Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/f154b2-b124-4532-9707-dbfcd11c3303/1/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.mft
File: R2M0YZsUlF37wGTUrh9Xaw4d7Kc.mft (raw, json)
Hash identifier: xHIIUdhdVb1h+dheX4wql2c3mYV5X1dh3YE2LRkUMxo=
Subject key identifier: 91:62:2E:9F:78:1B:A3:48:39:00:BC:3A:4D:39:D2:F6:4C:DB:53:D6
Authority key identifier: 47:63:34:61:9B:14:94:5D:FB:C0:64:D4:AE:1F:57:6B:0E:1D:EC:A7
Certificate issuer: /CN=476334619b14945dfbc064d4ae1f576b0e1deca7
Certificate serial: 0194BCAA38E3D32014A1626395BCF6EE92BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/f154b2-b124-4532-9707-dbfcd11c3303/1/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.mft
Manifest number: 0C05
Signing time: Fri 31 Jan 2025 14:00:59 +0000
Manifest this update: Fri 31 Jan 2025 14:00:59 +0000
Manifest next update: Sat 01 Feb 2025 14:00:59 +0000
Files and hashes: 1: H-v5pinh1r0DqvUuZ4Dpr-LVv9s.roa (hash: MrFKT5HifVb8WtkT0D1HsRfweQopMnxqy5W6wHomHZU=)
2: R2M0YZsUlF37wGTUrh9Xaw4d7Kc.crl (hash: fIcmzKw4yC4zoJSn4nYA19s0o4/PhvTWEic8m8jLACA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:38:e3:d3:20:14:a1:62:63:95:bc:f6:ee:92:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=476334619b14945dfbc064d4ae1f576b0e1deca7
Validity
Not Before: Jan 31 14:00:59 2025 GMT
Not After : Feb 1 14:00:59 2025 GMT
Subject: CN=91622e9f781ba3483900bc3a4d39d2f64cdb53d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:79:a2:dd:6a:43:cf:30:12:f8:ae:71:2d:40:
d9:3c:e3:a9:25:d9:43:13:90:08:b3:20:ae:6c:38:
c3:26:4a:1e:fc:cb:9a:e1:22:08:88:5d:02:85:4d:
6e:68:ca:dd:1f:d4:9b:6f:3c:92:d1:79:74:2b:82:
59:51:3f:d2:4e:eb:02:e8:8c:42:82:cb:e7:73:dc:
8d:9d:a8:0b:ab:4e:fd:d9:ca:b5:80:bf:94:ad:72:
56:f1:4c:8c:b5:e8:d9:ed:3e:72:2d:57:ad:6e:6b:
fd:18:c3:94:a6:6e:f2:67:76:ea:de:cd:f6:bb:50:
75:1f:1b:b1:3b:2d:8c:b0:ad:82:3c:6b:93:e2:f7:
6a:72:e3:cd:0a:68:67:1c:93:87:fd:f3:a5:72:68:
a7:fd:bb:91:ce:74:c4:c4:5f:6f:b4:83:0b:73:4c:
f2:c3:06:82:be:f7:35:1c:1b:57:16:e2:2a:16:f5:
a3:6c:74:d2:0e:c4:bf:68:79:3a:78:91:39:51:a1:
6b:53:68:6f:99:c3:19:9c:1a:67:1e:73:c9:7a:39:
50:78:b6:2c:71:66:8d:bb:5b:93:d3:ed:6e:44:28:
36:48:de:93:2b:1d:80:99:4c:39:d6:5d:dc:fb:29:
af:6a:a3:86:91:09:b6:91:34:66:8e:0d:37:50:be:
d0:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:62:2E:9F:78:1B:A3:48:39:00:BC:3A:4D:39:D2:F6:4C:DB:53:D6
X509v3 Authority Key Identifier:
keyid:47:63:34:61:9B:14:94:5D:FB:C0:64:D4:AE:1F:57:6B:0E:1D:EC:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/f154b2-b124-4532-9707-dbfcd11c3303/1/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/f154b2-b124-4532-9707-dbfcd11c3303/1/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:a5:1c:f9:a4:ff:2f:93:4b:9b:be:31:81:8f:57:03:5c:f3:
a8:f8:b2:b7:06:23:e5:31:dd:03:31:65:aa:64:f6:b4:fd:94:
b4:19:71:bb:39:ff:f0:0d:c2:c0:d9:79:99:9a:db:93:ae:9b:
a9:26:e9:90:1e:32:94:96:fd:9f:27:6a:b8:e9:ac:cc:89:a6:
c9:01:21:29:c9:85:3f:41:99:89:f7:06:d8:e5:a3:c5:0d:dd:
26:dc:5a:ab:9d:bf:c4:ef:af:f9:2b:a8:f7:03:00:91:e6:1e:
80:b2:2d:66:29:c8:45:16:9f:76:9f:19:2a:86:18:01:eb:a9:
97:53:0d:29:9f:f4:9e:8f:55:b9:f7:fa:87:2f:88:bb:74:2c:
8e:b4:6c:a2:25:c1:67:19:3c:3f:4f:0c:fa:5b:36:8e:65:93:
c1:70:0c:85:24:c0:cf:f8:9c:9b:bb:fc:e4:ef:b7:b7:53:c2:
12:32:26:2d:51:55:8d:d8:df:07:41:c1:7f:73:94:0a:ed:02:
a4:da:98:61:78:a6:1c:d3:bd:69:c8:d4:f3:b8:0d:35:70:8c:
2f:c2:04:11:5d:d6:c6:56:86:4a:11:87:d8:cf:60:d7:8d:62:
32:35:e4:18:69:5d:d0:47:df:9c:33:e4:5f:6d:a5:8c:0a:30:
98:e1:45:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 13:16:32 2025 by rpki-client