Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/e2a15c-add0-48d6-b04f-cdfef6d5f9b9/1/RciwwWM2uTM7RE_x4YzHjXanw_Y.mft
File: RciwwWM2uTM7RE_x4YzHjXanw_Y.mft (raw, json)
Hash identifier: cUq7iA1jhzo0rvm5hXnFPOoTL33SD/fk1Nn0tiY8Zio=
Subject key identifier: 2D:FA:8D:4D:A7:5C:14:CC:6C:61:AE:94:82:7E:A8:BD:7A:27:8A:BA
Authority key identifier: 45:C8:B0:C1:63:36:B9:33:3B:44:4F:F1:E1:8C:C7:8D:76:A7:C3:F6
Certificate issuer: /CN=45c8b0c16336b9333b444ff1e18cc78d76a7c3f6
Certificate serial: 0194BC04AC7CE10F0F4AAE701EAA687F17AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RciwwWM2uTM7RE_x4YzHjXanw_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/e2a15c-add0-48d6-b04f-cdfef6d5f9b9/1/RciwwWM2uTM7RE_x4YzHjXanw_Y.mft
Manifest number: 72
Signing time: Fri 31 Jan 2025 11:00:10 +0000
Manifest this update: Fri 31 Jan 2025 11:00:10 +0000
Manifest next update: Sat 01 Feb 2025 11:00:10 +0000
Files and hashes: 1: NP3I33PqiM24AyrvrXcXkrcATEY.roa (hash: suQmPgK0ZMnJeCcPsZiWpQadlCgzQA44K74kBySWlDw=)
2: RciwwWM2uTM7RE_x4YzHjXanw_Y.crl (hash: 6+ZNfnn/+sGhBcFqqt+N5alYc796i0TUmPYsIIW15Mg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:ac:7c:e1:0f:0f:4a:ae:70:1e:aa:68:7f:17:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45c8b0c16336b9333b444ff1e18cc78d76a7c3f6
Validity
Not Before: Jan 31 11:00:10 2025 GMT
Not After : Feb 1 11:00:10 2025 GMT
Subject: CN=2dfa8d4da75c14cc6c61ae94827ea8bd7a278aba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:60:2d:af:20:48:c9:bf:7c:39:c8:d0:07:37:
62:d7:6e:4a:49:8b:03:40:de:49:84:5f:dc:a7:ca:
03:06:76:ea:1b:0e:a6:5b:97:76:81:63:e3:ae:9b:
06:95:71:14:81:22:75:a3:6b:47:8f:f1:87:1e:ee:
af:90:f0:2d:c2:41:53:81:a3:4d:15:26:27:13:4f:
6b:09:08:ec:eb:cc:4f:5a:f4:34:4c:02:f5:bb:07:
ea:e8:3f:2e:e6:a3:9a:34:98:df:1c:e3:fa:3f:00:
d9:91:a5:59:45:bd:7a:f5:1f:2a:53:fe:1b:0f:90:
26:c2:93:5d:8b:22:f2:1a:24:6b:aa:aa:2a:9c:d3:
fa:fa:c2:4f:c9:88:47:dc:85:93:ae:00:81:f6:a5:
6c:56:23:64:64:40:eb:71:bf:b5:64:7c:45:5a:ea:
ac:85:80:53:3a:5e:71:3f:6f:d2:f6:ab:8d:8f:b2:
75:3c:21:73:01:4f:a5:d2:2d:20:99:0e:e3:54:b2:
77:f4:af:f2:c0:62:2e:aa:7f:82:46:ce:1e:a9:1f:
5e:5a:a0:c2:3c:18:25:4b:47:57:3a:4d:30:48:73:
94:48:51:a8:74:c8:de:23:bd:26:5e:2b:c3:22:85:
a2:1c:c6:2e:2f:32:75:35:92:ba:84:b7:77:09:b6:
6c:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:FA:8D:4D:A7:5C:14:CC:6C:61:AE:94:82:7E:A8:BD:7A:27:8A:BA
X509v3 Authority Key Identifier:
keyid:45:C8:B0:C1:63:36:B9:33:3B:44:4F:F1:E1:8C:C7:8D:76:A7:C3:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RciwwWM2uTM7RE_x4YzHjXanw_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e2a15c-add0-48d6-b04f-cdfef6d5f9b9/1/RciwwWM2uTM7RE_x4YzHjXanw_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e2a15c-add0-48d6-b04f-cdfef6d5f9b9/1/RciwwWM2uTM7RE_x4YzHjXanw_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:4e:6b:49:cc:ff:88:9f:8c:e4:fd:52:b9:cb:ab:55:e4:30:
19:e2:30:b7:53:7c:75:de:22:83:66:72:46:3e:fc:84:e3:02:
2a:ea:e3:28:02:1a:eb:2c:4e:11:c4:e4:11:e4:ee:a1:85:d8:
48:d1:7f:18:41:cb:d6:82:6c:0b:9d:da:b1:0a:45:de:4c:ac:
e4:a6:62:fd:19:6b:eb:b9:4d:95:aa:75:a1:40:77:02:03:47:
d9:d8:cb:a1:1c:81:78:cf:4f:93:77:20:09:06:65:42:c9:63:
68:9c:0e:02:1b:57:a5:f6:6a:f3:c8:48:44:8c:f2:c8:38:d2:
8a:fd:b2:b0:b1:fe:53:0f:a7:60:81:e5:6a:c8:a6:15:0d:c5:
64:22:32:24:d8:46:ae:70:b7:f2:a5:77:cb:da:9e:da:93:45:
3e:59:cd:3f:9a:4c:27:13:7f:7f:39:77:24:0b:b1:a8:c1:e0:
10:b8:ea:5f:85:26:4a:58:91:bf:1e:b0:b5:21:6f:2d:c3:05:
bd:f6:28:45:4e:21:c8:e4:5c:36:81:51:8a:6c:13:26:58:9d:
41:f0:98:88:94:81:1c:a9:b8:7c:f7:ec:16:08:f9:ff:96:ea:
63:7d:f9:22:bb:37:bb:9f:86:47:69:56:fc:44:45:0c:5c:9a:
09:52:d5:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:54:07 2025 by rpki-client