Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/6bb471-4a3e-488d-b88c-fe12c75bf4ab/1/rnLkfVZpJJmnJr-ADqg4A2Letr4.mft
File: rnLkfVZpJJmnJr-ADqg4A2Letr4.mft (raw, json)
Hash identifier: P0qUUL1u4hvJVVfNX/4F/jAH/m+tjI4CbcJMmGmMric=
Subject key identifier: 8B:BB:E6:76:7C:34:35:53:86:AE:57:83:63:DE:33:B7:68:50:EC:51
Authority key identifier: AE:72:E4:7D:56:69:24:99:A7:26:BF:80:0E:A8:38:03:62:DE:B6:BE
Certificate issuer: /CN=ae72e47d56692499a726bf800ea8380362deb6be
Certificate serial: 0194BC730DF55BC7CF787B8CDDE3AA2C79CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rnLkfVZpJJmnJr-ADqg4A2Letr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/6bb471-4a3e-488d-b88c-fe12c75bf4ab/1/rnLkfVZpJJmnJr-ADqg4A2Letr4.mft
Manifest number: 1433
Signing time: Fri 31 Jan 2025 13:00:44 +0000
Manifest this update: Fri 31 Jan 2025 13:00:44 +0000
Manifest next update: Sat 01 Feb 2025 13:00:44 +0000
Files and hashes: 1: Z5Q97jg1XfMj96-QjMHrjbS99lQ.roa (hash: J635Kaow5JoE+4yM5t9dlNwrZajE6mv+pjhBj0rKq7U=)
2: b-1rdmKo86yUONL7Dfq2xDDM_2s.roa (hash: w/c18hk0EwYDA8e5KKNs4s/8e74mjbPB/j6X78kDFl0=)
3: rnLkfVZpJJmnJr-ADqg4A2Letr4.crl (hash: 4zXvjNwJxPXnjTXQA6/LKrF0dlKlWzJXquWlxIeqsPw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:0d:f5:5b:c7:cf:78:7b:8c:dd:e3:aa:2c:79:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae72e47d56692499a726bf800ea8380362deb6be
Validity
Not Before: Jan 31 13:00:44 2025 GMT
Not After : Feb 1 13:00:44 2025 GMT
Subject: CN=8bbbe6767c34355386ae578363de33b76850ec51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:6c:41:94:1d:d3:8c:ff:b6:a4:ec:f7:23:39:
39:f4:fa:c6:0d:0d:00:5a:0d:07:78:8f:10:fb:f0:
55:8b:2e:ea:9b:a9:51:e9:c4:d4:ec:11:b5:59:14:
c7:6b:35:a1:bc:3c:79:eb:0d:ed:06:6e:43:fe:29:
d7:6a:0a:f1:35:d7:07:0b:01:1c:dc:6e:04:f9:94:
10:ca:2a:50:05:cc:44:46:ba:e6:8c:b8:d4:60:70:
b0:53:8c:b5:9f:cd:53:a9:51:62:7a:20:53:12:6d:
db:4f:26:17:27:94:5c:81:d8:a5:42:14:a7:b2:fa:
0b:b4:00:b7:7c:d6:2b:00:ab:bc:1c:70:89:6c:d8:
71:50:13:0d:2d:b7:6b:3c:64:f8:1d:0b:fa:c4:ee:
e3:44:5d:5f:c8:f5:5d:48:e5:c0:fe:ff:33:f9:0b:
f4:f3:8b:8e:5f:2f:14:ad:6d:6a:da:88:09:45:f7:
c8:b0:5e:c5:a9:8b:13:40:c6:f2:b3:33:b7:f8:40:
cc:67:f7:96:93:a9:3c:12:e9:54:5b:b0:1b:d0:7b:
58:2a:b8:96:53:92:65:00:1d:3c:a1:ff:ac:60:41:
53:e9:b5:b6:20:af:fa:d4:f5:36:a3:47:3f:83:41:
ee:ce:5a:47:73:1b:f5:01:31:65:22:96:53:b3:55:
81:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:BB:E6:76:7C:34:35:53:86:AE:57:83:63:DE:33:B7:68:50:EC:51
X509v3 Authority Key Identifier:
keyid:AE:72:E4:7D:56:69:24:99:A7:26:BF:80:0E:A8:38:03:62:DE:B6:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rnLkfVZpJJmnJr-ADqg4A2Letr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/6bb471-4a3e-488d-b88c-fe12c75bf4ab/1/rnLkfVZpJJmnJr-ADqg4A2Letr4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/6bb471-4a3e-488d-b88c-fe12c75bf4ab/1/rnLkfVZpJJmnJr-ADqg4A2Letr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:a1:15:e8:37:92:19:d6:be:08:06:ef:70:8e:08:b0:c8:4a:
d7:d3:b8:04:5e:33:77:06:8d:e3:96:9d:bb:b5:c7:ce:a8:46:
2d:18:f4:66:be:6f:5e:01:27:b1:4c:a1:56:e0:0e:fe:77:06:
07:be:83:dd:c1:da:16:0f:4f:9d:20:f4:c1:5f:21:ce:fb:7c:
6f:73:c9:2a:40:79:92:07:b4:d2:c7:2c:85:9d:96:4f:37:ad:
a6:27:f7:c4:26:13:74:d8:ad:15:b2:d4:28:91:6b:a0:0c:37:
97:e6:72:6d:54:81:27:ff:9a:f5:b2:94:a6:7f:a3:84:57:1c:
ed:c3:d2:44:30:b4:54:0c:4b:6b:0f:fc:04:bb:64:3d:2d:2b:
3f:84:5e:17:5f:30:1b:64:c0:38:75:df:21:68:51:3f:2f:74:
47:60:6d:85:bf:8e:63:84:b0:f6:c3:2e:0c:32:c3:ef:f9:09:
d1:38:55:fa:35:c2:df:a0:7e:e5:7d:c0:4e:84:56:c7:f2:f7:
df:ae:77:b8:cf:20:20:5a:f8:e7:f0:c1:ca:84:ac:a3:5c:92:
cf:f9:05:3f:86:79:1f:6a:8f:5c:9b:29:6a:b0:7c:24:8e:81:
cf:a1:b7:89:3c:ec:77:4b:f4:92:e1:0c:21:56:5e:63:cb:c9:
9c:e1:80:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:44:58 2025 by rpki-client