Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/9a1fff-050e-4de9-8e64-5d4010900e86/1/RxakQ3T-peyZ8Q-41sfY7-KjNIs.mft
File: RxakQ3T-peyZ8Q-41sfY7-KjNIs.mft (raw, json)
Hash identifier: mFi5c7Mw8We2A9TIFmQsOwCtSBly0wDHDiVUZ+1JKzE=
Subject key identifier: 16:B4:9A:DF:51:40:CD:B0:48:CB:67:34:35:F7:42:60:9C:11:70:92
Authority key identifier: 47:16:A4:43:74:FE:A5:EC:99:F1:0F:B8:D6:C7:D8:EF:E2:A3:34:8B
Certificate issuer: /CN=4716a44374fea5ec99f10fb8d6c7d8efe2a3348b
Certificate serial: 0194BD85B3F74505CF79A47BCCED6A64A769
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RxakQ3T-peyZ8Q-41sfY7-KjNIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/9a1fff-050e-4de9-8e64-5d4010900e86/1/RxakQ3T-peyZ8Q-41sfY7-KjNIs.mft
Manifest number: 0B3D
Signing time: Fri 31 Jan 2025 18:00:43 +0000
Manifest this update: Fri 31 Jan 2025 18:00:43 +0000
Manifest next update: Sat 01 Feb 2025 18:00:43 +0000
Files and hashes: 1: C21UyjKwyHlotXzUs2wrT9-7ml4.roa (hash: ZR2xWVZUFQuKM7jT26V7/BzP532dWCavsfpkwUm/YAU=)
2: RxakQ3T-peyZ8Q-41sfY7-KjNIs.crl (hash: OHNiCFtee40tR5ljFUpGN8ohrM4M6UUxfgG0rLMdOs8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:b3:f7:45:05:cf:79:a4:7b:cc:ed:6a:64:a7:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4716a44374fea5ec99f10fb8d6c7d8efe2a3348b
Validity
Not Before: Jan 31 18:00:43 2025 GMT
Not After : Feb 1 18:00:43 2025 GMT
Subject: CN=16b49adf5140cdb048cb673435f742609c117092
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f7:4e:df:21:2d:db:2a:1c:e6:03:34:3c:8a:
22:f7:99:08:57:28:0a:6b:98:40:df:e1:ff:55:43:
c5:fa:c0:41:89:3f:91:fa:43:2e:53:cf:e4:0d:a4:
25:1c:40:f0:31:7c:79:88:fc:a5:f4:a6:1c:58:af:
3e:3e:42:81:90:c3:4b:d0:6c:24:ec:f6:ec:bc:b2:
54:28:1a:2e:64:95:42:2b:f2:9a:32:2e:57:c4:eb:
76:6f:fe:77:42:98:4e:eb:aa:c5:8f:57:8d:17:25:
84:6d:a1:e4:17:2b:8f:13:3f:fb:99:d7:3e:64:20:
84:1d:23:ab:36:ee:e6:f9:9f:0a:2b:66:9b:c4:e0:
ae:39:09:0d:e1:66:6d:c7:80:30:e2:dd:c1:33:f5:
6e:ab:1f:09:a4:8d:19:8d:7e:1f:47:14:3c:99:f4:
e9:7d:52:ca:42:4b:65:20:dd:39:a2:ca:e3:b8:9a:
32:a3:eb:fe:cc:a1:24:62:88:ee:5f:02:cd:76:58:
e1:7e:ea:77:b5:8b:b4:5f:87:12:8b:be:3d:a7:8e:
1a:c3:53:a5:13:9a:9b:6f:22:7d:61:8a:64:99:37:
7e:76:8d:00:ba:78:a8:a7:4b:ae:70:47:00:40:fb:
ac:59:9a:ae:fe:84:48:ea:c2:75:54:5a:1d:65:5a:
8d:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:B4:9A:DF:51:40:CD:B0:48:CB:67:34:35:F7:42:60:9C:11:70:92
X509v3 Authority Key Identifier:
keyid:47:16:A4:43:74:FE:A5:EC:99:F1:0F:B8:D6:C7:D8:EF:E2:A3:34:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RxakQ3T-peyZ8Q-41sfY7-KjNIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/9a1fff-050e-4de9-8e64-5d4010900e86/1/RxakQ3T-peyZ8Q-41sfY7-KjNIs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/9a1fff-050e-4de9-8e64-5d4010900e86/1/RxakQ3T-peyZ8Q-41sfY7-KjNIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:17:51:32:94:9f:0b:75:68:5c:f3:10:27:51:18:98:23:f9:
de:d5:6b:cb:18:99:9a:27:09:66:1d:20:c2:4a:f0:36:e5:58:
f5:38:2a:cb:37:77:6b:fd:ad:33:b1:3a:bf:f8:c7:66:6a:7c:
71:c5:a5:21:1b:37:83:d0:15:00:fe:0a:2e:7f:cc:93:ee:5c:
29:76:9b:d6:bc:33:2e:42:16:3f:20:94:79:9d:21:47:f6:4d:
19:6c:30:96:b5:c9:f3:5f:b5:79:ae:ce:b5:0c:c1:01:86:7a:
c5:24:8b:ba:73:02:82:9f:ff:84:4a:54:3b:64:98:3a:5b:0f:
ac:a4:3b:f3:f2:ae:60:db:34:8a:24:98:91:74:92:25:9a:31:
06:f9:95:6e:d8:17:f1:44:f6:e1:ed:90:0e:6b:ff:ad:60:3e:
10:a7:1b:41:2d:dc:98:2d:73:66:d7:1c:15:c3:f8:c3:9c:25:
02:75:8f:04:53:e4:e8:22:69:9c:29:18:49:f9:3c:bb:65:92:
c1:e0:b8:85:0f:f3:9a:94:fe:ae:a3:d1:c8:ca:87:b9:ea:8a:
f6:93:65:9d:41:d4:3e:d8:f5:ba:64:28:ca:00:a9:10:d1:db:
8e:ff:f0:98:90:af:87:45:94:50:d2:e6:e4:5f:d2:77:89:85:
fc:63:d0:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:01:15 2025 by rpki-client