Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/db0519-4e5a-4b75-88fd-bbc239e897eb/1/RIyjlTdZfPrmCuBCHbjgmLTiYTA.mft
File: RIyjlTdZfPrmCuBCHbjgmLTiYTA.mft (raw, json)
Hash identifier: /6Ak9lZouB/yIDpdyV5UmvL+T733WQXpaFgjX5NbqUc=
Subject key identifier: 33:A9:80:0D:4E:7B:1A:DA:94:D8:DB:EC:BF:1A:C5:92:8A:0A:FD:F7
Authority key identifier: 44:8C:A3:95:37:59:7C:FA:E6:0A:E0:42:1D:B8:E0:98:B4:E2:61:30
Certificate issuer: /CN=448ca39537597cfae60ae0421db8e098b4e26130
Certificate serial: 0194BCAA40F1F96EE362BF8D78166F3AB155
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RIyjlTdZfPrmCuBCHbjgmLTiYTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/db0519-4e5a-4b75-88fd-bbc239e897eb/1/RIyjlTdZfPrmCuBCHbjgmLTiYTA.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 14:01:01 +0000
Manifest this update: Fri 31 Jan 2025 14:01:01 +0000
Manifest next update: Sat 01 Feb 2025 14:01:01 +0000
Files and hashes: 1: DVCmwON0mS6l5sSG4weDe20V1zw.roa (hash: jRc8aZ9DxIdAIzUKCrei9MUaFGOvyvUWkRGm1QRrv9c=)
2: RIyjlTdZfPrmCuBCHbjgmLTiYTA.crl (hash: wUYaOHfTAKMustgfmggN2SONuS738Te/NGSItxhncbQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:40:f1:f9:6e:e3:62:bf:8d:78:16:6f:3a:b1:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=448ca39537597cfae60ae0421db8e098b4e26130
Validity
Not Before: Jan 31 14:01:01 2025 GMT
Not After : Feb 1 14:01:01 2025 GMT
Subject: CN=33a9800d4e7b1ada94d8dbecbf1ac5928a0afdf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:40:f8:44:51:0f:ce:3a:e3:ad:25:06:99:aa:
cb:7e:92:8d:ea:8c:91:4d:6b:23:51:28:58:ba:1a:
71:3b:49:aa:7e:96:fb:a2:39:c7:51:19:3c:9e:73:
09:53:1e:33:2b:cb:4e:d8:59:a9:ae:70:a2:cb:b5:
d9:98:18:a6:6e:03:6f:01:75:d1:fa:38:ad:e0:5c:
4e:d1:62:bf:b3:ce:04:fe:a6:8f:0d:f4:f2:83:39:
1a:57:b2:41:5a:c2:99:c9:b6:09:8d:e7:ed:76:c4:
e9:ca:df:30:cd:32:60:82:f5:bf:5b:18:a1:03:c2:
af:3b:d8:01:0e:68:7b:ed:7e:87:14:84:f3:15:fa:
47:9e:c8:4b:ee:d6:d4:d5:72:bf:97:db:a0:30:2d:
63:24:d9:5a:d9:e2:14:9a:41:78:1c:88:d2:83:21:
cd:81:3c:53:94:5d:73:18:97:94:3c:e1:a9:73:65:
d9:a9:d6:9a:12:85:92:9b:c5:12:58:17:4f:dc:bb:
46:8f:62:44:a8:08:38:98:fa:22:34:b1:3d:c0:93:
16:1a:e1:9f:1a:05:47:5d:59:c8:98:d7:53:c5:b0:
b1:f1:9f:60:ae:6b:38:de:91:d8:ed:74:5a:ef:56:
81:38:57:9c:f3:c9:08:aa:ab:88:c3:1d:c8:3b:3a:
21:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:A9:80:0D:4E:7B:1A:DA:94:D8:DB:EC:BF:1A:C5:92:8A:0A:FD:F7
X509v3 Authority Key Identifier:
keyid:44:8C:A3:95:37:59:7C:FA:E6:0A:E0:42:1D:B8:E0:98:B4:E2:61:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RIyjlTdZfPrmCuBCHbjgmLTiYTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/db0519-4e5a-4b75-88fd-bbc239e897eb/1/RIyjlTdZfPrmCuBCHbjgmLTiYTA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/db0519-4e5a-4b75-88fd-bbc239e897eb/1/RIyjlTdZfPrmCuBCHbjgmLTiYTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:7e:c7:12:cc:54:f7:70:79:af:80:99:d9:04:db:90:ec:c5:
6b:33:04:51:91:9a:5e:63:ee:3f:76:b5:ef:09:d5:bb:65:d6:
af:a3:57:d8:26:31:9f:c4:1a:e5:84:5e:cb:1e:70:69:5b:a1:
58:76:50:ef:5e:e7:cd:7a:0a:81:19:bc:89:73:c3:6e:52:20:
de:f9:bc:31:ec:af:cb:0b:2b:f7:30:32:09:66:43:aa:cc:85:
38:84:4f:86:67:8e:e3:2a:0d:36:a1:bb:43:27:b8:eb:24:e9:
55:52:a1:bc:07:66:f0:b8:25:d4:be:b4:9f:45:8f:97:8c:d4:
24:c5:d0:ba:66:77:13:df:a0:ba:f4:24:26:1f:75:48:7d:f9:
a3:c9:f1:62:31:91:00:e6:db:ad:8d:61:6f:a0:8d:1f:34:8a:
4e:34:e4:be:8e:a2:a3:cd:b5:b0:97:8d:b4:03:ff:e6:cf:fb:
b2:7f:2e:88:ae:69:79:f1:8e:43:38:46:81:88:09:0a:48:1c:
38:52:8d:fd:ef:9e:40:bf:8a:9e:44:46:e8:76:97:7a:0a:8a:
f5:4a:fd:34:4a:60:7c:f2:87:85:c9:bb:0d:b7:cc:80:f7:59:
4d:39:7e:97:77:c2:dc:c6:5f:d1:13:f2:03:9a:b9:87:1f:d2:
04:74:8a:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:24:45 2025 by rpki-client