Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/5d454b-9d1d-4e7d-ae73-7f5f4d604731/1/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.mft
File: RB1Lkt0VA2TGW30hKZAoZ4sKUpY.mft (raw, json)
Hash identifier: 6bWFRu7HbjsiS1q+MhNqpS1s2hqVR8tgbyTaMXg5RRA=
Subject key identifier: DE:57:CA:32:15:18:62:44:AB:7B:08:FF:10:87:9B:A7:74:A2:93:C2
Authority key identifier: 44:1D:4B:92:DD:15:03:64:C6:5B:7D:21:29:90:28:67:8B:0A:52:96
Certificate issuer: /CN=441d4b92dd150364c65b7d21299028678b0a5296
Certificate serial: 0194BBCE1FF3224B26A6DA5C165AA7B633DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/5d454b-9d1d-4e7d-ae73-7f5f4d604731/1/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 10:00:35 +0000
Manifest this update: Fri 31 Jan 2025 10:00:35 +0000
Manifest next update: Sat 01 Feb 2025 10:00:35 +0000
Files and hashes: 1: RB1Lkt0VA2TGW30hKZAoZ4sKUpY.crl (hash: qVFD+GH5X/TGPbepRoKbx25KOhdbMg0ZvvYeiVCgMiI=)
2: rtM3C_Rb7MChD47Ga1U2cViLrVM.roa (hash: Bbt4WsyZlaNBYxegxcNZsDU9+mHNhqHf+fOapqUBZAw=)
3: t6RmlOpPsLyIhK8CT9RBjCOl2Js.roa (hash: JL/hI2KnUe9pPxlliW1hRB73MnVIQu9cHXbqxjE8Aq0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:1f:f3:22:4b:26:a6:da:5c:16:5a:a7:b6:33:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=441d4b92dd150364c65b7d21299028678b0a5296
Validity
Not Before: Jan 31 10:00:35 2025 GMT
Not After : Feb 1 10:00:35 2025 GMT
Subject: CN=de57ca3215186244ab7b08ff10879ba774a293c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:72:1d:8d:dd:9f:f8:ec:ff:b9:56:88:be:0e:
c0:d8:d3:87:21:dc:0d:4b:1d:60:7e:24:17:ac:18:
16:4a:8e:7b:47:13:4d:f4:b0:ff:78:fe:96:3a:d2:
4d:e7:73:07:44:97:0a:8f:75:18:29:d1:b0:4b:37:
2c:e0:68:46:05:5f:25:79:fb:b2:6d:6a:4e:d2:5a:
f6:e0:68:60:b2:cd:b0:a3:ff:8e:7c:69:91:f7:47:
68:a9:47:19:14:8f:9c:85:ca:56:a3:05:c7:7b:05:
dd:e2:67:51:00:2d:b7:9d:d6:9d:f0:7f:3f:fc:55:
c4:ed:c7:85:88:8a:90:48:53:6b:f3:bc:d7:f8:36:
39:eb:57:fb:52:f5:f1:4c:4f:ce:87:d4:86:f6:2d:
8c:71:bd:03:bf:10:a0:5d:7d:cf:42:89:2d:fb:d9:
ac:6e:0d:fa:9a:d0:d3:95:33:33:fe:eb:de:e4:8b:
19:1b:01:6b:76:c8:80:13:5a:d3:1a:1b:8c:8d:c2:
3e:ae:cf:70:09:5e:83:5f:27:aa:fa:00:41:72:5f:
ff:61:f0:db:df:a0:fc:bb:2e:82:de:f1:b2:c5:ee:
b3:2a:c7:aa:52:9b:f8:a6:12:33:44:91:71:08:83:
dd:9e:14:dc:c9:d7:54:3c:02:7c:1f:ef:ed:ea:4c:
ec:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:57:CA:32:15:18:62:44:AB:7B:08:FF:10:87:9B:A7:74:A2:93:C2
X509v3 Authority Key Identifier:
keyid:44:1D:4B:92:DD:15:03:64:C6:5B:7D:21:29:90:28:67:8B:0A:52:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5d454b-9d1d-4e7d-ae73-7f5f4d604731/1/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5d454b-9d1d-4e7d-ae73-7f5f4d604731/1/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:30:af:ee:0d:84:d1:73:0c:ab:cc:89:f9:98:aa:0e:b7:3e:
28:7a:96:85:54:cf:87:56:2f:71:a4:fb:83:7e:3f:bb:07:d5:
3a:a7:32:00:f5:f8:b2:aa:44:02:b9:c1:7c:0e:a4:79:a4:70:
50:3e:98:71:4a:4c:1e:fa:92:25:60:be:62:44:5c:54:28:44:
18:91:65:76:5d:e8:28:57:47:8d:2a:af:76:47:45:94:2d:a4:
2e:3f:2d:08:95:ea:2d:7a:b3:20:9a:28:89:dd:21:47:6d:fe:
39:e9:a4:a8:82:52:47:43:b3:c4:65:9d:49:38:23:ac:8c:7e:
2b:8a:72:7f:8c:22:44:fa:92:ae:24:ac:7b:4d:79:50:6e:c8:
1e:ff:47:42:a0:d6:05:3b:53:e3:1b:e6:a1:09:33:f4:71:93:
ab:31:0d:23:da:b8:4c:ff:30:29:12:49:b4:24:f9:48:eb:a4:
33:17:5f:65:70:f7:49:47:39:df:f3:c6:c9:a8:5f:6d:2b:3e:
73:4b:7a:f0:f9:00:55:35:dc:a0:7f:57:63:13:75:7f:df:ad:
cb:40:61:5a:61:69:a4:bf:3a:51:60:1f:8d:48:2c:1c:a7:30:
f8:cb:f5:dd:0b:f8:11:c9:fe:a8:c4:32:2a:90:da:84:1c:64:
02:bd:2a:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:06 2025 by rpki-client