Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/812800-9e70-4cd2-90fd-3bcd2399ee64/1/rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.mft
File: rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.mft (raw, json)
Hash identifier: /7mp4QyxmWwJh9vj7Lv4BPtdUBkIz8d3fYVDmtnfN4I=
Subject key identifier: 41:F0:16:91:58:A3:5C:D9:EC:00:E6:CD:B4:26:97:55:0E:04:EB:C4
Authority key identifier: AD:3D:D8:D3:2C:FC:71:7A:6E:69:0E:BE:3E:1D:B4:38:6D:8F:6C:64
Certificate issuer: /CN=ad3dd8d32cfc717a6e690ebe3e1db4386d8f6c64
Certificate serial: 0194BD4EC467404729822CF8F3EECEB284A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/812800-9e70-4cd2-90fd-3bcd2399ee64/1/rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.mft
Manifest number: 0FF0
Signing time: Fri 31 Jan 2025 17:00:43 +0000
Manifest this update: Fri 31 Jan 2025 17:00:43 +0000
Manifest next update: Sat 01 Feb 2025 17:00:43 +0000
Files and hashes: 1: TImGbHFcysH3yKCENp7I2KDKakw.roa (hash: wV738mzWH7BpaMNjeVJLX60iXYrXwr7zU2chvPIlwaE=)
2: rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.crl (hash: xTLaf33jytjuoZ1kQTNYhqGxK+9smAx7+7S+LfpGqWc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:c4:67:40:47:29:82:2c:f8:f3:ee:ce:b2:84:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad3dd8d32cfc717a6e690ebe3e1db4386d8f6c64
Validity
Not Before: Jan 31 17:00:43 2025 GMT
Not After : Feb 1 17:00:43 2025 GMT
Subject: CN=41f0169158a35cd9ec00e6cdb42697550e04ebc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:8b:dc:8d:59:5c:5c:7e:8f:97:74:b8:4e:1c:
e5:83:f5:ba:05:3a:f2:b0:65:89:56:d3:94:ce:22:
0c:fb:13:04:5d:e4:4e:76:39:3e:1d:f4:51:66:fc:
6d:c6:60:0c:c2:0a:bd:83:0f:94:b6:7c:0c:f5:a3:
4a:88:18:d7:48:71:f7:a7:57:78:d0:67:49:aa:d5:
16:ce:2b:87:b5:af:98:8b:5b:0d:0e:0a:c8:68:68:
12:c3:30:aa:95:18:43:b5:49:e8:01:b8:46:37:51:
0b:bb:54:25:b6:47:ca:4a:78:17:b9:b5:66:95:2f:
35:13:74:b1:a1:5e:80:12:ed:ed:17:54:61:b0:0c:
01:bf:52:12:1a:19:98:1c:2b:8d:f4:4c:a7:1d:51:
7f:11:5e:5d:5c:c0:c5:99:77:18:30:d2:a5:fa:bc:
96:2d:85:3b:a1:fa:c1:df:a9:37:66:77:f0:d9:fc:
06:fc:60:7a:b9:00:09:38:f6:2c:64:f2:7d:8b:90:
89:8d:e2:d3:ca:11:1b:7d:8e:62:45:7b:f4:8d:a0:
f0:a8:4c:79:f6:df:db:bf:1c:e8:d9:2d:b5:27:e2:
f4:f7:d8:6e:cd:e4:d3:62:55:04:c8:69:25:17:a7:
4e:53:0c:86:ab:72:da:75:b6:aa:0b:d3:1d:a8:bb:
22:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:F0:16:91:58:A3:5C:D9:EC:00:E6:CD:B4:26:97:55:0E:04:EB:C4
X509v3 Authority Key Identifier:
keyid:AD:3D:D8:D3:2C:FC:71:7A:6E:69:0E:BE:3E:1D:B4:38:6D:8F:6C:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/812800-9e70-4cd2-90fd-3bcd2399ee64/1/rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/812800-9e70-4cd2-90fd-3bcd2399ee64/1/rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:51:b1:90:46:68:a7:3d:3c:25:bb:f6:d2:c1:6a:cc:da:cf:
e8:b0:b8:29:1c:80:98:d8:c1:ab:75:42:72:68:2e:24:00:7e:
6e:27:01:62:b1:09:61:35:97:5b:ea:22:eb:9f:5b:ed:7e:de:
15:95:b5:b2:de:d7:c5:43:9d:4a:69:74:39:3d:00:67:6f:77:
b0:e5:ff:de:bc:13:10:83:f3:60:27:5e:31:5b:a7:6e:eb:54:
e9:9d:8f:27:61:de:7d:95:76:ce:a1:9d:c5:79:36:96:14:dc:
bd:6c:0b:23:71:7d:63:0b:39:65:11:b2:5a:c3:93:66:40:bf:
d7:48:ce:a2:91:a7:20:c1:4c:b4:9c:02:85:4a:8e:b2:58:06:
a1:c1:23:df:16:da:d2:73:28:12:2c:6f:a1:0d:07:d4:b6:40:
ae:90:bb:b3:fa:85:6a:f6:1f:69:14:71:a1:a1:e2:8c:c8:6a:
0b:8e:01:eb:d4:4f:be:76:ef:6e:7c:5f:97:9a:45:94:30:e0:
b2:d7:25:68:35:b9:6c:d2:64:54:b7:e0:0b:d0:bc:ed:5c:d0:
8e:16:96:b4:51:02:ae:d5:d2:3f:9a:ef:f8:79:f7:94:2a:70:
31:e5:7c:a3:55:58:39:d9:9f:75:19:ce:7a:fe:96:f8:ec:00:
19:42:03:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:20:02 2025 by rpki-client