Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/90172a-969b-46da-8088-791a62d2d8ab/1/mZK1NCb7YU2aWm2D9ABWamYMndI.mft
File: mZK1NCb7YU2aWm2D9ABWamYMndI.mft (raw, json)
Hash identifier: cpj7SoIwQi5acimr8AfkYa+qI/QQmaV146ua6oLZOvE=
Subject key identifier: CC:21:96:EF:9C:B0:82:31:DE:BD:12:64:70:60:1A:BB:98:FD:3F:29
Authority key identifier: 99:92:B5:34:26:FB:61:4D:9A:5A:6D:83:F4:00:56:6A:66:0C:9D:D2
Certificate issuer: /CN=9992b53426fb614d9a5a6d83f400566a660c9dd2
Certificate serial: 0194BCE099765660BC1E6DC9F207F165EFE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mZK1NCb7YU2aWm2D9ABWamYMndI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/90172a-969b-46da-8088-791a62d2d8ab/1/mZK1NCb7YU2aWm2D9ABWamYMndI.mft
Manifest number: 0FFE
Signing time: Fri 31 Jan 2025 15:00:23 +0000
Manifest this update: Fri 31 Jan 2025 15:00:23 +0000
Manifest next update: Sat 01 Feb 2025 15:00:23 +0000
Files and hashes: 1: iG2Qj8n6fZw-GirtzGhiiR4VwRI.roa (hash: C/swOHl78EzDeIac5yTERHHT18YviZO0RyNpfkEvBQE=)
2: mZK1NCb7YU2aWm2D9ABWamYMndI.crl (hash: SfY2IbXx+ZJMVHyrVy45KG9Jk2DzaDPIz+2Fem8lUhc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:99:76:56:60:bc:1e:6d:c9:f2:07:f1:65:ef:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9992b53426fb614d9a5a6d83f400566a660c9dd2
Validity
Not Before: Jan 31 15:00:23 2025 GMT
Not After : Feb 1 15:00:23 2025 GMT
Subject: CN=cc2196ef9cb08231debd126470601abb98fd3f29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ff:7c:a2:0f:cd:fd:35:5c:7d:47:e6:5c:91:
ca:97:bc:31:ee:b9:e5:8a:fe:54:87:61:2b:ca:60:
4b:63:b6:78:cc:b8:86:e6:76:af:81:b7:d6:20:d3:
51:fd:b5:cb:91:eb:7f:da:02:a9:69:b4:b7:d2:1e:
12:32:3b:35:7b:19:10:c5:6b:f2:33:3d:8e:76:f7:
c9:53:6d:fe:4d:5a:8c:51:ea:3b:24:b6:f2:96:ba:
f8:2e:a4:14:15:34:76:8e:cf:8f:fe:9e:21:67:57:
fe:54:a0:ac:77:9d:70:b1:35:0e:3d:1c:0b:cf:6d:
6a:37:9c:e4:45:dc:7c:93:b8:82:76:db:5d:17:13:
cd:c4:74:7f:53:04:05:1e:8b:78:4d:0e:53:7c:35:
d5:06:94:96:cd:1a:d0:03:e2:91:71:e0:b9:17:4f:
28:13:be:86:93:2a:a2:4c:60:db:68:0e:c3:82:13:
13:ab:6f:3c:c4:cd:21:70:eb:9c:fb:f0:15:4e:94:
81:32:b0:93:8e:03:da:19:d0:a1:af:55:b1:c0:92:
60:b9:d8:28:f4:04:74:fa:aa:51:dc:e7:7e:97:30:
31:8d:44:0f:65:4a:46:5d:22:9d:5a:b6:2d:a1:e9:
e6:73:54:0f:6f:47:82:99:4f:b7:b0:7e:f8:b4:7f:
b7:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:21:96:EF:9C:B0:82:31:DE:BD:12:64:70:60:1A:BB:98:FD:3F:29
X509v3 Authority Key Identifier:
keyid:99:92:B5:34:26:FB:61:4D:9A:5A:6D:83:F4:00:56:6A:66:0C:9D:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mZK1NCb7YU2aWm2D9ABWamYMndI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/90172a-969b-46da-8088-791a62d2d8ab/1/mZK1NCb7YU2aWm2D9ABWamYMndI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/90172a-969b-46da-8088-791a62d2d8ab/1/mZK1NCb7YU2aWm2D9ABWamYMndI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:cc:b7:53:50:d9:51:3e:31:5b:3a:ab:2a:eb:de:90:b9:99:
35:94:20:bb:f7:fb:0f:85:be:30:34:97:07:fe:dc:88:80:42:
90:a9:5a:82:1d:15:19:0c:be:93:95:05:c8:74:e6:77:3e:d4:
ff:1f:4f:fd:98:44:33:99:24:fc:01:b6:8f:e7:6d:be:05:19:
0c:fe:48:a1:56:a0:ef:ab:1f:2b:21:a4:2b:e9:c3:47:69:d3:
e4:47:92:53:ba:37:5b:87:01:06:1b:f1:7c:90:af:ea:19:83:
0f:6e:19:c1:88:7f:d1:89:83:68:6e:8d:44:f6:31:57:51:8f:
83:f0:62:41:a1:a7:a6:39:6f:7a:5d:e1:e7:4c:47:dd:32:38:
d1:53:c6:90:3b:0e:a4:42:31:0d:76:82:ef:18:ac:89:cf:6b:
4b:29:7f:e0:fb:41:10:97:38:69:7f:4c:f5:4e:61:4b:81:e3:
d5:24:17:fc:38:f3:c8:e6:88:7d:80:1a:8e:e1:10:9d:66:b6:
20:90:70:ec:02:32:2d:84:de:49:6d:1c:e3:13:09:a0:0f:2c:
a6:65:e7:ce:2b:2e:7e:88:ca:4e:8f:73:71:a4:cf:17:00:78:
b8:ce:2d:a1:36:2e:85:f3:01:cc:5e:9c:c7:72:d0:3f:be:56:
5d:bc:c4:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:35:06 2025 by rpki-client