b:1e:25:c5:bf:f7:31:e8:98:
b5:de:6b:89:45:84:db:c1:96:c3:b8:44:b4:5e:08:a2:cb:1d:
6c:31:fa:38:8f:bf:28:7e:33:f5:a5:2c:49:0f:4c:39:f3:f9:
a5:7c:02:a6:58:e2:c0:0c:fc:90:e3:ca:73:4e:98:07:b1:46:
4e:09:d0:1f:69:67:0c:a5:7a:fd:05:eb:e8:87:32:4b:9e:7a:
54:9f:ca:13:a0:fe:0f:81:ff:d9:ac:33:d4:bf:ac:63:3d:57:
86:83:e5:44:7b:a4:f6:99:25:32:c5:7b:33:4d:7c:49:4f:5f:
1c:e7:ff:ca:08:b8:fb:10:a5:49:d2:49:b7:0c:09:2e:4d:2b:
fe:dc:b7:8b:fc:68:a5:08:7f:5e:c0:d9:64:0f:23:47:51:82:
14:64:24:b7:8f:16:b6:f9:a9:a7:59:48:e5:8b:c1:d7:4a:34:
cd:7c:1a:d1:f6:82:5b:6a:42:83:57:75:b1:98:f3:5a:de:c8:
69:5b:4a:d5:31:52:9e:9c:f7:8f:cf:8d:15:01:2d:bc:fa:09:
6e:91:15:70:61:52:9d:36:6e:f0:90:1c:1c:da:e1:9c:a5:1b:
fc:79:ed:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:27 2025 by rpki-client