Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/11488d-c66a-4006-8f62-250980e75bdf/1/rE8xV1mbZvKMvFou7Tb7oj8D0s4.mft
File: rE8xV1mbZvKMvFou7Tb7oj8D0s4.mft (raw, json)
Hash identifier: f3eXxEWjUtPw1Qbici3hr/u1Sz8HdWMAX4VZyjJqvpM=
Subject key identifier: D7:BF:6C:9B:1D:5F:73:34:EA:17:71:F4:15:23:3E:68:AD:A9:80:29
Authority key identifier: AC:4F:31:57:59:9B:66:F2:8C:BC:5A:2E:ED:36:FB:A2:3F:03:D2:CE
Certificate issuer: /CN=ac4f3157599b66f28cbc5a2eed36fba23f03d2ce
Certificate serial: 0194BD4E9FFDB7B064578C3EA86EC6D76CFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rE8xV1mbZvKMvFou7Tb7oj8D0s4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/11488d-c66a-4006-8f62-250980e75bdf/1/rE8xV1mbZvKMvFou7Tb7oj8D0s4.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 17:00:34 +0000
Manifest this update: Fri 31 Jan 2025 17:00:34 +0000
Manifest next update: Sat 01 Feb 2025 17:00:34 +0000
Files and hashes: 1: 7oGA-c6QRj7wEtUqcKNVQeiPaKA.roa (hash: MiRDhCNZZYXqTOB7AxjOweIsafby8dLcnJ/tR0Eay+E=)
2: rE8xV1mbZvKMvFou7Tb7oj8D0s4.crl (hash: aNVI6q4kafqsFMmkJCYvMcocCHxVp56ZoAJkentS9wY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:9f:fd:b7:b0:64:57:8c:3e:a8:6e:c6:d7:6c:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac4f3157599b66f28cbc5a2eed36fba23f03d2ce
Validity
Not Before: Jan 31 17:00:34 2025 GMT
Not After : Feb 1 17:00:34 2025 GMT
Subject: CN=d7bf6c9b1d5f7334ea1771f415233e68ada98029
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c6:01:b9:a5:7a:dc:d8:9b:c6:2b:c3:12:3f:
4c:ea:5c:1f:2a:88:73:ea:37:a2:57:b1:b3:39:7a:
c2:6a:4d:bb:8e:e7:cf:53:a5:2a:fc:6c:60:4f:1c:
20:f2:9f:c4:55:2d:c0:a6:ef:70:f4:b9:bd:10:32:
9f:b8:aa:47:f2:e6:b9:22:f3:be:ba:5f:4e:c1:74:
df:77:67:38:a9:f8:76:38:cf:91:ed:ba:13:4c:c7:
b2:91:06:b7:b8:94:d9:2c:d5:90:c6:8f:87:26:dc:
68:cd:f0:7b:19:03:58:34:a5:d6:fe:d1:48:78:2c:
20:50:a0:65:63:0d:2b:77:55:d5:d1:b3:3a:a8:d6:
5d:7e:f5:b2:6f:51:4b:22:e5:ac:ed:fa:79:34:bc:
87:ee:be:b9:3c:16:67:72:cc:18:65:67:9c:0e:e0:
d8:de:c3:a8:f2:23:ae:ef:41:49:9a:ad:49:7d:03:
eb:67:47:b5:9b:ac:e5:fa:32:5c:03:61:e9:79:9f:
57:1b:9d:98:67:81:1b:84:d4:8c:9e:52:89:05:13:
42:4a:21:2a:aa:75:d3:ef:64:cd:b2:c4:56:06:32:
8e:ed:4f:db:e4:ff:0e:60:2f:97:d8:2f:97:ab:e1:
ce:b6:2c:f1:5b:09:5f:72:73:29:75:b5:26:4f:ed:
98:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:BF:6C:9B:1D:5F:73:34:EA:17:71:F4:15:23:3E:68:AD:A9:80:29
X509v3 Authority Key Identifier:
keyid:AC:4F:31:57:59:9B:66:F2:8C:BC:5A:2E:ED:36:FB:A2:3F:03:D2:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rE8xV1mbZvKMvFou7Tb7oj8D0s4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/11488d-c66a-4006-8f62-250980e75bdf/1/rE8xV1mbZvKMvFou7Tb7oj8D0s4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/11488d-c66a-4006-8f62-250980e75bdf/1/rE8xV1mbZvKMvFou7Tb7oj8D0s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:72:ab:2d:65:11:a6:1c:6b:81:d3:dd:98:50:11:d9:e6:f5:
32:80:46:c3:de:c3:8a:b9:94:e3:7b:30:b1:e6:82:f5:d9:90:
3f:73:62:9f:af:60:0b:e1:d6:64:6d:f4:bb:a0:9e:56:94:af:
b5:06:57:95:c7:64:ea:c8:d4:56:4d:55:67:a0:2a:e3:60:12:
cf:0b:44:d7:78:31:2b:74:3e:a1:f1:44:61:99:c4:aa:4c:65:
a8:ce:35:51:f0:09:94:d3:02:ec:d0:01:a0:40:a6:a1:d0:53:
c2:c9:9c:4c:08:28:68:54:7a:f1:50:1c:55:b9:2a:16:2f:1b:
aa:92:8d:e7:fe:80:51:8f:52:9f:2c:3c:12:50:7a:93:23:31:
12:57:c3:de:86:c2:3d:be:3e:50:2e:eb:fb:2d:9f:a0:ca:fb:
a2:d9:9f:fa:b0:54:dc:48:61:6f:5b:c1:be:c7:85:a1:c0:e6:
c4:cf:bc:8a:bf:14:f5:86:e5:dc:2b:a0:d0:4e:37:cb:93:ce:
6b:6c:d0:5c:81:e8:76:b0:a4:e2:49:93:fe:62:69:2d:55:f6:
e0:df:2c:ed:bc:78:91:c5:53:3f:6f:cb:e4:6f:eb:06:11:14:
be:6e:56:ec:7f:53:7c:91:10:cc:24:49:99:2d:1b:9d:fd:89:
20:50:20:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:55:00 2025 by rpki-client