Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/33d8aa-93d8-4936-a3de-93a3665c4b68/1/Rbuww3cEv9VYhJxlSa-XNOfRS-U.mft
File: Rbuww3cEv9VYhJxlSa-XNOfRS-U.mft (raw, json)
Hash identifier: sCb5jO0Y6qcJNDK21qeypjjwm/t0cuIpN9p6rsT8qNk=
Subject key identifier: 45:4A:70:F2:E4:94:D2:D9:2A:7D:BB:2E:71:69:E5:85:31:22:EB:BE
Authority key identifier: 45:BB:B0:C3:77:04:BF:D5:58:84:9C:65:49:AF:97:34:E7:D1:4B:E5
Certificate issuer: /CN=45bbb0c37704bfd558849c6549af9734e7d14be5
Certificate serial: 0194BBCE3693D36209A43B77DF7155D86939
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rbuww3cEv9VYhJxlSa-XNOfRS-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/33d8aa-93d8-4936-a3de-93a3665c4b68/1/Rbuww3cEv9VYhJxlSa-XNOfRS-U.mft
Manifest number: 035E
Signing time: Fri 31 Jan 2025 10:00:41 +0000
Manifest this update: Fri 31 Jan 2025 10:00:41 +0000
Manifest next update: Sat 01 Feb 2025 10:00:41 +0000
Files and hashes: 1: HrWHZLwLz9SHQNWDWAqLUzhWNgM.roa (hash: +TAR64SkVojwAPPcj29LtZXZh5haH9rqB2EiQmQF6cY=)
2: Rbuww3cEv9VYhJxlSa-XNOfRS-U.crl (hash: IK4e0pcO91p0vUOe/i4pePJr/BxeqS36krzj6qkPkFI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:36:93:d3:62:09:a4:3b:77:df:71:55:d8:69:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45bbb0c37704bfd558849c6549af9734e7d14be5
Validity
Not Before: Jan 31 10:00:41 2025 GMT
Not After : Feb 1 10:00:41 2025 GMT
Subject: CN=454a70f2e494d2d92a7dbb2e7169e5853122ebbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f5:1b:bd:ad:ed:8e:fe:88:82:dc:68:57:75:
c3:00:32:01:57:2b:07:e9:a4:86:d0:a1:fc:05:c7:
4f:3d:b4:89:52:05:ee:04:b8:c9:d5:08:38:96:72:
5f:ab:18:72:ba:1e:7f:2e:f6:4f:38:5a:8c:67:8a:
39:54:1d:8d:10:01:a0:ec:ad:cd:e1:c8:73:3b:74:
55:5c:b0:5e:67:3b:25:42:6a:4d:31:64:f5:32:8a:
ec:35:40:35:e9:73:3b:cc:9a:bc:cf:ae:c7:cc:1b:
58:be:2a:43:b2:b8:db:51:e2:d2:3d:c4:5d:4a:03:
4f:e7:fc:a3:15:d8:d7:ef:8b:89:4f:f7:eb:7d:e7:
47:05:95:84:4d:c7:70:a1:d5:c1:74:10:01:ea:0a:
94:f8:c1:66:59:c3:b2:9d:83:26:4c:5a:10:a3:8f:
c3:07:bf:ff:89:0f:5d:23:bf:b9:be:fe:61:b2:db:
9c:e3:d1:a1:2d:10:0c:f6:0c:36:5f:b8:2f:45:17:
56:92:37:6e:b6:f3:b7:4f:f4:29:45:33:71:5e:08:
07:72:f6:df:0c:e7:67:0d:7a:51:f9:5a:a4:3b:93:
12:fd:9f:60:2a:f1:77:ed:41:a4:ac:9d:e6:25:4a:
9a:41:ba:2d:b5:80:7a:dc:4a:d6:19:ff:69:28:4f:
63:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:4A:70:F2:E4:94:D2:D9:2A:7D:BB:2E:71:69:E5:85:31:22:EB:BE
X509v3 Authority Key Identifier:
keyid:45:BB:B0:C3:77:04:BF:D5:58:84:9C:65:49:AF:97:34:E7:D1:4B:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rbuww3cEv9VYhJxlSa-XNOfRS-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/33d8aa-93d8-4936-a3de-93a3665c4b68/1/Rbuww3cEv9VYhJxlSa-XNOfRS-U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/33d8aa-93d8-4936-a3de-93a3665c4b68/1/Rbuww3cEv9VYhJxlSa-XNOfRS-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:c3:5c:99:a7:09:fe:f2:dd:c8:62:95:33:65:ac:b3:14:03:
a0:13:de:f9:8b:40:8a:b9:47:31:f7:d9:a8:c3:cb:6d:13:48:
93:69:79:a2:cc:d1:97:aa:e1:d1:8c:1f:b2:eb:ef:8b:d8:b1:
da:8b:1c:a4:9f:a1:9f:40:6f:08:4d:83:48:8b:dc:cf:bf:e7:
e5:0b:c4:f2:4d:96:71:40:08:90:42:74:38:00:4d:e4:6f:df:
2a:ff:f5:f6:ae:e1:d0:26:9c:05:e2:44:3f:7b:a1:5d:1f:06:
a2:73:d9:c5:26:9c:9e:4d:79:bd:fb:4c:ae:59:f3:a4:7b:c9:
55:11:a3:03:f8:2f:49:04:14:a8:53:84:a9:b0:56:c8:02:01:
44:86:8e:79:d0:2a:8c:69:cb:77:76:a4:92:71:56:7d:7e:3b:
b1:08:ed:05:f1:d0:43:9e:3f:a3:0f:d6:8d:33:1f:7e:89:6f:
ca:af:d5:03:86:e8:46:78:03:37:d8:e2:a7:dd:56:65:d2:44:
12:b9:95:a4:32:10:e2:35:01:b5:78:fe:7f:35:17:8a:71:d2:
db:7b:d2:72:f1:ed:8e:77:ea:3e:8d:da:a5:b0:b8:5e:b0:02:
16:19:db:d6:1d:2d:f4:90:db:85:c4:bd:87:d8:3b:1e:7e:70:
94:0e:1e:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:34 2025 by rpki-client