Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/38c2e1-8a3f-40b1-8353-aec96f431018/1/R-Bd8kcXTNNQsa83gzMnx3Arj_8.mft
File: R-Bd8kcXTNNQsa83gzMnx3Arj_8.mft (raw, json)
Hash identifier: sT5otcJuAOr3DH5BrnYDV2NNcdxjGyCCLJyFsCAhw08=
Subject key identifier: C4:77:89:0F:DA:7F:45:01:A0:AB:CF:E7:69:16:3A:69:51:DB:97:D9
Authority key identifier: 47:E0:5D:F2:47:17:4C:D3:50:B1:AF:37:83:33:27:C7:70:2B:8F:FF
Certificate issuer: /CN=47e05df247174cd350b1af37833327c7702b8fff
Certificate serial: 0194BC3BD2E30C8847BF31003B96A1E2EDC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R-Bd8kcXTNNQsa83gzMnx3Arj_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/38c2e1-8a3f-40b1-8353-aec96f431018/1/R-Bd8kcXTNNQsa83gzMnx3Arj_8.mft
Manifest number: 03D6
Signing time: Fri 31 Jan 2025 12:00:24 +0000
Manifest this update: Fri 31 Jan 2025 12:00:24 +0000
Manifest next update: Sat 01 Feb 2025 12:00:24 +0000
Files and hashes: 1: DcGW9RVJN1HDfDOegRPFfnj3g48.roa (hash: rUGaeOJ+LXvEthDAQG+r5QtUQxI1CT1RFQ8J8YnH+rY=)
2: R-Bd8kcXTNNQsa83gzMnx3Arj_8.crl (hash: IOo0aTr+Q2fRygkz92xCE0Ak4rzAnAvEOM6wKgBcS+U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:d2:e3:0c:88:47:bf:31:00:3b:96:a1:e2:ed:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47e05df247174cd350b1af37833327c7702b8fff
Validity
Not Before: Jan 31 12:00:24 2025 GMT
Not After : Feb 1 12:00:24 2025 GMT
Subject: CN=c477890fda7f4501a0abcfe769163a6951db97d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:93:83:2e:e5:64:5d:93:9e:30:b5:9a:7f:2f:
57:53:71:74:d0:7c:1a:e0:b0:5f:23:48:6b:e7:3e:
03:73:33:02:fb:b5:7a:b8:84:a1:22:17:43:22:b4:
31:e3:ef:e6:4e:23:c4:22:38:d7:94:c1:0b:db:a1:
e8:22:04:c5:e6:01:5f:a7:aa:c4:ea:52:07:10:c2:
73:40:60:4a:a1:78:cb:3a:fa:14:53:a4:99:5e:eb:
e1:b3:f4:02:22:68:aa:70:35:1e:5d:b8:17:77:e4:
cf:b8:4f:e5:be:0a:58:9b:05:46:96:99:df:06:83:
4c:18:cd:2e:4b:09:c1:7c:c5:b5:55:4e:ad:35:e9:
31:df:36:c9:bc:c3:5b:55:01:66:53:8f:e3:95:2c:
7c:57:c8:30:72:54:ba:5d:c0:f7:cc:a0:5f:7d:86:
5b:6b:7d:6f:e6:a3:87:3d:9a:31:61:c2:f4:fd:fb:
4f:c7:7e:ce:24:23:61:b3:8e:5e:99:8f:11:83:49:
dd:82:29:e9:36:af:05:9d:4d:b1:75:58:62:b3:ed:
61:8e:a7:a4:11:08:ef:1c:bb:bd:fd:3b:f4:1c:c6:
6e:68:95:77:0a:e0:51:04:b0:94:07:cc:e6:79:f4:
90:a6:3a:07:1e:c6:6f:f5:c8:fe:e0:1a:01:e4:27:
0c:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:77:89:0F:DA:7F:45:01:A0:AB:CF:E7:69:16:3A:69:51:DB:97:D9
X509v3 Authority Key Identifier:
keyid:47:E0:5D:F2:47:17:4C:D3:50:B1:AF:37:83:33:27:C7:70:2B:8F:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R-Bd8kcXTNNQsa83gzMnx3Arj_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/38c2e1-8a3f-40b1-8353-aec96f431018/1/R-Bd8kcXTNNQsa83gzMnx3Arj_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/38c2e1-8a3f-40b1-8353-aec96f431018/1/R-Bd8kcXTNNQsa83gzMnx3Arj_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:8d:62:db:63:63:a1:94:02:70:ce:08:59:ab:b2:24:4c:46:
34:e7:4b:d8:d8:70:41:d8:2f:c3:0f:9e:9b:a7:9b:3a:35:ce:
ad:ed:c7:61:0f:35:78:6b:e4:1b:ec:35:0d:6c:5c:ea:44:a6:
44:46:59:bd:92:cc:45:93:ee:94:20:13:33:ca:ac:06:3c:9d:
37:c2:56:40:18:16:8f:f4:e2:6d:2e:31:3e:e8:33:d4:fc:5c:
1c:fb:ed:87:99:a1:6d:d5:c1:32:93:18:87:8b:25:56:07:b7:
37:97:a9:56:0e:d1:4f:9d:03:cf:ac:d9:e4:9b:c0:71:54:ea:
2c:82:17:b3:45:6f:28:5f:80:1f:0b:c2:41:b7:cc:0e:55:19:
8e:a5:09:bf:1f:32:f7:9a:b3:14:6b:66:78:38:3b:51:ea:06:
3b:f3:30:a3:04:7b:4e:fc:7e:25:c7:96:d4:01:23:41:9e:93:
af:99:c0:75:77:c1:94:77:ad:a4:b7:ac:81:f0:1e:ed:f5:f9:
d6:74:ba:d3:ce:37:c6:85:30:d1:a7:51:8b:f6:44:1f:0d:f8:
26:11:8f:93:75:4e:ee:9e:50:8e:9a:12:80:ed:1b:15:c8:c9:
d6:1c:49:f4:5e:e1:d8:da:44:11:c6:ac:3b:f9:8a:9d:f8:70:
04:e7:fa:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:25:03 2025 by rpki-client