Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/2da43d-3997-40a6-accd-f6fd6bd857b8/1/RNLnV4qslPQpYKeA05ltqLtGlHc.mft
File: RNLnV4qslPQpYKeA05ltqLtGlHc.mft (raw, json)
Hash identifier: +yjHqt3diq6osaonNzLsecJZvG2h6EbIJnFYMldw36o=
Subject key identifier: D5:A9:08:22:98:A6:4F:E0:72:65:90:EE:FF:A1:CC:33:27:31:BF:84
Authority key identifier: 44:D2:E7:57:8A:AC:94:F4:29:60:A7:80:D3:99:6D:A8:BB:46:94:77
Certificate issuer: /CN=44d2e7578aac94f42960a780d3996da8bb469477
Certificate serial: 0194BC728D5497F32FF0AD9C7C421216FB5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RNLnV4qslPQpYKeA05ltqLtGlHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/2da43d-3997-40a6-accd-f6fd6bd857b8/1/RNLnV4qslPQpYKeA05ltqLtGlHc.mft
Manifest number: 0B11
Signing time: Fri 31 Jan 2025 13:00:11 +0000
Manifest this update: Fri 31 Jan 2025 13:00:11 +0000
Manifest next update: Sat 01 Feb 2025 13:00:11 +0000
Files and hashes: 1: Mls2HM8_FY_IKXa_7YokWR8k2as.roa (hash: CiqhaGVIRMfnCHendb0wwlGmTiUs+e665f1gVqsw+T0=)
2: RNLnV4qslPQpYKeA05ltqLtGlHc.crl (hash: JekTks68lSgpOqcNwHWFkEJ4fCJpxzMG+2AIn0V0d1A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:8d:54:97:f3:2f:f0:ad:9c:7c:42:12:16:fb:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44d2e7578aac94f42960a780d3996da8bb469477
Validity
Not Before: Jan 31 13:00:11 2025 GMT
Not After : Feb 1 13:00:11 2025 GMT
Subject: CN=d5a9082298a64fe0726590eeffa1cc332731bf84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:29:42:79:43:64:0c:0e:c9:e5:a8:84:f8:fd:
f0:ad:87:b9:91:c2:56:55:fa:d0:76:3e:fc:fe:97:
d5:2a:ff:2f:18:7f:c2:ad:6a:62:87:0a:45:55:07:
74:9a:01:d9:c6:18:75:03:d4:49:61:33:63:79:2c:
67:28:8b:c9:16:41:a4:f2:ca:a9:d4:f5:12:3f:06:
39:e0:31:b8:90:68:71:e7:76:09:0f:e3:49:89:03:
73:94:73:ea:e8:61:73:32:ea:93:a9:fd:30:61:c8:
dd:2b:6e:8a:63:7f:a6:09:ae:60:4a:55:c5:a1:49:
69:c5:05:ae:54:6c:86:1c:d8:34:1b:ea:6a:94:c3:
f0:ff:ea:5c:f1:22:90:d7:bd:a7:77:4e:07:83:7c:
69:5b:a1:94:c0:31:6d:50:79:87:e9:b6:b2:ce:e2:
e8:78:91:f1:c0:75:6f:64:7c:82:e1:cc:f2:d9:94:
ac:46:3a:af:c1:99:7e:b9:36:45:71:57:c1:90:d6:
4e:1c:e3:ee:82:39:9e:70:3b:0d:bc:d2:e1:f4:d9:
13:62:12:fe:29:f8:64:8e:3f:e7:a6:75:9f:57:92:
a3:44:4f:54:d9:c3:a4:f3:09:83:c7:d6:36:aa:f0:
13:16:0a:26:2c:d0:e8:4e:0c:03:92:18:e7:61:10:
ad:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:A9:08:22:98:A6:4F:E0:72:65:90:EE:FF:A1:CC:33:27:31:BF:84
X509v3 Authority Key Identifier:
keyid:44:D2:E7:57:8A:AC:94:F4:29:60:A7:80:D3:99:6D:A8:BB:46:94:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RNLnV4qslPQpYKeA05ltqLtGlHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/2da43d-3997-40a6-accd-f6fd6bd857b8/1/RNLnV4qslPQpYKeA05ltqLtGlHc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/2da43d-3997-40a6-accd-f6fd6bd857b8/1/RNLnV4qslPQpYKeA05ltqLtGlHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:79:73:2e:e5:7e:52:94:32:6c:9c:6f:c4:63:4a:d9:93:f9:
c2:e9:34:d9:e3:0f:29:6d:a9:02:b0:82:70:16:40:fb:96:44:
c0:64:81:24:ef:90:c0:ad:01:c7:b3:e4:04:33:2f:15:6b:f4:
c2:5c:2c:a1:44:10:b7:4a:e9:a4:76:ed:1b:26:fc:06:d0:2d:
ca:01:c9:52:21:d6:a5:d9:e6:b6:00:89:5d:a3:a3:90:17:d9:
6a:2b:13:4d:48:55:1f:26:89:7b:5f:48:65:5f:17:ef:4e:43:
45:3c:7f:ac:ef:62:0c:bf:cf:7a:d6:d2:c2:67:66:61:4a:47:
c9:5b:01:70:57:0c:c4:af:b0:dc:58:20:09:8f:8d:02:eb:bc:
4e:66:4d:2c:bf:4f:59:b5:57:90:b3:72:03:be:a5:81:ea:e4:
f4:70:3f:4e:4a:73:2c:be:a2:d3:e2:e3:00:9f:2c:8e:60:ea:
fd:d0:79:01:74:a3:1f:47:4d:41:97:48:a2:bf:fd:5c:78:e0:
60:c9:37:86:b4:99:57:e3:ce:51:4b:7f:cd:d8:76:85:7b:03:
c6:f8:a9:9d:84:71:9f:15:9d:77:de:0e:60:fb:5b:d5:e3:29:
a4:d1:3c:c3:4e:8d:b4:66:31:18:40:0a:5d:6b:5e:62:8b:06:
e2:12:5c:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:08:01 2025 by rpki-client