Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/8fd0d6-d340-4d26-b3ce-f172f3f321e2/1/Rnhgs4YTkhwAhdR6NPZqG2S86ws.mft
File: Rnhgs4YTkhwAhdR6NPZqG2S86ws.mft (raw, json)
Hash identifier: z+D+dOxUgoGQ+7tG3x025C4CVNTdLaIas8Mc5YBOLeQ=
Subject key identifier: B7:5D:04:F0:ED:06:10:BD:4F:AF:45:92:DD:72:C0:2B:39:3A:9F:08
Authority key identifier: 46:78:60:B3:86:13:92:1C:00:85:D4:7A:34:F6:6A:1B:64:BC:EB:0B
Certificate issuer: /CN=467860b38613921c0085d47a34f66a1b64bceb0b
Certificate serial: 0191FE23F00B368A65C9E75B3D00098C9721
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rnhgs4YTkhwAhdR6NPZqG2S86ws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/8fd0d6-d340-4d26-b3ce-f172f3f321e2/1/Rnhgs4YTkhwAhdR6NPZqG2S86ws.mft
Manifest number: 01F9
Signing time: Tue 17 Sep 2024 04:00:53 +0000
Manifest this update: Tue 17 Sep 2024 04:00:53 +0000
Manifest next update: Wed 18 Sep 2024 04:00:53 +0000
Files and hashes: 1: Rnhgs4YTkhwAhdR6NPZqG2S86ws.crl (hash: PylCTiPJUHFkA4O82aaTQ2gtDFOVn/aEChoXkD/XH3I=)
2: hy5NU6gZWNvq-WUfP-2n_4gqllA.roa (hash: virlGjDDAuODmYTvRLv5cs2ZKApHFUy2FVay8YCOEec=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:fe:23:f0:0b:36:8a:65:c9:e7:5b:3d:00:09:8c:97:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=467860b38613921c0085d47a34f66a1b64bceb0b
Validity
Not Before: Sep 17 04:00:53 2024 GMT
Not After : Sep 18 04:00:53 2024 GMT
Subject: CN=b75d04f0ed0610bd4faf4592dd72c02b393a9f08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ba:9e:8c:f6:ef:a4:56:fe:f4:89:b0:e6:68:
43:da:85:4b:d6:c1:b0:c2:47:5d:7e:f3:2a:da:2f:
81:76:15:dd:0d:22:f1:ce:8a:d3:c7:89:ca:48:dd:
47:db:10:9b:b3:ee:11:57:60:39:8a:5a:ec:10:7b:
01:5d:e9:f1:2a:93:93:53:be:9f:70:8f:8d:df:66:
61:53:e0:e6:3f:ad:d4:ec:31:76:43:be:70:55:d0:
a8:e7:05:75:07:c0:ad:ab:aa:f9:48:d2:ae:93:79:
ac:c4:9b:ae:15:55:ef:45:13:7a:75:55:6e:b3:6c:
c8:41:4b:e9:37:22:10:86:5f:37:46:2e:73:00:88:
21:96:aa:7a:9c:78:70:a6:bb:ee:71:94:c7:63:50:
6f:2e:9d:c9:0c:1d:4d:86:e1:8a:b0:66:ec:9e:ff:
37:b4:f7:7c:58:aa:d3:46:e2:22:a6:45:db:97:1e:
64:90:50:8b:d7:4d:ef:76:7e:97:18:ba:94:c0:cc:
23:39:c3:af:fb:5b:ae:b6:81:96:00:c1:4b:2b:a1:
2f:83:2c:e7:61:b9:c7:89:7a:a9:fb:bb:ac:f8:2f:
d7:00:56:76:7f:58:e9:7b:33:92:11:30:58:f2:a1:
db:79:b8:f8:32:4e:1b:b4:1b:f5:8e:2b:6c:f0:cd:
fb:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:5D:04:F0:ED:06:10:BD:4F:AF:45:92:DD:72:C0:2B:39:3A:9F:08
X509v3 Authority Key Identifier:
keyid:46:78:60:B3:86:13:92:1C:00:85:D4:7A:34:F6:6A:1B:64:BC:EB:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rnhgs4YTkhwAhdR6NPZqG2S86ws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/8fd0d6-d340-4d26-b3ce-f172f3f321e2/1/Rnhgs4YTkhwAhdR6NPZqG2S86ws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/8fd0d6-d340-4d26-b3ce-f172f3f321e2/1/Rnhgs4YTkhwAhdR6NPZqG2S86ws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:19:b5:01:b1:8b:3d:8d:9c:fe:0b:3c:f9:99:2d:57:75:40:
ba:27:c6:5b:ac:cf:72:91:b5:de:73:13:7b:e0:04:a6:2e:e4:
ae:97:df:96:3e:4f:9d:c7:de:f3:0a:34:4c:d6:6c:7e:fb:5e:
c1:e2:7b:9d:35:ad:7b:e5:43:46:f0:7a:f0:87:af:ae:af:1a:
a0:96:ab:16:89:b9:e0:9b:27:cc:12:20:47:be:f8:58:04:7d:
50:fd:98:46:cb:c0:e5:ec:e7:57:0d:5b:89:8c:3c:79:b5:ae:
59:5d:2a:e0:b5:36:ca:26:62:77:a4:aa:10:62:c9:30:0c:e7:
ba:b0:9a:a4:91:06:02:52:1f:18:05:5d:03:c5:9d:2d:19:4a:
43:a6:1c:b4:7e:b1:32:f0:8a:b0:a4:f6:03:53:d1:3c:86:d5:
f7:ac:ee:58:06:aa:5f:85:e3:9a:c0:bd:15:f9:6b:b6:c5:37:
31:cf:f2:0f:3d:14:80:6b:8c:1d:75:ba:f1:ab:7d:a9:5c:57:
98:27:2d:18:46:d1:b5:e3:63:e5:82:14:ec:5d:04:9a:b5:7a:
36:22:91:12:cb:1d:d7:d9:0a:7e:38:9f:9c:be:97:0c:16:72:
77:ad:3e:05:22:78:a3:49:57:f9:d9:81:1d:12:be:f4:cf:ab:
94:21:39:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:12:54 2025 by rpki-client