Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6c5331-dc1b-4f8c-9d3d-28bf1d33aa90/1/RkXJxY1aSZm13OngcNMvSI4zH1I.mft
File: RkXJxY1aSZm13OngcNMvSI4zH1I.mft (raw, json)
Hash identifier: S66RqemndJQCxF/i3ewguhHPa5CC1olHdnQPVJf7cM8=
Subject key identifier: 97:61:90:4F:02:68:81:EC:D0:7D:0D:6A:C5:E4:C3:4C:EA:48:25:BF
Authority key identifier: 46:45:C9:C5:8D:5A:49:99:B5:DC:E9:E0:70:D3:2F:48:8E:33:1F:52
Certificate issuer: /CN=4645c9c58d5a4999b5dce9e070d32f488e331f52
Certificate serial: 0194BCE0DCC90BA36820E09EBC6438A52CB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RkXJxY1aSZm13OngcNMvSI4zH1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6c5331-dc1b-4f8c-9d3d-28bf1d33aa90/1/RkXJxY1aSZm13OngcNMvSI4zH1I.mft
Manifest number: 0263
Signing time: Fri 31 Jan 2025 15:00:40 +0000
Manifest this update: Fri 31 Jan 2025 15:00:40 +0000
Manifest next update: Sat 01 Feb 2025 15:00:40 +0000
Files and hashes: 1: RkXJxY1aSZm13OngcNMvSI4zH1I.crl (hash: V6+ezwDFY037s7wMjq2iiEoarKk+E+IKPdJeufktQ2k=)
2: S8w484i2So0upLimT4DivXMFWTc.roa (hash: Xwh1nJvihxD2+JIu0EcE5o1EcOXEFkB9P4xQdM683xQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:dc:c9:0b:a3:68:20:e0:9e:bc:64:38:a5:2c:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4645c9c58d5a4999b5dce9e070d32f488e331f52
Validity
Not Before: Jan 31 15:00:40 2025 GMT
Not After : Feb 1 15:00:40 2025 GMT
Subject: CN=9761904f026881ecd07d0d6ac5e4c34cea4825bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:54:9d:07:ee:fa:34:2d:13:86:bb:d6:ad:91:
5c:41:18:70:27:e7:40:1f:92:72:8e:d7:ca:b0:bf:
d0:ed:3d:1a:e8:1f:83:3c:64:10:f4:0a:b1:9f:b0:
1d:79:26:d7:c0:43:81:6b:c0:d2:ec:4f:3f:61:34:
54:b1:1b:55:97:e9:73:25:2a:12:d5:b9:42:2c:4c:
a2:a8:d0:73:53:96:91:b6:12:91:85:30:49:34:50:
10:38:30:9a:12:93:c0:c1:ad:50:11:dc:ec:df:4b:
98:55:7d:d6:87:80:fd:b3:16:16:32:2d:36:ca:b0:
d4:29:be:44:2b:20:3b:08:63:c6:4b:1f:ab:1f:75:
61:fb:f8:da:14:e4:86:98:b4:9f:37:97:a7:a9:62:
ce:a9:41:b1:16:42:ea:dc:83:f8:2c:bf:4e:84:56:
b3:56:85:bb:e4:ee:9b:35:9d:27:52:ad:1b:3a:4e:
9f:62:51:c9:9e:f1:05:51:76:e3:d9:ce:07:25:1f:
00:27:62:bb:78:0f:31:bb:77:0f:96:b8:bb:1f:c9:
1c:c1:69:63:8c:bb:7a:40:b0:04:a5:da:38:ae:ce:
01:b3:d1:f1:fc:62:dc:af:cb:aa:e2:49:bc:c4:be:
e3:6c:01:bc:3c:5c:ce:40:1a:6d:39:34:42:6e:dd:
1a:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:61:90:4F:02:68:81:EC:D0:7D:0D:6A:C5:E4:C3:4C:EA:48:25:BF
X509v3 Authority Key Identifier:
keyid:46:45:C9:C5:8D:5A:49:99:B5:DC:E9:E0:70:D3:2F:48:8E:33:1F:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RkXJxY1aSZm13OngcNMvSI4zH1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6c5331-dc1b-4f8c-9d3d-28bf1d33aa90/1/RkXJxY1aSZm13OngcNMvSI4zH1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6c5331-dc1b-4f8c-9d3d-28bf1d33aa90/1/RkXJxY1aSZm13OngcNMvSI4zH1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:13:83:99:cf:09:ea:21:c9:e1:48:6d:7d:3a:90:f0:e9:c4:
e0:ba:43:8f:52:97:2f:dd:e5:3d:bf:3d:f7:49:97:ed:cb:5a:
8a:06:d4:19:e9:10:ce:86:23:63:1c:5a:60:3b:ee:a9:ee:76:
dc:3e:bb:76:b6:70:34:cf:16:4a:d3:6f:d4:22:4a:ba:c0:98:
34:8e:2c:6a:e8:85:94:63:97:91:ac:93:8f:35:20:8d:16:59:
59:53:1c:e4:08:40:60:b4:6a:6b:cb:11:e1:72:78:5e:ae:24:
50:50:72:a1:cc:68:93:ed:f8:ce:cd:28:3b:5f:af:8f:b5:e0:
38:65:59:5b:16:f2:7b:3b:80:e2:b9:ee:e4:b4:16:c8:a8:43:
5c:e2:f6:a6:95:a0:c3:d9:99:1f:64:84:9c:14:a6:78:77:4f:
e0:70:16:20:1f:a0:c7:62:15:5e:29:03:d2:85:63:68:96:ed:
c8:b5:49:2b:03:b8:6f:b2:b9:e3:ae:5e:c2:b0:c1:9d:99:66:
6a:e4:7e:b4:ae:10:03:23:5b:26:42:7d:e6:85:e4:92:84:4f:
d1:bb:a8:98:c9:f8:a6:c7:df:23:77:53:56:4e:8c:c1:7c:b3:
12:7b:f7:1d:93:c0:11:7d:8b:47:35:4c:e0:1b:27:55:b6:b1:
57:7f:3a:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:33:16 2025 by rpki-client