Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/b8058e-4eba-4cc4-8c1d-9c84f2fdd8f0/1/RMDyoqVgB-TEXMxx59oJKGEwWyA.mft
File: RMDyoqVgB-TEXMxx59oJKGEwWyA.mft (raw, json)
Hash identifier: atleQH0/6ofvTfdwKkl1XOvlr7Xh0pInDThDiZMmMSo=
Subject key identifier: AA:58:F3:D9:76:8E:66:AD:3F:54:A8:C6:8C:24:04:08:EF:2F:AC:91
Authority key identifier: 44:C0:F2:A2:A5:60:07:E4:C4:5C:CC:71:E7:DA:09:28:61:30:5B:20
Certificate issuer: /CN=44c0f2a2a56007e4c45ccc71e7da092861305b20
Certificate serial: 0194BCA9869465C2E7A6F2A50BDF5ADAFD71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RMDyoqVgB-TEXMxx59oJKGEwWyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/b8058e-4eba-4cc4-8c1d-9c84f2fdd8f0/1/RMDyoqVgB-TEXMxx59oJKGEwWyA.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 14:00:14 +0000
Manifest this update: Fri 31 Jan 2025 14:00:14 +0000
Manifest next update: Sat 01 Feb 2025 14:00:14 +0000
Files and hashes: 1: RMDyoqVgB-TEXMxx59oJKGEwWyA.crl (hash: zR+TUy95rgE712NoRW8p+F05t9lGuAA9BLnKZCnxSxg=)
2: j-Ifej8p6sYfHH1KeQ_QH-keweY.roa (hash: iVB6o7qwOuA1Lj9sG4cTIYUNVhckFRweng10RlAwHI4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:86:94:65:c2:e7:a6:f2:a5:0b:df:5a:da:fd:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44c0f2a2a56007e4c45ccc71e7da092861305b20
Validity
Not Before: Jan 31 14:00:14 2025 GMT
Not After : Feb 1 14:00:14 2025 GMT
Subject: CN=aa58f3d9768e66ad3f54a8c68c240408ef2fac91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f7:c1:e8:2b:ea:71:3a:73:e0:ca:bf:f9:fb:
cf:74:b4:c4:f2:a0:00:0a:77:11:b0:57:a9:7f:1c:
32:42:0d:71:79:af:68:1c:24:f2:dc:e0:5b:5c:f2:
86:86:51:44:39:5a:f0:b2:87:29:dd:ea:e6:d8:d5:
63:f7:96:2e:ba:06:df:09:c2:e2:78:ba:f5:85:a8:
af:8c:bd:3d:c4:a5:1e:3c:99:ec:cb:ad:c8:f7:c5:
b1:e2:01:85:38:32:1c:a6:d3:ca:10:ad:e9:89:65:
3c:d3:cd:00:ad:d0:2d:24:8b:62:78:e9:b0:06:09:
f3:59:6d:c9:3c:cf:08:88:f5:be:64:73:b5:8b:a0:
b8:26:79:a4:46:2d:6c:72:cf:b2:a5:d9:1e:43:fb:
88:ec:7d:5b:c2:1e:3c:69:ab:f0:21:04:3d:4d:ec:
f1:ad:0f:66:1b:ae:23:17:79:0b:bc:d9:7c:e6:92:
60:8c:52:d9:ce:84:f6:45:10:0e:fd:88:84:dc:54:
07:1b:dd:78:f8:0d:de:23:36:ba:29:55:e8:50:bd:
55:b0:fd:43:7a:24:d6:e2:f9:ac:5c:fd:28:7b:73:
f3:59:c8:f2:b6:5d:f9:f0:cd:d1:a3:ca:be:81:b3:
a2:d9:1f:29:b3:b3:b1:3e:b8:86:27:12:fa:ab:5f:
bc:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:58:F3:D9:76:8E:66:AD:3F:54:A8:C6:8C:24:04:08:EF:2F:AC:91
X509v3 Authority Key Identifier:
keyid:44:C0:F2:A2:A5:60:07:E4:C4:5C:CC:71:E7:DA:09:28:61:30:5B:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RMDyoqVgB-TEXMxx59oJKGEwWyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/b8058e-4eba-4cc4-8c1d-9c84f2fdd8f0/1/RMDyoqVgB-TEXMxx59oJKGEwWyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/b8058e-4eba-4cc4-8c1d-9c84f2fdd8f0/1/RMDyoqVgB-TEXMxx59oJKGEwWyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:80:6b:75:c4:5c:d1:2e:e9:f4:37:5c:24:9e:50:12:d6:07:
39:fa:2c:bc:ff:3d:71:0a:94:20:d8:e7:ac:e9:4b:67:c3:b8:
9e:cc:1c:c3:84:05:a2:3c:80:a4:f0:ad:c8:3f:6f:56:fb:a2:
a0:cc:d6:35:c6:f7:7a:06:a2:eb:1c:f7:34:30:f7:e8:b8:d1:
57:dc:84:2a:92:c9:fb:62:64:ae:e7:3a:34:f0:c3:68:b1:63:
f1:2e:ec:d9:22:0f:7f:70:fc:46:1e:05:dd:b3:a5:ea:0b:5d:
07:b8:a9:44:70:04:72:45:c1:71:36:77:2c:79:8c:54:4f:6d:
e8:7e:3c:c6:bb:c9:cd:31:30:5d:fb:13:f2:7c:1e:c6:9b:bb:
3b:39:15:90:48:d3:e9:ba:f2:a1:b9:83:fc:17:24:c9:94:af:
d6:9f:b3:d4:84:18:72:11:49:f8:b6:9c:de:c4:9f:8e:a5:da:
e3:c4:b6:05:c4:75:dc:29:2e:4e:97:90:7b:ad:b1:5d:7d:0b:
6f:10:62:f0:20:fe:7e:72:cd:55:75:69:f3:00:6d:72:51:ef:
64:9b:a7:3e:ae:ea:8c:15:2c:1e:64:93:ac:e7:bf:90:e7:16:
19:b0:cb:a0:19:58:91:51:64:ad:f9:2f:37:11:71:01:27:c9:
ce:21:90:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:42:01 2025 by rpki-client