Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/b887da-44b9-4be2-866f-d3a85a71b029/1/Rqyv5hND1xDfYM2R3giQH9u6b48.mft
File: Rqyv5hND1xDfYM2R3giQH9u6b48.mft (raw, json)
Hash identifier: 43uuV6WnoXlM41uyR8iYz2W0oEHNPCclewFg7Ec3CC0=
Subject key identifier: 3E:70:5D:5B:FF:76:66:BE:DD:8F:33:D0:45:68:EA:C5:D7:3C:54:EA
Authority key identifier: 46:AC:AF:E6:13:43:D7:10:DF:60:CD:91:DE:08:90:1F:DB:BA:6F:8F
Certificate issuer: /CN=46acafe61343d710df60cd91de08901fdbba6f8f
Certificate serial: 0194BC7280C12A7C878178B6B5172CA96CD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rqyv5hND1xDfYM2R3giQH9u6b48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/b887da-44b9-4be2-866f-d3a85a71b029/1/Rqyv5hND1xDfYM2R3giQH9u6b48.mft
Manifest number: 046A
Signing time: Fri 31 Jan 2025 13:00:08 +0000
Manifest this update: Fri 31 Jan 2025 13:00:08 +0000
Manifest next update: Sat 01 Feb 2025 13:00:08 +0000
Files and hashes: 1: Rqyv5hND1xDfYM2R3giQH9u6b48.crl (hash: MV9fFSzuvrwRjZwrTVFUvLdq7KtTxPbN7/+iad1+5cc=)
2: SL6led1HI-RxeSBiRf_KwOsdWMw.roa (hash: bUSyhumyZsuI3117QZlb6u67xKqgT+wxfjDPtnVzMSM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:80:c1:2a:7c:87:81:78:b6:b5:17:2c:a9:6c:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46acafe61343d710df60cd91de08901fdbba6f8f
Validity
Not Before: Jan 31 13:00:08 2025 GMT
Not After : Feb 1 13:00:08 2025 GMT
Subject: CN=3e705d5bff7666bedd8f33d04568eac5d73c54ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ce:99:03:1a:47:c7:ec:cd:8e:e0:7a:83:4f:
94:d4:f5:9c:aa:a2:13:6a:77:65:bb:a4:4b:df:9a:
26:c2:2b:eb:b5:29:52:b2:03:fa:2c:3f:e1:92:a4:
1c:21:86:9b:5f:55:22:a5:27:4a:3d:e2:e5:ef:08:
a4:54:63:ea:79:33:a0:e0:28:37:3f:38:87:c7:03:
7a:71:70:d7:72:00:f5:6e:d4:6c:50:98:d2:f0:09:
83:4b:1d:9a:f9:13:2c:ac:a1:97:79:65:e4:cd:a9:
a0:c8:52:6d:ff:6f:41:5f:47:34:7e:dc:0a:72:dd:
ea:d1:7c:ce:f9:73:e4:b8:cb:00:ce:16:55:68:d2:
91:ae:7e:d2:8a:27:5f:f2:7d:bb:ea:36:22:63:bc:
b1:23:5e:92:e4:8a:d5:11:e7:13:2a:de:dd:66:a3:
58:c9:fa:ff:31:28:bb:d7:73:75:0d:8c:9d:34:2f:
ab:2c:33:22:c2:ce:ae:b1:78:e1:ba:e8:ee:4a:35:
65:68:e4:5a:07:92:f7:3b:58:41:79:3b:14:71:30:
c4:36:65:6f:03:53:c3:32:b3:64:e3:32:75:4f:c2:
9b:39:cc:5b:d7:e5:78:31:19:80:18:51:ed:49:d7:
e7:6a:d5:7c:84:50:ab:8a:36:05:a7:b3:b7:bd:6a:
bf:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:70:5D:5B:FF:76:66:BE:DD:8F:33:D0:45:68:EA:C5:D7:3C:54:EA
X509v3 Authority Key Identifier:
keyid:46:AC:AF:E6:13:43:D7:10:DF:60:CD:91:DE:08:90:1F:DB:BA:6F:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rqyv5hND1xDfYM2R3giQH9u6b48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b887da-44b9-4be2-866f-d3a85a71b029/1/Rqyv5hND1xDfYM2R3giQH9u6b48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b887da-44b9-4be2-866f-d3a85a71b029/1/Rqyv5hND1xDfYM2R3giQH9u6b48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:57:65:26:fa:99:6b:19:5e:ec:bd:8f:82:ea:51:3c:99:80:
73:de:e0:2b:66:86:fa:50:20:c9:6c:6e:bd:f9:39:59:c0:81:
dd:ca:b3:55:06:91:a9:f9:0b:65:16:81:da:5a:ca:61:00:bc:
9b:fa:a1:08:a8:d1:70:64:43:79:24:72:89:2b:fd:8b:2e:db:
12:22:cc:e1:7a:8b:b7:b4:01:c8:72:4d:1b:d3:6d:a2:c0:0b:
69:2c:9c:e0:32:91:01:e6:c7:48:49:cd:38:44:4a:44:b8:9a:
0f:ae:dc:95:9e:1c:06:7f:a8:96:2c:26:4c:b9:46:f6:8c:a1:
2a:48:f8:56:67:d0:5e:ed:d8:fd:8e:9a:99:10:c2:13:12:46:
c3:ca:44:b3:38:ec:9c:97:b0:0b:9a:fd:54:75:84:d3:e5:b9:
9e:b1:21:67:df:89:44:b9:1d:b2:1a:17:ce:b6:f5:75:07:f3:
35:18:30:18:02:4f:f8:63:25:d2:b5:fa:6c:3d:8b:af:1b:2d:
69:bc:f3:f9:a6:66:2e:f0:e9:a0:e6:26:a9:53:39:9f:85:cf:
ac:c6:a4:4c:d7:4d:22:ad:25:b8:a3:bc:e0:58:17:5a:49:5d:
a7:d9:fd:d5:6a:fa:91:f0:bd:d8:f8:c0:86:96:e7:ea:7f:c4:
82:9f:6a:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:35 2025 by rpki-client