Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/04c239-8869-46e2-95b7-93b392525175/1/mRyTTgj1egPvTro2taTaeYolIgc.mft
File: mRyTTgj1egPvTro2taTaeYolIgc.mft (raw, json)
Hash identifier: d5K8LBCH7WhrxA+RaACUacqf76Lggt3TKCb0tU9oThU=
Subject key identifier: 94:0E:B8:E5:72:7D:43:B2:F8:E0:BD:03:68:A7:3B:D3:06:DC:38:7A
Authority key identifier: 99:1C:93:4E:08:F5:7A:03:EF:4E:BA:36:B5:A4:DA:79:8A:25:22:07
Certificate issuer: /CN=991c934e08f57a03ef4eba36b5a4da798a252207
Certificate serial: 0194BC3BC67D589997E30347A93E5EC4077C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mRyTTgj1egPvTro2taTaeYolIgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/04c239-8869-46e2-95b7-93b392525175/1/mRyTTgj1egPvTro2taTaeYolIgc.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 12:00:21 +0000
Manifest this update: Fri 31 Jan 2025 12:00:21 +0000
Manifest next update: Sat 01 Feb 2025 12:00:21 +0000
Files and hashes: 1: db9OeH46tzqgA4Lx9Y7WIwYTuDM.roa (hash: FuLyiACFaT6BITOZPeoXwp9XiYIYBsR3kP7HfHr2tYI=)
2: mRyTTgj1egPvTro2taTaeYolIgc.crl (hash: wQaUVOysEzm25069Z06lU/Qhc3uWsCOVkt6LtZ8QjEo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:c6:7d:58:99:97:e3:03:47:a9:3e:5e:c4:07:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=991c934e08f57a03ef4eba36b5a4da798a252207
Validity
Not Before: Jan 31 12:00:21 2025 GMT
Not After : Feb 1 12:00:21 2025 GMT
Subject: CN=940eb8e5727d43b2f8e0bd0368a73bd306dc387a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c6:8a:53:2c:0b:ff:d4:7f:1e:cd:93:9d:a9:
e5:f1:3d:62:93:fb:98:90:ca:dd:4f:cc:fb:47:96:
25:75:12:63:ee:3c:ab:5e:f0:01:07:76:b3:61:fe:
1a:3a:f0:1f:9d:1d:1c:5c:69:d0:77:8a:6a:41:1b:
e9:36:c9:de:5b:29:bf:4d:f9:a8:91:d9:89:27:e5:
f0:66:24:c9:22:66:08:d4:5a:e7:6f:01:5e:31:ab:
fd:22:64:9e:c7:36:bb:5c:43:a6:29:32:d0:69:4a:
8e:64:3f:dd:dc:96:0b:2b:5c:23:31:8f:ca:5a:2d:
51:6f:f6:10:94:75:3f:85:58:3e:5e:88:25:53:64:
15:43:ba:68:34:0e:0f:37:b2:db:d1:06:d8:4c:5d:
47:f1:dd:99:b8:1c:84:9c:5e:41:06:5b:60:0d:e1:
95:56:69:bc:0e:b0:0b:ae:6e:bd:f8:8a:23:3a:d5:
e2:3f:9c:13:bb:99:d7:2d:32:20:2e:53:53:1b:36:
36:9f:6d:90:cb:4f:fb:2c:b1:2e:f7:1f:a3:0a:61:
a7:b9:bd:7e:c9:f8:02:21:bd:c0:b1:fd:e2:76:54:
cb:79:e8:7a:7c:9b:d2:d3:35:3d:af:44:fe:f3:99:
c8:8b:88:bc:39:e6:34:9c:1c:ad:0f:e4:02:2f:85:
bf:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:0E:B8:E5:72:7D:43:B2:F8:E0:BD:03:68:A7:3B:D3:06:DC:38:7A
X509v3 Authority Key Identifier:
keyid:99:1C:93:4E:08:F5:7A:03:EF:4E:BA:36:B5:A4:DA:79:8A:25:22:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mRyTTgj1egPvTro2taTaeYolIgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/04c239-8869-46e2-95b7-93b392525175/1/mRyTTgj1egPvTro2taTaeYolIgc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/04c239-8869-46e2-95b7-93b392525175/1/mRyTTgj1egPvTro2taTaeYolIgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:09:dd:c7:88:3f:b7:f8:64:a9:bb:0a:3a:7b:c2:05:42:fe:
f0:98:24:c7:bb:55:ad:10:06:41:a4:03:7a:1f:c7:1d:af:db:
68:d2:ad:56:af:89:37:e9:94:b1:fc:30:a5:6e:3d:50:09:d2:
d5:8b:9b:ea:be:db:c3:1c:09:e3:26:e7:d2:e6:3a:12:e6:4e:
e5:91:84:ef:38:29:55:0d:3a:c7:b1:9b:66:16:45:ee:23:f6:
44:8f:87:3f:7d:28:e3:9e:e5:f9:69:f8:06:fb:95:23:68:fe:
9b:be:2e:47:53:c8:6c:22:7c:e0:8b:ae:4e:51:9d:0b:15:4a:
67:d8:84:77:1b:21:b7:2f:50:62:30:7a:c1:87:56:db:d2:4d:
b1:0b:60:40:7d:16:41:7d:bb:a2:f3:0e:50:1e:48:96:6c:b0:
f7:37:b8:bc:b6:81:c2:54:02:0a:1f:ed:95:65:99:59:24:b7:
54:a2:64:58:51:aa:f7:a7:3f:1e:02:32:a5:e5:d0:b0:e9:15:
d4:02:75:4e:41:7c:73:35:38:dc:f0:d6:76:cf:56:0c:1d:41:
e6:2a:81:20:55:92:0f:8d:c6:83:aa:eb:7f:e6:66:15:ac:86:
2a:a4:b9:0c:9b:83:8f:58:e1:27:63:cb:5f:04:64:b4:87:8a:
be:50:0e:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:01:38 2025 by rpki-client