Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/2de87a-0176-4f19-b0e8-ab5630211f7a/1/rJpRvqG1cP-nLZxS0aUYwkvHjAI.mft
File: rJpRvqG1cP-nLZxS0aUYwkvHjAI.mft (raw, json)
Hash identifier: l6zsSDnhKZBIAhj1bl0+wAmxSnzfMW0N9FgB+Reh7/s=
Subject key identifier: 4D:B3:64:5D:84:F7:61:8A:16:C9:13:7C:50:F7:CB:6E:B3:16:D3:67
Authority key identifier: AC:9A:51:BE:A1:B5:70:FF:A7:2D:9C:52:D1:A5:18:C2:4B:C7:8C:02
Certificate issuer: /CN=ac9a51bea1b570ffa72d9c52d1a518c24bc78c02
Certificate serial: 0194BC72862D78322F0EF8E9282C285E70D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJpRvqG1cP-nLZxS0aUYwkvHjAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/2de87a-0176-4f19-b0e8-ab5630211f7a/1/rJpRvqG1cP-nLZxS0aUYwkvHjAI.mft
Manifest number: 1048
Signing time: Fri 31 Jan 2025 13:00:09 +0000
Manifest this update: Fri 31 Jan 2025 13:00:09 +0000
Manifest next update: Sat 01 Feb 2025 13:00:09 +0000
Files and hashes: 1: rJpRvqG1cP-nLZxS0aUYwkvHjAI.crl (hash: B1/V/N3QeZmaZx64ogPwnGK/6rKOt9s+IDOUK26HlyA=)
2: w5lUFfISkdR1rbXpw9EFPEpBgSE.roa (hash: aLxhVjIpLB1JtYTTNVzOUaAGXHTvMRlaiMUbkJdp7PY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:86:2d:78:32:2f:0e:f8:e9:28:2c:28:5e:70:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac9a51bea1b570ffa72d9c52d1a518c24bc78c02
Validity
Not Before: Jan 31 13:00:09 2025 GMT
Not After : Feb 1 13:00:09 2025 GMT
Subject: CN=4db3645d84f7618a16c9137c50f7cb6eb316d367
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:92:33:41:83:d1:ab:13:8e:4c:9b:1b:4f:2c:
d7:e5:e4:0e:f4:de:33:8a:65:6d:29:2d:79:00:8a:
36:bb:d5:a5:a8:a5:e1:f2:cc:83:cf:9f:5e:ce:b0:
a2:8a:79:8c:bf:f0:1c:3f:1c:54:ef:b5:61:87:bd:
e2:24:4b:ce:0f:5d:e5:96:21:ef:5f:52:78:15:a2:
25:db:96:0c:e1:b2:69:94:ba:c3:20:e3:80:f9:ce:
5f:33:7e:31:3c:fc:b0:9b:65:88:c2:9a:6b:67:34:
d4:31:36:14:70:c4:bc:08:ff:14:cf:56:d7:68:56:
18:d9:89:6b:42:d8:a7:3b:c2:36:b8:bb:bd:b6:76:
85:6a:f1:69:4f:60:a6:03:8f:46:d2:9b:ec:24:b6:
78:48:7a:8f:1a:ae:9c:89:20:c3:be:c3:da:4e:7e:
b5:20:81:4b:31:81:72:fc:e6:a0:18:91:81:23:63:
f4:6a:c0:85:90:3c:b1:f8:cf:e7:da:4c:09:5c:39:
56:30:db:f0:ef:86:69:ce:eb:4b:7b:3a:48:43:8d:
b1:b3:bc:73:1e:14:3f:a7:40:56:03:06:15:f9:e8:
0c:62:2c:7d:88:91:11:e2:59:45:36:07:b9:9b:a7:
08:89:4d:e9:e0:6e:62:e7:13:8b:f0:c4:1a:8f:9e:
60:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:B3:64:5D:84:F7:61:8A:16:C9:13:7C:50:F7:CB:6E:B3:16:D3:67
X509v3 Authority Key Identifier:
keyid:AC:9A:51:BE:A1:B5:70:FF:A7:2D:9C:52:D1:A5:18:C2:4B:C7:8C:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJpRvqG1cP-nLZxS0aUYwkvHjAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/2de87a-0176-4f19-b0e8-ab5630211f7a/1/rJpRvqG1cP-nLZxS0aUYwkvHjAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/2de87a-0176-4f19-b0e8-ab5630211f7a/1/rJpRvqG1cP-nLZxS0aUYwkvHjAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:a1:3c:59:a0:cf:53:70:39:34:03:7d:16:c8:c9:e2:27:88:
57:b6:ca:10:5a:ea:70:c0:b7:42:a2:99:9c:fa:a7:88:a8:bb:
ec:d4:30:a6:66:3e:b0:35:3e:a2:8b:d0:cf:2d:28:d6:20:20:
c1:fa:20:be:22:7b:30:91:fc:25:a9:f5:18:0f:99:3d:6a:5b:
57:7d:85:10:c0:0c:d6:e9:bd:e0:24:33:3a:3c:f8:43:0c:2b:
3a:5f:3e:50:55:d3:0c:69:9f:13:81:70:a0:1d:34:01:0c:c0:
70:3a:bf:7e:e0:09:97:70:a1:16:10:f8:06:f8:95:d7:45:a6:
e1:3c:07:5e:60:37:db:29:4d:ad:f8:fb:a1:26:a8:53:9a:f5:
07:0c:79:68:54:b3:09:d2:88:ce:d7:9e:0b:9b:40:88:ca:76:
8a:ed:96:db:04:f7:76:51:78:8c:3a:bf:ff:12:36:7e:bf:4b:
76:7b:fc:87:89:57:0f:53:34:21:76:9b:e9:99:05:47:4a:aa:
28:46:3e:12:7a:eb:86:9c:2e:a4:51:99:0a:b4:24:12:a8:a5:
9b:a4:e1:e5:0c:a5:ba:4b:1b:a5:d5:2b:0e:e0:bd:76:3d:4c:
14:7d:fd:91:c1:5b:d9:83:d4:2f:91:a5:60:7d:85:05:50:93:
c1:76:12:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:03:48 2025 by rpki-client