Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/05a903-d9c0-4689-9ac8-c32de90e3fc3/1/RMRFXrsJGC1PvrO0Vg4giYbhriE.mft
File: RMRFXrsJGC1PvrO0Vg4giYbhriE.mft (raw, json)
Hash identifier: R843YVvhITFWl6cQeKqUqgF4vpY2svw0GXAg4ZTqqoQ=
Subject key identifier: 51:68:1B:56:12:03:B3:EA:14:D7:92:AC:2F:60:42:92:EA:83:ED:28
Authority key identifier: 44:C4:45:5E:BB:09:18:2D:4F:BE:B3:B4:56:0E:20:89:86:E1:AE:21
Certificate issuer: /CN=44c4455ebb09182d4fbeb3b4560e208986e1ae21
Certificate serial: 0194BCA9D8792CAF02DF88443F7C3EBBFEA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RMRFXrsJGC1PvrO0Vg4giYbhriE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/05a903-d9c0-4689-9ac8-c32de90e3fc3/1/RMRFXrsJGC1PvrO0Vg4giYbhriE.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 14:00:34 +0000
Manifest this update: Fri 31 Jan 2025 14:00:34 +0000
Manifest next update: Sat 01 Feb 2025 14:00:34 +0000
Files and hashes: 1: RMRFXrsJGC1PvrO0Vg4giYbhriE.crl (hash: Hy4EIdyxwF0eaY54F85gzyxWVictmJx8CJ6bb5uKjtY=)
2: W1HT74Ti-eehsN9aFk8FhX6Amk0.roa (hash: 3zzhU0Zo0DbhPnuXcPDdzKBUW4Glv+sVBLV3Zhd2+lU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:d8:79:2c:af:02:df:88:44:3f:7c:3e:bb:fe:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44c4455ebb09182d4fbeb3b4560e208986e1ae21
Validity
Not Before: Jan 31 14:00:34 2025 GMT
Not After : Feb 1 14:00:34 2025 GMT
Subject: CN=51681b561203b3ea14d792ac2f604292ea83ed28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:3f:24:31:a3:9f:e1:2c:dd:01:a6:ef:1e:39:
a3:6b:70:6a:62:80:4b:67:de:52:ed:04:f6:cd:62:
1e:de:56:aa:62:aa:59:d5:ce:d7:ad:86:91:be:3a:
06:a5:fc:00:83:0b:ae:8f:8f:54:cf:b0:f1:6c:01:
8e:7f:44:eb:01:03:57:78:c4:81:e1:b6:b3:45:22:
ee:1c:34:38:6d:f6:9f:93:d0:9e:d7:14:fa:bb:08:
26:08:f3:f5:7f:86:07:d9:e8:91:71:53:2e:3c:79:
54:04:1b:dc:12:dd:6a:61:19:e7:0a:92:1e:85:ea:
b8:71:47:79:18:f8:07:63:53:83:84:38:d4:b7:b0:
ff:d7:b7:77:20:54:4d:03:8b:3c:30:e9:91:f0:30:
e5:98:75:ac:b1:3f:19:8e:1f:48:b6:c0:40:f6:b0:
f6:de:f9:7d:e4:ec:cb:33:23:80:0f:87:e6:a3:b2:
18:c3:19:6a:16:80:79:aa:58:2a:45:dd:44:04:0c:
c9:e3:e7:b8:81:80:e3:9f:7e:4e:c5:c2:2a:e3:fd:
73:99:f6:25:7c:db:cc:34:61:f8:82:20:b9:d6:15:
5f:0c:e2:16:d5:ba:48:1a:b8:45:a3:f7:96:53:bc:
48:c1:d5:4f:24:e7:10:6c:60:fd:3b:84:d2:04:99:
be:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:68:1B:56:12:03:B3:EA:14:D7:92:AC:2F:60:42:92:EA:83:ED:28
X509v3 Authority Key Identifier:
keyid:44:C4:45:5E:BB:09:18:2D:4F:BE:B3:B4:56:0E:20:89:86:E1:AE:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RMRFXrsJGC1PvrO0Vg4giYbhriE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/05a903-d9c0-4689-9ac8-c32de90e3fc3/1/RMRFXrsJGC1PvrO0Vg4giYbhriE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/05a903-d9c0-4689-9ac8-c32de90e3fc3/1/RMRFXrsJGC1PvrO0Vg4giYbhriE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:49:d2:a8:7e:c2:1b:92:a5:ef:c0:28:ed:86:17:b7:47:1b:
bc:42:48:09:42:20:15:31:7d:a5:fc:12:93:91:f5:af:55:fd:
5b:58:2d:01:04:63:92:6d:a3:b1:6f:ef:d8:81:60:7b:13:30:
ce:1b:04:2d:62:19:ca:2d:fb:8a:9e:ae:b0:82:ed:39:2f:b0:
76:79:d6:39:b3:c4:aa:3a:df:e1:8e:8e:2b:c9:66:8a:7e:58:
2c:4a:5e:8e:06:b5:a0:86:f8:df:46:46:89:b3:dc:7a:89:8e:
9b:ae:81:d3:23:91:ad:93:d6:b5:c0:a3:96:4e:c3:f5:63:aa:
e5:ea:48:ef:9d:71:6d:50:a1:34:9f:f4:a8:01:35:ec:67:d6:
c4:76:1e:cf:b4:43:4a:a6:7c:4b:84:28:65:b7:d7:77:2e:23:
93:ba:50:dc:89:93:1c:08:e2:a8:f5:c1:bb:20:09:8e:7e:83:
82:46:4a:e6:b9:e9:55:2f:52:73:f4:00:af:32:c3:51:b6:82:
c3:19:38:5c:bd:76:55:ec:16:c7:d3:6d:e8:87:e2:c0:98:e0:
5f:2f:65:a1:23:69:36:e7:95:24:97:af:e5:aa:f8:8d:cf:6b:
f8:cd:cd:7d:5e:1d:5a:52:4f:7c:1d:b9:2b:0a:47:14:e9:18:
f5:ac:9b:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:47:27 2025 by rpki-client