Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/ff6ef4-4be4-44be-a225-11c0037aa120/1/RBqV0RqKwO7fhV2wEHuaYo8nprQ.mft
File: RBqV0RqKwO7fhV2wEHuaYo8nprQ.mft (raw, json)
Hash identifier: BLMDj3IVXWqupPQ1lNuJdV2RjJ05Aa2vxSPGEMV1rFw=
Subject key identifier: 39:7A:1B:6D:C0:BE:EF:C5:5B:8E:B9:58:50:67:87:B9:CD:3E:60:77
Authority key identifier: 44:1A:95:D1:1A:8A:C0:EE:DF:85:5D:B0:10:7B:9A:62:8F:27:A6:B4
Certificate issuer: /CN=441a95d11a8ac0eedf855db0107b9a628f27a6b4
Certificate serial: 018F28A8E04A1D02AAD96D9B9FC4420D9524
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RBqV0RqKwO7fhV2wEHuaYo8nprQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/ff6ef4-4be4-44be-a225-11c0037aa120/1/RBqV0RqKwO7fhV2wEHuaYo8nprQ.mft
Manifest number: 0A0B
Signing time: Mon 29 Apr 2024 07:01:47 +0000
Manifest this update: Mon 29 Apr 2024 07:01:47 +0000
Manifest next update: Tue 30 Apr 2024 07:01:47 +0000
Files and hashes: 1: Mgg7-1m5HV2TZsjWQ34E8pjvwbM.roa (hash: qhsvi6zlyV+vFKSIW+7RfIDlj6TUHP4kyXpyleR4068=)
2: RBqV0RqKwO7fhV2wEHuaYo8nprQ.crl (hash: priMzI7hxqmUUrWU7qzm36SlHSnllN1zxG8On1hK/8c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:28:a8:e0:4a:1d:02:aa:d9:6d:9b:9f:c4:42:0d:95:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=441a95d11a8ac0eedf855db0107b9a628f27a6b4
Validity
Not Before: Apr 29 07:01:47 2024 GMT
Not After : Apr 30 07:01:47 2024 GMT
Subject: CN=397a1b6dc0beefc55b8eb958506787b9cd3e6077
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d1:f1:aa:a2:2c:24:5f:c6:d9:cb:d3:cd:fa:
01:82:ce:79:37:68:45:3c:bb:8d:c6:0b:79:11:a3:
5e:76:cb:26:bc:07:21:0d:b6:a1:45:0d:7d:a7:e7:
0b:3b:36:60:35:4f:0b:2c:66:b9:fb:d6:50:8d:f0:
2e:c8:ca:78:32:6a:f7:94:f5:62:d8:12:78:f6:a6:
4e:86:36:3a:dd:ec:2e:ec:01:4c:c3:e9:7e:47:49:
d6:4a:bb:20:d9:3e:d3:c7:40:90:b7:12:da:b6:61:
26:0f:e2:55:fe:b8:01:f3:22:9f:3d:a4:94:06:de:
42:35:a5:ca:96:0f:d3:63:c6:b2:6f:d5:65:6d:da:
fd:4c:23:9e:b3:23:8e:12:84:6e:ef:1a:14:61:42:
b7:a6:2b:3b:10:1a:57:ef:e7:59:f9:db:9f:06:f7:
05:9a:69:0d:2e:79:57:e7:fa:5c:92:3a:75:b7:10:
52:6f:f2:95:1b:4e:09:a1:d0:7e:8b:73:1f:be:1c:
23:63:97:3c:d9:37:c5:6e:db:5d:bd:a4:3a:7b:aa:
8b:84:7a:b5:f3:2f:c4:6c:98:c7:80:56:d1:ae:e9:
8f:5c:eb:2a:ea:1a:8a:2c:5e:5e:cb:13:de:ee:ea:
e1:bb:5e:76:ba:28:9d:db:b8:86:9a:32:33:fc:6c:
90:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:7A:1B:6D:C0:BE:EF:C5:5B:8E:B9:58:50:67:87:B9:CD:3E:60:77
X509v3 Authority Key Identifier:
keyid:44:1A:95:D1:1A:8A:C0:EE:DF:85:5D:B0:10:7B:9A:62:8F:27:A6:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RBqV0RqKwO7fhV2wEHuaYo8nprQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/ff6ef4-4be4-44be-a225-11c0037aa120/1/RBqV0RqKwO7fhV2wEHuaYo8nprQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/ff6ef4-4be4-44be-a225-11c0037aa120/1/RBqV0RqKwO7fhV2wEHuaYo8nprQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:b1:21:79:6d:5b:35:81:de:2f:e0:ea:20:95:9c:af:52:c5:
d4:51:ac:9b:0b:ee:91:11:89:c4:14:10:25:1a:5d:d2:d8:16:
13:16:4b:44:32:db:4c:07:45:8a:17:0f:8a:0d:a5:44:2f:62:
65:67:e3:4d:b0:60:66:02:5e:27:99:33:19:91:d1:27:8e:c9:
7a:2d:b3:26:09:85:42:8b:f3:e5:b8:a0:d8:6e:2b:eb:da:db:
9f:59:2a:31:72:53:65:86:20:52:a7:ab:27:58:a6:e9:48:f7:
c9:a0:b9:bb:03:58:4d:a8:fc:fd:19:7b:23:99:61:61:00:a1:
24:da:53:f2:84:23:70:73:8a:f1:b1:6d:aa:ad:75:d1:07:77:
a2:c8:bc:24:47:cd:4d:d8:d0:ed:b8:67:e6:06:d5:50:bd:cc:
23:47:40:43:75:9c:4e:9e:94:76:86:26:d6:d1:e4:08:f4:f3:
aa:28:38:8c:77:10:f1:62:87:8e:d9:51:00:e0:52:c5:a7:f4:
10:71:9b:3a:cf:94:b1:a2:9d:bf:ab:b6:f5:d0:8e:5c:3b:f6:
35:28:7d:36:63:38:b5:65:90:c5:ca:3e:7a:14:25:17:fc:76:
85:4a:0a:86:4f:39:64:84:79:a1:36:4f:2d:a0:6b:1c:39:31:
4f:ac:30:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 01:17:48 2025 by rpki-client