Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/eede38-92a2-462d-b252-c83b5fc26545/1/RDtnudTJnHJeNX2BdPt-AkoVAuI.mft
File: RDtnudTJnHJeNX2BdPt-AkoVAuI.mft (raw, json)
Hash identifier: diLLlNxPs5Nmxt9vG+oYTAOcdct/1LnGC6sqQJbB7pg=
Subject key identifier: 67:18:C9:3D:88:B1:F3:09:33:9C:A6:F8:5D:DD:28:72:19:0A:14:90
Authority key identifier: 44:3B:67:B9:D4:C9:9C:72:5E:35:7D:81:74:FB:7E:02:4A:15:02:E2
Certificate issuer: /CN=443b67b9d4c99c725e357d8174fb7e024a1502e2
Certificate serial: 0194BD852A6C54048DE331C99C6CC711F4F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RDtnudTJnHJeNX2BdPt-AkoVAuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/eede38-92a2-462d-b252-c83b5fc26545/1/RDtnudTJnHJeNX2BdPt-AkoVAuI.mft
Manifest number: 04B6
Signing time: Fri 31 Jan 2025 18:00:08 +0000
Manifest this update: Fri 31 Jan 2025 18:00:08 +0000
Manifest next update: Sat 01 Feb 2025 18:00:08 +0000
Files and hashes: 1: RDtnudTJnHJeNX2BdPt-AkoVAuI.crl (hash: l+5OYYmgPFsR85d+p7z5S5KxVDqYtuNOMfnZyOEQv4Q=)
2: ys9tkINh9OH6_Tn4SwpKbQKk59U.roa (hash: HKpYNrP2A2wFiOa+MzSBN+sOxWHoc3QcnpQXA9RSqDI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:2a:6c:54:04:8d:e3:31:c9:9c:6c:c7:11:f4:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=443b67b9d4c99c725e357d8174fb7e024a1502e2
Validity
Not Before: Jan 31 18:00:08 2025 GMT
Not After : Feb 1 18:00:08 2025 GMT
Subject: CN=6718c93d88b1f309339ca6f85ddd2872190a1490
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:16:35:58:6a:72:3b:6d:2b:46:82:02:45:c4:
19:47:5f:3c:f9:0f:72:92:a7:1d:ca:d8:d4:8a:49:
1e:a4:1e:3f:f7:aa:95:68:7c:2d:63:15:d8:a0:eb:
01:23:c2:4d:71:1f:2e:46:27:59:25:d6:4b:94:76:
30:11:5e:15:fb:5f:7a:53:eb:04:55:a9:b3:96:01:
3d:2c:0d:1e:94:a0:78:49:55:c9:c7:fd:ff:85:d5:
3e:3a:31:de:c9:20:d3:c4:d4:95:76:29:32:a2:15:
87:fa:98:3b:4b:bf:4d:22:0f:f9:a7:7f:2d:ee:d9:
bd:b2:e4:b2:99:51:39:49:4a:48:ff:91:9c:2d:bb:
95:48:49:fa:75:69:bc:cc:94:84:cf:f6:7f:d2:c4:
95:1d:c9:5c:82:7d:14:d9:26:b7:f0:78:c6:0c:40:
a6:5e:99:c7:5b:3b:31:91:d5:19:c6:5a:92:4e:ac:
ed:f4:b7:e1:aa:04:fb:c1:cb:83:16:ba:36:f3:0d:
95:71:b9:ef:95:6e:8f:f4:20:10:b3:ac:91:d1:48:
be:1c:78:a2:65:e6:5c:02:2e:80:d0:77:07:01:ae:
65:9b:05:c8:98:b5:fc:1b:79:25:48:ba:62:b3:fe:
cb:4c:ce:6d:79:ec:69:75:09:b1:5f:8c:88:df:ba:
38:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:18:C9:3D:88:B1:F3:09:33:9C:A6:F8:5D:DD:28:72:19:0A:14:90
X509v3 Authority Key Identifier:
keyid:44:3B:67:B9:D4:C9:9C:72:5E:35:7D:81:74:FB:7E:02:4A:15:02:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RDtnudTJnHJeNX2BdPt-AkoVAuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/eede38-92a2-462d-b252-c83b5fc26545/1/RDtnudTJnHJeNX2BdPt-AkoVAuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/eede38-92a2-462d-b252-c83b5fc26545/1/RDtnudTJnHJeNX2BdPt-AkoVAuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:78:15:0e:7f:b7:45:0e:9b:47:9e:73:5a:48:71:b4:c1:8c:
51:80:f8:56:b1:28:aa:7a:ce:44:ea:57:73:0c:40:a0:64:4f:
35:b2:d3:a0:e3:6d:c4:e1:13:1b:39:36:47:7c:5a:ad:bc:38:
10:59:42:7a:14:b3:9d:15:22:f4:79:5e:58:50:7a:5c:e4:a0:
ff:d3:5c:2c:55:be:1b:bb:59:79:ae:c6:6c:7d:56:7f:7a:58:
a3:36:6e:36:cd:8d:77:da:25:28:73:86:9f:25:9c:96:c7:5e:
45:b3:02:32:ba:b2:9d:32:b2:ea:ff:f6:91:0c:fd:7a:6f:01:
6e:c5:7a:b3:8c:ae:1c:4b:9b:06:60:5d:82:ee:d7:34:ae:b4:
a8:13:31:a4:82:26:26:d5:92:81:b3:17:d1:84:85:32:a5:f0:
56:78:55:74:75:33:de:c9:95:49:f1:21:7f:6f:09:28:95:77:
de:e4:0c:2f:a8:cf:7a:c7:b1:f6:8b:46:0a:9c:ff:64:1d:24:
14:b3:ad:68:1a:73:0a:f0:44:44:4c:bb:da:e0:07:70:d6:89:
ca:9b:0b:92:19:71:1e:ad:b7:d0:4a:9e:33:a9:ba:7d:4a:ec:
c8:4e:14:3c:2c:87:eb:c2:fa:c4:92:e3:4b:79:9d:8f:de:7d:
6f:ca:68:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:10:29 2025 by rpki-client