Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/d1faa9-b5a3-4d49-868a-7c7bf27175c5/1/rJ4u_NwhOsWxsIedkioXi4UPRR8.mft
File: rJ4u_NwhOsWxsIedkioXi4UPRR8.mft (raw, json)
Hash identifier: zeT97pZUIMyKb0wUQCamkN1pRZjV4bI3R74GkbSn8GY=
Subject key identifier: F1:22:64:91:37:98:B7:BD:1B:F2:7D:71:7F:73:42:8A:C3:30:DC:DB
Authority key identifier: AC:9E:2E:FC:DC:21:3A:C5:B1:B0:87:9D:92:2A:17:8B:85:0F:45:1F
Certificate issuer: /CN=ac9e2efcdc213ac5b1b0879d922a178b850f451f
Certificate serial: 0194BCE0B0CECE8BB799DE6954F3936B6629
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJ4u_NwhOsWxsIedkioXi4UPRR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/d1faa9-b5a3-4d49-868a-7c7bf27175c5/1/rJ4u_NwhOsWxsIedkioXi4UPRR8.mft
Manifest number: 11E7
Signing time: Fri 31 Jan 2025 15:00:29 +0000
Manifest this update: Fri 31 Jan 2025 15:00:29 +0000
Manifest next update: Sat 01 Feb 2025 15:00:29 +0000
Files and hashes: 1: A5uN5F8OzeSvbzP9A0H4yXAukVE.roa (hash: HUJyLcOuvz/wo0Li69tRt7jbsZ4Zuulbe84Vvo7HyDI=)
2: RxvxoSUMcjsvgAPic2794mkbMvs.roa (hash: kycmfx+NN1YYypIjT5JTo0s/Jx/l1lb8yLyPLCC/DTI=)
3: rJ4u_NwhOsWxsIedkioXi4UPRR8.crl (hash: dLNrgvdNPK3tFEN3SnRar2WU8E6bJ0q1wfLkoGVboOI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:b0:ce:ce:8b:b7:99:de:69:54:f3:93:6b:66:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac9e2efcdc213ac5b1b0879d922a178b850f451f
Validity
Not Before: Jan 31 15:00:29 2025 GMT
Not After : Feb 1 15:00:29 2025 GMT
Subject: CN=f12264913798b7bd1bf27d717f73428ac330dcdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:5a:ee:45:26:ef:13:72:2f:ef:ee:84:9f:76:
73:f0:ed:b2:1a:2a:ff:66:91:24:26:ec:c9:c2:33:
7a:45:75:8b:13:24:7d:f8:90:ee:69:be:43:81:b7:
4c:8e:3c:ab:73:ae:b8:55:f9:9f:21:ec:ee:41:21:
c5:1a:83:4f:3f:b8:93:e8:f8:47:68:5b:04:0f:a8:
c3:0a:7d:30:c2:19:00:fd:14:44:41:54:93:5d:4b:
7f:e9:be:cb:02:d7:e6:82:a4:fb:50:cb:ce:e1:35:
e3:2d:51:57:3b:20:ac:ea:76:a8:c4:a8:e5:8e:53:
a4:c9:db:ad:49:13:15:b8:4b:b6:fa:c0:3a:94:90:
71:b2:13:b5:c0:b7:53:fb:07:69:d0:98:27:ae:a6:
43:64:8e:9e:b2:2c:fd:e7:27:38:b1:5e:e8:d3:08:
0f:ee:eb:92:7d:a9:2b:54:e3:d7:82:18:7e:54:ba:
a4:8d:c9:96:7f:1d:6a:cd:b3:78:43:86:7a:db:f8:
2b:74:30:f2:04:58:1b:0e:51:c7:5e:b2:d9:48:34:
cd:a3:bf:ed:23:92:6b:0b:de:9b:56:a2:c2:3f:ce:
2c:74:12:62:b1:d9:cf:7c:81:d4:8b:9f:41:ca:e1:
b6:db:36:81:44:c4:7a:f0:c5:1c:23:17:92:63:17:
d3:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:22:64:91:37:98:B7:BD:1B:F2:7D:71:7F:73:42:8A:C3:30:DC:DB
X509v3 Authority Key Identifier:
keyid:AC:9E:2E:FC:DC:21:3A:C5:B1:B0:87:9D:92:2A:17:8B:85:0F:45:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJ4u_NwhOsWxsIedkioXi4UPRR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/d1faa9-b5a3-4d49-868a-7c7bf27175c5/1/rJ4u_NwhOsWxsIedkioXi4UPRR8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/d1faa9-b5a3-4d49-868a-7c7bf27175c5/1/rJ4u_NwhOsWxsIedkioXi4UPRR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:e8:2a:b6:40:19:79:9a:0d:4c:d5:dd:cd:a6:b0:a5:46:00:
db:19:06:13:a3:ae:f2:f7:7c:6e:f5:8c:b8:a5:4d:2b:32:0c:
7b:d6:0b:ba:9c:50:3d:5f:00:61:35:68:ac:24:51:8e:13:28:
2e:b7:b2:ba:e7:0b:70:59:45:3f:01:a6:bc:96:d0:72:c9:b7:
89:8e:60:bc:dd:f2:ed:79:e8:e3:38:72:1e:fa:f8:d4:1c:8d:
84:74:17:6e:c1:56:90:3a:56:15:80:cd:aa:07:01:81:51:f7:
f4:8f:8f:4d:b1:9d:49:d2:ac:f3:ff:49:83:9c:7c:f7:94:c2:
28:5c:6a:bd:a6:f7:95:b4:30:84:05:b3:59:ea:99:9a:05:ca:
fe:98:f0:1b:f7:6d:98:54:6b:5b:3b:0d:4c:62:1d:8d:a8:52:
1c:77:b9:06:46:83:0f:64:d3:68:41:79:8f:ac:90:f9:a4:40:
73:5d:c1:70:0a:73:51:39:1f:19:88:4c:10:ce:03:05:19:5c:
b0:a6:1f:e6:3e:54:28:e2:71:e4:55:e4:40:55:41:63:ec:00:
d7:cf:a6:99:f9:eb:59:ab:58:1d:61:d6:95:aa:31:77:d9:d9:
71:c7:5f:cd:a7:a3:4c:d5:af:81:cc:46:fb:e6:b8:61:ce:a9:
6d:46:54:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:33:12 2025 by rpki-client