Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/3815e3-d3a8-4b3c-a4b2-cb344f1800ed/1/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.mft
File: 09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.mft (raw, json)
Hash identifier: Jr/itf3xfBIMDeIGWTl4CwZolGUfPNYGiXqKRCO5B70=
Subject key identifier: 42:F1:DD:C6:AB:D3:73:A4:75:5E:7A:18:FA:22:B5:75:3C:14:D2:11
Authority key identifier: D3:D4:E0:DA:68:C1:44:66:89:41:9D:10:37:11:B1:91:DE:D5:67:F4
Certificate issuer: /CN=d3d4e0da68c1446689419d103711b191ded567f4
Certificate serial: 0194BD177C7B8458E0B36673C808BFE2AC64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/3815e3-d3a8-4b3c-a4b2-cb344f1800ed/1/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.mft
Manifest number: 053B
Signing time: Fri 31 Jan 2025 16:00:20 +0000
Manifest this update: Fri 31 Jan 2025 16:00:20 +0000
Manifest next update: Sat 01 Feb 2025 16:00:20 +0000
Files and hashes: 1: 09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.crl (hash: 9jhcJP1l4A4anAz2t5UskV+vARHG+sobBDGLeSIxANs=)
2: K7A7C17ACPryQjif4dPHFWCYnmw.roa (hash: yO751NJRBOSn6gMdo40XzsiJt+C4xy6LseVpnpZi3tM=)
3: nkm_AqdgrcdDszFPZGQsvTeQ99w.roa (hash: tWZj3SfE+CRbF9Ic1OICFS30cFtSOef9JMakRYCQj78=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:7c:7b:84:58:e0:b3:66:73:c8:08:bf:e2:ac:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3d4e0da68c1446689419d103711b191ded567f4
Validity
Not Before: Jan 31 16:00:20 2025 GMT
Not After : Feb 1 16:00:20 2025 GMT
Subject: CN=42f1ddc6abd373a4755e7a18fa22b5753c14d211
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:64:5a:6d:62:be:bd:f6:08:48:00:bd:2a:13:
ed:23:7b:a2:e8:55:61:b2:6a:31:f4:80:cf:a3:8a:
2c:5b:71:99:b3:34:cc:ad:5a:b8:1c:28:27:4a:5f:
ee:fe:9e:c0:78:19:52:47:1c:98:79:27:e7:ac:fe:
9c:43:d0:a1:97:2e:ed:5e:01:bc:d4:b7:74:bf:81:
54:bd:2e:29:47:64:27:52:3d:6a:42:3d:95:62:98:
d9:d8:b5:8e:6a:72:25:78:d6:a1:e2:53:93:27:2c:
52:61:6f:c0:9b:08:99:bb:82:72:fa:34:ef:a3:fe:
36:46:cc:21:f4:a0:2d:ff:02:a6:b2:e0:c5:1d:58:
05:f1:3d:9b:13:2d:06:1f:29:c2:65:ce:02:c0:ee:
f5:44:8d:81:d7:7e:1b:86:bf:c9:d5:2a:5a:a2:5d:
a7:39:74:66:f4:b5:0f:ae:2f:9e:04:74:61:68:49:
ec:f1:b4:78:a6:9e:4f:cb:8e:e8:98:1b:7c:10:23:
86:3e:b3:86:ca:a2:3a:51:98:87:59:c4:a4:2e:1a:
7b:90:79:91:7b:29:23:6a:02:3e:af:53:33:e1:3c:
29:22:d0:de:79:77:36:6f:1a:06:4b:34:90:a0:24:
4d:62:a9:4e:2f:37:df:cc:a3:45:e4:da:18:04:c9:
4d:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:F1:DD:C6:AB:D3:73:A4:75:5E:7A:18:FA:22:B5:75:3C:14:D2:11
X509v3 Authority Key Identifier:
keyid:D3:D4:E0:DA:68:C1:44:66:89:41:9D:10:37:11:B1:91:DE:D5:67:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/3815e3-d3a8-4b3c-a4b2-cb344f1800ed/1/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/3815e3-d3a8-4b3c-a4b2-cb344f1800ed/1/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:8c:2c:eb:dc:74:8c:43:e1:44:76:6e:13:57:cf:46:d0:11:
ac:43:ff:43:38:94:5e:81:d7:00:12:98:27:22:d9:3f:9e:42:
8e:94:01:f7:22:65:04:99:42:2f:ed:5d:a1:43:29:55:94:b4:
66:c2:f3:5e:42:7b:7c:d4:51:bf:7a:c2:b4:bb:99:15:19:da:
57:c5:f5:a6:97:a4:07:5c:83:c5:1d:05:7d:22:0a:d5:9a:60:
32:f9:c9:14:48:b1:83:ec:29:90:90:23:9c:54:d7:6b:c5:cb:
45:e8:1f:50:c8:19:98:98:53:34:bc:aa:91:4a:06:12:d9:41:
ff:7a:20:e0:f7:70:25:9c:d8:88:cf:37:77:5c:f7:1f:0a:e7:
2e:ba:ef:5e:46:6a:dd:47:d2:78:e4:8a:dc:43:ac:17:54:9e:
61:00:c9:76:2d:24:03:7f:09:85:45:e5:a4:63:a6:2d:0e:32:
e3:88:c5:1d:ee:68:10:79:c0:f3:82:fc:96:aa:41:38:ac:f0:
db:0f:82:c6:07:ec:4b:1c:47:25:de:75:ec:dc:5d:ca:9a:0f:
1a:3c:9f:62:84:c5:d2:66:59:53:61:aa:03:cc:1d:52:f2:75:
88:98:42:1e:b9:58:c1:9a:b2:6b:27:cb:2e:6a:62:ec:4d:f4:
b9:6b:45:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:52:06 2025 by rpki-client