Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/7e224d-f154-4f75-a2a8-eb7ec4d7dca8/1/rf2QyzV0L55YHoy98OPhI6hJyDA.mft
File: rf2QyzV0L55YHoy98OPhI6hJyDA.mft (raw, json)
Hash identifier: Eu0lj7Px86pVa5cNs2bJcsfeVSNCMTYepMgLUWdlBUs=
Subject key identifier: C8:5B:28:98:8F:35:E3:10:CC:4C:E6:9F:1D:F8:17:4F:DD:27:11:3C
Authority key identifier: AD:FD:90:CB:35:74:2F:9E:58:1E:8C:BD:F0:E3:E1:23:A8:49:C8:30
Certificate issuer: /CN=adfd90cb35742f9e581e8cbdf0e3e123a849c830
Certificate serial: 0194BCAA16FDEC4D46D311A8ADA8D757DDDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rf2QyzV0L55YHoy98OPhI6hJyDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/7e224d-f154-4f75-a2a8-eb7ec4d7dca8/1/rf2QyzV0L55YHoy98OPhI6hJyDA.mft
Manifest number: 13BD
Signing time: Fri 31 Jan 2025 14:00:51 +0000
Manifest this update: Fri 31 Jan 2025 14:00:51 +0000
Manifest next update: Sat 01 Feb 2025 14:00:51 +0000
Files and hashes: 1: csdHd_e7Tx65D2MBS9ZtbLUxU90.roa (hash: fNuNtwuPS3v94+W5VQY9K+dMsKggefc0dwxaWQUAwyY=)
2: rf2QyzV0L55YHoy98OPhI6hJyDA.crl (hash: n+vjDwcdyRfpLXH9Pr63ih1N1HzzEoOfZwIX3iCXFvQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:16:fd:ec:4d:46:d3:11:a8:ad:a8:d7:57:dd:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adfd90cb35742f9e581e8cbdf0e3e123a849c830
Validity
Not Before: Jan 31 14:00:51 2025 GMT
Not After : Feb 1 14:00:51 2025 GMT
Subject: CN=c85b28988f35e310cc4ce69f1df8174fdd27113c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:da:80:f3:1e:c8:9c:56:3f:74:7d:ea:b3:11:
31:06:27:df:09:1c:ed:96:bb:b4:2d:1a:bd:6b:71:
ef:9c:18:48:ba:03:ba:eb:8f:7c:3a:b5:58:1d:ae:
c3:30:7f:58:2f:64:e7:a1:9e:3d:ba:e5:b8:d5:67:
08:23:f2:2e:f4:1d:8c:f5:86:2f:4e:5b:29:75:34:
f7:eb:8c:75:0b:b7:01:a1:43:b7:86:47:62:3d:44:
b6:9b:c9:d9:28:9e:c3:a4:ae:3c:45:77:fe:ee:b3:
0b:45:b3:fa:e4:40:30:0a:69:d8:b8:ca:2e:fc:69:
56:3b:b8:b5:ed:21:cc:38:b5:24:b9:32:b0:ce:ff:
0c:44:d2:e7:a9:0e:c9:2b:2f:dd:76:ef:06:88:4b:
0a:70:0b:41:92:0a:47:2a:38:2b:eb:1e:50:59:3d:
f2:ae:0d:9f:4d:12:c9:aa:6b:13:83:76:03:87:b2:
53:9b:65:fd:2c:d9:51:46:db:3d:a8:bd:e6:66:6f:
56:f3:9e:c2:ef:24:ff:c7:13:94:0e:dd:14:62:da:
6c:e1:92:43:70:0a:17:8f:ff:bb:5a:3a:c2:0a:ce:
11:78:6c:5a:50:f1:7c:65:12:67:fb:ac:13:0f:36:
d7:24:96:0b:51:b5:ac:89:43:30:50:b9:31:9b:18:
bd:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:5B:28:98:8F:35:E3:10:CC:4C:E6:9F:1D:F8:17:4F:DD:27:11:3C
X509v3 Authority Key Identifier:
keyid:AD:FD:90:CB:35:74:2F:9E:58:1E:8C:BD:F0:E3:E1:23:A8:49:C8:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rf2QyzV0L55YHoy98OPhI6hJyDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/7e224d-f154-4f75-a2a8-eb7ec4d7dca8/1/rf2QyzV0L55YHoy98OPhI6hJyDA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/7e224d-f154-4f75-a2a8-eb7ec4d7dca8/1/rf2QyzV0L55YHoy98OPhI6hJyDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:9f:f8:7c:5b:7c:cf:5b:69:b0:4a:86:21:e9:2c:c6:2b:5c:
88:0d:7f:29:aa:f7:64:d2:02:c2:b2:3d:b7:64:01:25:32:b8:
f6:b1:bc:4b:0d:dd:d7:fd:c2:04:16:7e:b8:99:05:69:c4:7c:
e4:3b:a9:de:d1:75:6a:d1:e2:5a:de:6d:77:0f:e2:be:8a:ee:
95:dd:ed:f7:48:4d:31:56:d6:c7:2f:e4:68:9e:5c:39:39:35:
9a:30:00:3d:e4:27:5a:ce:29:c8:ca:a2:40:e1:c6:c3:75:62:
b6:fe:f5:71:58:7d:3c:34:d0:0f:6c:0f:87:64:eb:90:77:1d:
98:ac:ce:7c:85:c3:d1:49:ef:fd:e9:b8:83:4a:ee:26:76:69:
55:b9:72:d8:40:40:a3:99:e9:07:39:68:0e:56:07:c6:6f:89:
01:04:ab:83:99:3b:eb:8d:54:dc:e6:24:25:e8:f0:40:d2:23:
d9:d2:a4:32:dd:1d:c2:a7:ce:0a:db:a6:8c:50:bb:58:8d:82:
96:4e:9e:be:9f:e5:e3:8d:6d:da:5f:eb:b7:27:af:bf:69:3d:
8a:00:7f:cd:2f:26:1f:dc:38:af:a7:1c:3b:a4:6f:2e:da:04:
89:ac:47:df:00:33:50:54:1a:e9:25:8a:cf:8f:7e:bf:49:52:
99:70:43:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:36 2025 by rpki-client