Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/cee9db-6401-4497-85d1-917c80b14862/1/_RVIKmVgCaobyAUUg2jR69-PYsg.mft
File: _RVIKmVgCaobyAUUg2jR69-PYsg.mft (raw, json)
Hash identifier: p60FazokV0jmm7fnZDyeoVnw2sj51WUv9WftT7TiJ1s=
Subject key identifier: BF:9A:BF:E6:45:29:5D:51:11:D7:9F:C1:69:31:38:CD:1B:90:DE:93
Authority key identifier: FD:15:48:2A:65:60:09:AA:1B:C8:05:14:83:68:D1:EB:DF:8F:62:C8
Certificate issuer: /CN=fd15482a656009aa1bc805148368d1ebdf8f62c8
Certificate serial: 0194BBCE896056961979FBEBB8FF005C005B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_RVIKmVgCaobyAUUg2jR69-PYsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/cee9db-6401-4497-85d1-917c80b14862/1/_RVIKmVgCaobyAUUg2jR69-PYsg.mft
Manifest number: 0E4B
Signing time: Fri 31 Jan 2025 10:01:02 +0000
Manifest this update: Fri 31 Jan 2025 10:01:02 +0000
Manifest next update: Sat 01 Feb 2025 10:01:02 +0000
Files and hashes: 1: JlnlHDByaNUy0-f6Bk6pC1lv0dA.roa (hash: 3ZWBVVVlMIE03x5aR9QcVmTZqjLrQw0dyYbjGkJTjWk=)
2: _RVIKmVgCaobyAUUg2jR69-PYsg.crl (hash: QUMbFkmiX4lUbcfvifzDaQNx9KHj4hZeMLPvCPHOsvE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:89:60:56:96:19:79:fb:eb:b8:ff:00:5c:00:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd15482a656009aa1bc805148368d1ebdf8f62c8
Validity
Not Before: Jan 31 10:01:02 2025 GMT
Not After : Feb 1 10:01:02 2025 GMT
Subject: CN=bf9abfe645295d5111d79fc1693138cd1b90de93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:61:ff:2b:da:79:97:94:23:a9:6d:fe:91:a8:
49:ef:b1:ed:19:57:9c:90:9f:7d:91:5d:20:fb:5e:
9d:f0:c4:14:30:86:04:7c:b0:cf:2f:ee:b1:3e:3a:
7d:cf:d8:57:34:78:97:df:35:5e:96:92:52:52:02:
23:09:32:11:7d:43:d6:d8:c3:28:ae:f7:fb:fa:72:
bc:25:e5:9f:ed:ec:cb:fc:9a:3c:a9:33:06:15:72:
64:4c:97:80:53:12:ae:f3:ee:f1:ab:ec:4d:c6:26:
c4:5e:1f:2b:1b:ea:78:0b:ae:fb:01:64:1a:ed:1b:
40:22:de:f0:ab:ba:17:7b:a3:ff:7b:12:0c:93:f7:
4e:55:d0:e1:3f:37:ae:de:cd:fa:26:bb:01:0b:f4:
df:a6:64:4d:ea:31:96:f6:07:4d:5f:d2:23:ff:97:
da:d9:cd:27:76:c6:87:af:67:c3:bc:9c:1c:3c:f7:
a4:bb:27:6b:62:48:9f:42:12:8c:c3:e5:d3:21:ff:
0d:44:91:dd:c4:a7:17:ed:0b:99:02:60:ac:24:03:
ac:6a:eb:e2:6d:dc:67:e7:28:2f:e9:b3:d7:57:40:
14:ec:e2:60:39:bf:a2:3f:22:ef:4f:96:cf:d9:c7:
49:bc:c5:d9:b3:4c:3d:00:e2:ff:e8:a7:09:db:7f:
55:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:9A:BF:E6:45:29:5D:51:11:D7:9F:C1:69:31:38:CD:1B:90:DE:93
X509v3 Authority Key Identifier:
keyid:FD:15:48:2A:65:60:09:AA:1B:C8:05:14:83:68:D1:EB:DF:8F:62:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_RVIKmVgCaobyAUUg2jR69-PYsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/cee9db-6401-4497-85d1-917c80b14862/1/_RVIKmVgCaobyAUUg2jR69-PYsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/cee9db-6401-4497-85d1-917c80b14862/1/_RVIKmVgCaobyAUUg2jR69-PYsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:2b:79:5d:4b:31:20:71:72:0f:d6:8d:78:58:78:46:69:43:
23:7c:8a:c6:6a:e7:a9:3e:cd:5f:95:c8:7d:af:6b:82:c7:90:
eb:b4:67:5f:a0:6a:e0:8e:5d:51:18:81:a1:b2:3f:b9:2f:81:
3b:2f:e4:47:84:70:55:49:aa:b3:e5:5e:96:89:97:1d:29:87:
48:3e:c8:92:81:65:66:97:1f:93:3d:7f:18:5b:c7:9c:4b:58:
95:e7:22:54:19:9b:51:30:50:52:a0:ac:46:6b:eb:5f:82:95:
40:4e:9a:14:9d:89:5a:f6:20:89:95:01:d9:47:e0:d8:44:1f:
45:64:f4:75:3b:e2:26:ab:42:ee:e3:54:f8:5d:28:f1:7e:85:
69:f6:3e:3c:19:b2:f5:f6:d6:69:e1:51:d6:dc:be:5f:9e:74:
30:84:ec:2e:35:21:09:9c:1d:d7:0f:11:9f:eb:0d:e7:17:b5:
42:38:05:b7:95:95:81:51:05:d3:d3:08:ec:5e:0c:f0:cd:1e:
11:d4:ff:0b:de:58:3b:6f:16:30:80:07:7f:f6:d3:62:71:de:
02:1a:7e:3c:55:1a:00:8b:26:1b:0e:6e:13:db:e9:3a:45:8e:
d4:a6:c0:e0:f3:cf:1c:e2:82:2e:34:af:e6:ae:29:bb:35:62:
3d:46:dc:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:50:08 2025 by rpki-client