Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/45a9c8-a257-47c3-be6f-677f51ebbd85/1/RZR46fHzCyT9FxmNHKyDW8Hk368.mft
File: RZR46fHzCyT9FxmNHKyDW8Hk368.mft (raw, json)
Hash identifier: fBblglEDmZdjiKAViX0DC0lDAMuuCvK+C4ZYvptr9bg=
Subject key identifier: 82:63:97:40:FA:7F:58:04:46:B1:9B:62:1F:DB:A3:68:CB:63:30:12
Authority key identifier: 45:94:78:E9:F1:F3:0B:24:FD:17:19:8D:1C:AC:83:5B:C1:E4:DF:AF
Certificate issuer: /CN=459478e9f1f30b24fd17198d1cac835bc1e4dfaf
Certificate serial: 0194BD8531BA7A24D3C02DCA12CE55DA82E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RZR46fHzCyT9FxmNHKyDW8Hk368.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/45a9c8-a257-47c3-be6f-677f51ebbd85/1/RZR46fHzCyT9FxmNHKyDW8Hk368.mft
Manifest number: 04C9
Signing time: Fri 31 Jan 2025 18:00:10 +0000
Manifest this update: Fri 31 Jan 2025 18:00:10 +0000
Manifest next update: Sat 01 Feb 2025 18:00:10 +0000
Files and hashes: 1: MI7COiU67b3DimT3qfKJwEQYCMg.roa (hash: NuZcKBXuxsrwNsk5imZ/LFDKoaeZvXMx3+mtlwDtumc=)
2: RZR46fHzCyT9FxmNHKyDW8Hk368.crl (hash: Y7rC+JOUY4Jwl2dDdhkYwfkSngJJ9ylCdoOuQ67lSOw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:31:ba:7a:24:d3:c0:2d:ca:12:ce:55:da:82:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=459478e9f1f30b24fd17198d1cac835bc1e4dfaf
Validity
Not Before: Jan 31 18:00:10 2025 GMT
Not After : Feb 1 18:00:10 2025 GMT
Subject: CN=82639740fa7f580446b19b621fdba368cb633012
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:5b:a3:bd:3f:61:61:bd:26:41:0c:89:38:8b:
62:1b:81:37:0d:03:d1:c3:d6:ef:5e:cd:c2:cb:10:
0d:5f:46:af:2f:97:0e:19:b8:b0:82:e3:69:87:3d:
ab:9f:98:e6:02:d4:ce:b3:08:f2:15:51:e0:05:d1:
e0:d0:aa:50:0b:d9:e8:06:71:49:24:de:e3:9e:30:
bf:79:14:95:61:37:64:ec:c7:f6:e3:9d:31:21:9d:
1b:e2:2b:df:c9:8d:0b:90:c4:34:4a:dd:30:ec:69:
5b:7d:77:78:93:11:be:81:0d:f9:af:de:9b:c3:51:
4a:56:36:b5:fe:e3:ae:2f:25:ec:c0:bc:88:ab:3c:
47:1e:63:84:0e:68:05:0c:a3:cc:51:0e:13:ab:25:
83:a9:69:ae:46:67:bd:ef:27:c8:60:98:08:c7:cc:
fd:cb:58:eb:bd:e0:58:ee:e4:31:1c:08:3d:21:9e:
73:f2:dd:a9:28:b9:52:34:51:a1:6a:a9:01:93:d1:
fc:41:43:fe:f1:94:27:db:09:0c:b6:03:d0:c4:01:
01:da:7a:85:df:b5:71:01:44:5c:8e:bd:0a:cc:48:
78:53:e1:b7:a8:79:13:5f:eb:a0:ca:2d:46:c7:75:
10:d5:32:88:2e:f8:ed:23:09:f0:69:83:c5:44:aa:
a9:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:63:97:40:FA:7F:58:04:46:B1:9B:62:1F:DB:A3:68:CB:63:30:12
X509v3 Authority Key Identifier:
keyid:45:94:78:E9:F1:F3:0B:24:FD:17:19:8D:1C:AC:83:5B:C1:E4:DF:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZR46fHzCyT9FxmNHKyDW8Hk368.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/45a9c8-a257-47c3-be6f-677f51ebbd85/1/RZR46fHzCyT9FxmNHKyDW8Hk368.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/45a9c8-a257-47c3-be6f-677f51ebbd85/1/RZR46fHzCyT9FxmNHKyDW8Hk368.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:25:01:b4:0a:b3:92:9a:ad:37:ca:5a:2c:05:c2:36:63:51:
68:91:4d:99:1d:af:fb:1f:ed:d1:24:94:d7:f6:8c:d8:41:36:
a2:f0:a7:1c:ee:38:d7:9d:a2:c6:ff:ea:77:0e:fd:98:b5:f5:
5f:88:3e:05:b1:15:c1:f0:ed:f5:51:62:a4:9b:42:7a:76:19:
63:d7:33:a7:b4:92:b0:d1:70:83:73:55:25:6c:9e:bd:8c:5a:
99:12:0b:45:58:92:52:b3:44:58:93:85:75:ef:40:b8:5c:02:
0d:a2:6c:5b:e9:a5:01:8c:71:69:c6:62:c2:f1:8f:30:78:d3:
06:96:a9:3c:1a:19:1e:2e:69:7e:3d:52:95:40:8a:15:90:69:
3e:61:15:19:dc:4c:c6:80:67:26:1a:08:d9:d6:fa:a4:83:40:
cd:af:81:6f:ce:f4:71:fe:29:f1:7f:e3:f0:14:27:3a:09:e5:
78:6b:9b:a4:36:4c:d9:2a:ad:7f:3a:94:fa:76:9c:50:6c:96:
69:df:cd:dd:6d:8b:fa:3d:38:cc:45:ee:25:9b:61:5d:76:ba:
cb:2f:92:00:cf:ae:58:f9:c5:59:37:21:a5:02:25:c5:f4:4a:
03:46:56:4d:f6:8b:74:30:59:a0:12:1b:32:e1:6f:58:fd:0e:
36:8a:65:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:15:12 2025 by rpki-client