Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/97d97e-6de9-4332-b4df-06e54dd92171/1/rm8YQW19RwqgStALyldoPHidhU0.mft
File: rm8YQW19RwqgStALyldoPHidhU0.mft (raw, json)
Hash identifier: AS1qeBKG/VSoe3zK5S+6IMybdIk2OqzHC9U0+i4Vq1U=
Subject key identifier: 63:14:94:F5:D2:B7:84:E9:47:19:EA:4A:BD:98:EB:E5:3D:5F:B6:FF
Authority key identifier: AE:6F:18:41:6D:7D:47:0A:A0:4A:D0:0B:CA:57:68:3C:78:9D:85:4D
Certificate issuer: /CN=ae6f18416d7d470aa04ad00bca57683c789d854d
Certificate serial: 0194BBCEB2EF109A2885CDAC40F38A28499F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rm8YQW19RwqgStALyldoPHidhU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/97d97e-6de9-4332-b4df-06e54dd92171/1/rm8YQW19RwqgStALyldoPHidhU0.mft
Manifest number: 0B10
Signing time: Fri 31 Jan 2025 10:01:13 +0000
Manifest this update: Fri 31 Jan 2025 10:01:13 +0000
Manifest next update: Sat 01 Feb 2025 10:01:13 +0000
Files and hashes: 1: 1-boXqKY_Hyoe19Z5JIZ3K6AJj94.roa (hash: a5qc0h3BhqmeqSpAZh7GFmd10hjtqvPl4/lqfepgblo=)
2: rm8YQW19RwqgStALyldoPHidhU0.crl (hash: XrfmemqNJPMaVVAum9z3UmwsxwgUrD29xNRhVZc8RV4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:b2:ef:10:9a:28:85:cd:ac:40:f3:8a:28:49:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae6f18416d7d470aa04ad00bca57683c789d854d
Validity
Not Before: Jan 31 10:01:13 2025 GMT
Not After : Feb 1 10:01:13 2025 GMT
Subject: CN=631494f5d2b784e94719ea4abd98ebe53d5fb6ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:04:f0:9c:b2:ba:cd:a2:7a:c0:3b:93:5a:ae:
92:f0:8f:c8:e4:02:b2:a6:39:4e:c3:bb:e4:73:98:
c4:1f:bf:a2:14:9e:d7:9c:7c:cc:3a:4c:a0:b3:67:
15:2e:5b:df:70:6f:b6:a1:51:b7:7a:2f:90:f6:8c:
8b:b2:11:a6:0a:71:ce:c0:3c:9f:9b:8b:d3:fe:30:
94:ee:d1:4f:7d:8c:5d:73:3f:19:de:0b:8e:bb:9d:
92:ce:03:e7:70:35:25:f4:30:43:05:3c:0c:56:78:
6c:cf:ea:74:4f:9f:8a:c9:92:d2:b5:1b:83:2a:bf:
db:b6:90:81:6b:c2:a1:d7:59:70:5e:a8:24:d1:ee:
49:bc:37:f7:c7:1e:49:36:40:f1:9e:ae:0f:99:9f:
40:69:9a:ea:3e:f7:52:e0:b9:53:76:a7:12:5f:e4:
11:62:29:fa:db:21:61:25:47:09:65:8c:25:75:20:
ac:b3:d3:c1:d8:fb:25:5f:a2:1e:e5:be:aa:96:15:
16:9c:aa:4b:d2:98:4e:8f:44:fb:c4:2e:89:b7:5e:
9c:cb:87:88:48:55:c8:2f:72:63:3b:9d:d1:6c:97:
1b:56:c5:2a:f1:78:33:06:7c:f1:9e:df:d2:24:c5:
64:21:bb:79:82:cc:45:ae:4a:49:dc:78:23:0d:97:
9f:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:14:94:F5:D2:B7:84:E9:47:19:EA:4A:BD:98:EB:E5:3D:5F:B6:FF
X509v3 Authority Key Identifier:
keyid:AE:6F:18:41:6D:7D:47:0A:A0:4A:D0:0B:CA:57:68:3C:78:9D:85:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rm8YQW19RwqgStALyldoPHidhU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/97d97e-6de9-4332-b4df-06e54dd92171/1/rm8YQW19RwqgStALyldoPHidhU0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/97d97e-6de9-4332-b4df-06e54dd92171/1/rm8YQW19RwqgStALyldoPHidhU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:f3:91:fe:45:73:ca:40:de:ef:b6:54:31:83:54:1e:d3:8c:
3c:65:bf:c4:cf:8e:91:db:5c:7e:3d:5b:5d:8f:07:96:dd:59:
9a:89:14:ca:61:a1:42:9a:79:b5:91:b8:85:3f:00:a1:c8:1b:
e6:08:1d:9b:b1:39:6f:cd:5f:36:90:27:cb:e2:28:3f:0b:5e:
72:47:88:5f:ee:7c:fb:c6:fe:68:02:44:0b:d8:31:85:e9:15:
48:13:0a:1f:58:a5:88:2c:63:5b:ab:4b:ca:97:f4:ed:cd:5e:
f7:83:01:32:50:7f:6c:d8:93:1f:c9:cf:d6:9b:9f:6b:32:b0:
8b:0a:70:ee:1d:01:ee:96:f7:82:e6:fb:96:4a:20:f9:70:72:
21:c8:6c:af:49:d6:20:b0:c4:17:dc:bb:53:6f:3c:04:3e:a3:
07:c2:7a:3f:03:5d:ac:91:09:0f:32:8e:25:2e:2f:63:af:35:
19:c3:df:a0:00:13:0d:8b:11:3b:d9:d3:90:3f:d0:2c:59:83:
5d:ff:15:5b:d2:59:a2:bc:26:21:8c:c6:d3:49:1a:f7:3b:db:
f6:d7:ae:07:f6:b3:7b:99:ef:f6:49:3a:7c:a1:68:d4:c3:6c:
6e:1a:c5:58:89:f3:c2:d9:c2:29:f4:4f:8d:a1:ff:fc:5b:e2:
18:aa:09:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:36 2025 by rpki-client