Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.mft
File: rKd8cIrwuh-BVJyfhwiVWTkBZ6U.mft (raw, json)
Hash identifier: Z1FjOwr8ByKsuWFWcDUd0qxlafkKALFg6+g1PechalI=
Subject key identifier: D2:98:76:39:3D:5E:85:1E:5C:35:8B:09:2F:9B:21:05:AA:37:9F:68
Authority key identifier: AC:A7:7C:70:8A:F0:BA:1F:81:54:9C:9F:87:08:95:59:39:01:67:A5
Certificate issuer: /CN=aca77c708af0ba1f81549c9f87089559390167a5
Certificate serial: 0194BCE0D340259DBE6B977691EB8AAEF2C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.mft
Manifest number: 1432
Signing time: Fri 31 Jan 2025 15:00:38 +0000
Manifest this update: Fri 31 Jan 2025 15:00:38 +0000
Manifest next update: Sat 01 Feb 2025 15:00:38 +0000
Files and hashes: 1: _Q5q23PPHO-mRvT-qL8ygRyZcq8.roa (hash: MlSwzzd2g428PzEfHlimkQJSWkAp7XxXXCW+AJUIUOw=)
2: jyrC-t0H_GkAg2c88y9tSfnyeDQ.roa (hash: QuK2j2bldMS2fMD4ill15moXvawQIfM3BSjaK9rkpUw=)
3: rKd8cIrwuh-BVJyfhwiVWTkBZ6U.crl (hash: CNVpbK2yBrzaIEKm7uE4qfnKtVF5kmQFqBtPEDAYWE4=)
4: rZAA3Y495kRkRNDpWyGUUlyfTzU.roa (hash: Fgv+FkEtI7c1vlophMoAf5XyRQp0aEoHwM68DDPsUbg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:d3:40:25:9d:be:6b:97:76:91:eb:8a:ae:f2:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca77c708af0ba1f81549c9f87089559390167a5
Validity
Not Before: Jan 31 15:00:38 2025 GMT
Not After : Feb 1 15:00:38 2025 GMT
Subject: CN=d29876393d5e851e5c358b092f9b2105aa379f68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f4:a6:95:d2:d5:c6:25:3c:cb:59:76:a5:3b:
c6:01:93:69:a0:79:42:d4:47:e1:2b:ac:13:41:7b:
74:5a:bf:d5:6a:9d:96:60:8d:0d:50:74:ef:73:60:
25:6f:a9:4f:04:eb:dc:b9:8b:7c:29:a9:e6:bc:f8:
f5:3b:d3:e8:c1:df:a3:1a:f6:2c:02:d3:83:86:c7:
2e:cc:55:ee:90:59:c3:00:93:f7:cc:92:16:ef:57:
e6:b8:45:0f:bc:f5:e4:14:08:3e:f1:17:11:e4:ac:
eb:95:3e:d0:00:af:95:7e:04:9b:5f:94:6f:2f:8e:
03:eb:76:8f:20:ff:46:d2:ab:ca:b8:b0:5e:f0:f5:
75:dd:a1:62:01:3d:16:09:1d:4b:ea:94:8f:15:f4:
4c:06:a5:20:6f:6d:3b:17:8e:99:17:43:6c:19:9c:
a4:fa:a6:2d:c7:97:63:d6:6e:3c:77:51:0c:d1:82:
ba:71:af:0c:7f:8c:99:52:01:ee:55:9f:13:cb:f8:
6d:d0:da:72:69:8d:37:e2:ca:ef:53:ac:97:60:ca:
8a:e4:26:5a:01:21:e2:a2:0d:6e:18:16:1e:b2:ba:
be:ae:b9:4e:33:c5:2c:b1:65:02:d9:43:71:a6:e2:
aa:69:df:4f:7c:a7:7e:03:ba:6a:8d:24:8f:e6:f5:
e1:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:98:76:39:3D:5E:85:1E:5C:35:8B:09:2F:9B:21:05:AA:37:9F:68
X509v3 Authority Key Identifier:
keyid:AC:A7:7C:70:8A:F0:BA:1F:81:54:9C:9F:87:08:95:59:39:01:67:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:c2:6e:3e:fa:bb:ee:98:63:b8:10:1b:94:34:54:7a:e7:f3:
be:7f:5f:4c:de:84:2c:15:3b:da:3e:9d:7c:b7:90:25:a3:9e:
8e:84:50:51:02:55:0f:9c:ea:42:07:49:a7:0a:3c:bb:12:d7:
cc:51:d7:00:aa:5f:fa:48:f9:ad:df:02:3e:43:d9:3c:3b:66:
0d:1e:c4:67:10:aa:6d:96:03:bd:21:12:c8:ae:89:a9:66:c3:
c3:82:87:4f:65:f8:37:ba:f1:bb:74:9f:a3:30:93:de:ef:1e:
b3:4a:fe:df:e8:29:8b:b3:f1:69:4a:63:61:54:64:c4:7b:fc:
c6:1a:ac:5a:73:22:cf:e2:ab:df:cf:f9:94:77:f3:65:07:0d:
58:52:63:32:4b:51:9e:fa:59:d4:e3:5a:81:dd:78:5c:de:5d:
d9:4a:40:41:f5:85:4b:66:c2:20:69:86:91:9f:cb:0a:86:16:
f4:70:d2:c4:61:21:a0:13:2d:3e:64:6e:39:3a:fd:2a:b3:63:
8c:af:b1:0e:73:9a:31:86:e2:20:69:f0:7c:96:3f:5a:9a:0f:
3a:e4:fd:49:19:ef:75:cd:a9:b7:06:59:9e:9a:2f:3f:74:61:
72:1c:17:e7:30:2a:8c:f3:47:76:a6:80:ed:94:b5:65:08:08:
7f:14:9c:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:34:47 2025 by rpki-client