Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/2d1c55-425b-4cb8-8172-b43541272abe/1/Rii7zW7stRjIvolEZSwD7t7A0f4.mft
File: Rii7zW7stRjIvolEZSwD7t7A0f4.mft (raw, json)
Hash identifier: 0/b4zHy0XPmtzCr1C3mTZWqAUy+8FA/2pyq1Y7MCe64=
Subject key identifier: 6A:7B:32:E4:26:41:DD:F4:CC:65:39:BA:53:2E:39:46:13:CF:2D:95
Authority key identifier: 46:28:BB:CD:6E:EC:B5:18:C8:BE:89:44:65:2C:03:EE:DE:C0:D1:FE
Certificate issuer: /CN=4628bbcd6eecb518c8be8944652c03eedec0d1fe
Certificate serial: 018EF48435B26BBF60CB3571633DC9997DFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rii7zW7stRjIvolEZSwD7t7A0f4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/2d1c55-425b-4cb8-8172-b43541272abe/1/Rii7zW7stRjIvolEZSwD7t7A0f4.mft
Manifest number: 0865
Signing time: Fri 19 Apr 2024 04:01:28 +0000
Manifest this update: Fri 19 Apr 2024 04:01:28 +0000
Manifest next update: Sat 20 Apr 2024 04:01:28 +0000
Files and hashes: 1: 2KciRHMBZb7uMEpkZe8Ezzv9_jU.roa (hash: fT7wsKFo86UfF4p+M8FRA++7BAykNuXnvlSM/JjU7p0=)
2: Rii7zW7stRjIvolEZSwD7t7A0f4.crl (hash: IXxkZU2zj8B7k+Vc2YM2yQRm698NlNc+eWVLy16AbyA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:f4:84:35:b2:6b:bf:60:cb:35:71:63:3d:c9:99:7d:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4628bbcd6eecb518c8be8944652c03eedec0d1fe
Validity
Not Before: Apr 19 04:01:28 2024 GMT
Not After : Apr 20 04:01:28 2024 GMT
Subject: CN=6a7b32e42641ddf4cc6539ba532e394613cf2d95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:6e:18:bc:06:30:48:c4:e0:82:0b:1d:f9:a1:
25:cc:de:82:d3:e9:f5:c6:43:58:7e:bb:d7:b5:62:
38:50:77:28:17:6f:83:6f:9b:ed:57:7b:ef:94:3f:
07:dc:56:35:64:e9:e2:9f:31:ee:7c:6d:98:5e:23:
67:ec:44:7f:f6:11:89:37:c6:7b:19:39:8d:16:ae:
d2:2e:56:9b:cc:53:57:f2:7b:7e:e5:c7:ec:83:67:
02:f5:c7:70:9c:f8:00:cb:91:5e:5f:24:f5:dc:48:
93:6a:2c:ef:84:40:a3:86:6d:05:a0:b6:1e:c3:21:
25:15:b8:08:a3:3d:70:d6:25:7d:f3:22:98:b0:3e:
bd:a6:3c:08:db:5f:90:0a:97:d3:9e:06:04:27:68:
24:36:30:6b:20:ec:9c:de:9c:45:78:4e:5a:0d:bc:
2d:0b:bd:94:20:76:97:c7:f9:63:f8:eb:d3:c9:d0:
2e:cb:b1:c0:1e:9d:6b:00:44:7a:f3:a6:0b:80:77:
cc:a6:31:4f:4e:e6:8f:ec:ec:75:5a:69:9d:18:1f:
bc:ee:13:27:8c:90:b6:a3:16:7b:3b:fb:5c:7d:90:
3c:f2:4f:d0:cf:fd:8b:d7:9a:30:43:86:82:12:2f:
fe:67:14:7f:37:c5:93:f2:90:e0:7d:49:6d:59:46:
4e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:7B:32:E4:26:41:DD:F4:CC:65:39:BA:53:2E:39:46:13:CF:2D:95
X509v3 Authority Key Identifier:
keyid:46:28:BB:CD:6E:EC:B5:18:C8:BE:89:44:65:2C:03:EE:DE:C0:D1:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rii7zW7stRjIvolEZSwD7t7A0f4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2d1c55-425b-4cb8-8172-b43541272abe/1/Rii7zW7stRjIvolEZSwD7t7A0f4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2d1c55-425b-4cb8-8172-b43541272abe/1/Rii7zW7stRjIvolEZSwD7t7A0f4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:7b:47:c9:26:67:c0:cc:f2:b0:b7:26:d5:15:eb:75:92:9e:
60:d8:53:71:31:01:7c:92:36:de:45:23:6f:60:e9:5f:11:85:
0b:5d:c2:72:01:84:be:a2:c6:ef:65:8a:17:a6:fa:71:17:ab:
45:e9:a0:32:39:40:16:60:10:fe:67:ed:c4:9b:67:60:63:ba:
58:c2:34:67:ad:6a:cb:28:9a:3b:bb:04:a7:dd:2b:35:8f:5c:
7a:96:f5:f4:e3:61:9b:d9:60:81:b6:9c:5e:0e:71:dd:ff:be:
74:8f:ab:ad:2c:a6:53:26:26:bb:42:77:bc:5d:02:bc:e5:7f:
39:af:db:83:d8:cd:16:12:fa:c0:fb:69:21:d3:3b:0f:93:af:
48:7d:c5:9c:d0:ce:4e:f9:f5:c4:5e:76:37:b9:1a:5f:d9:ec:
d1:0e:e8:45:36:c9:de:9a:4b:c5:e3:97:f2:2a:2d:7e:0b:29:
1e:19:31:3c:1e:c3:84:27:77:1f:82:7a:7f:c5:9a:b6:45:6c:
89:bc:ad:bd:97:54:86:1d:f6:41:a4:fe:89:03:a6:a3:d0:76:
2e:04:42:42:45:c2:9d:f1:12:77:af:c0:e1:02:f2:77:fc:bf:
ee:7d:0a:97:fa:84:66:31:ba:37:2c:09:a5:20:f1:77:8f:ef:
12:ca:1d:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:48:02 2025 by rpki-client