Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/6ffb9c-7d44-4cf7-84ed-2f4aa45cb5ec/1/mPOIv6Zlu4Rn_Vzc0sMyfsfyf-w.mft
File: mPOIv6Zlu4Rn_Vzc0sMyfsfyf-w.mft (raw, json)
Hash identifier: 3fwd2WS7nB/yuXlQhhwFWcW8h57TMcDLSQ0ltheJVqU=
Subject key identifier: 23:C5:36:0D:AB:DA:E9:01:E4:D1:6C:0F:9B:3C:8D:9C:14:EC:CB:84
Authority key identifier: 98:F3:88:BF:A6:65:BB:84:67:FD:5C:DC:D2:C3:32:7E:C7:F2:7F:EC
Certificate issuer: /CN=98f388bfa665bb8467fd5cdcd2c3327ec7f27fec
Certificate serial: 0194BC72A5B4582E3C96CD06687F795C1BBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mPOIv6Zlu4Rn_Vzc0sMyfsfyf-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/6ffb9c-7d44-4cf7-84ed-2f4aa45cb5ec/1/mPOIv6Zlu4Rn_Vzc0sMyfsfyf-w.mft
Manifest number: 33
Signing time: Fri 31 Jan 2025 13:00:17 +0000
Manifest this update: Fri 31 Jan 2025 13:00:17 +0000
Manifest next update: Sat 01 Feb 2025 13:00:17 +0000
Files and hashes: 1: B56y44YODLvIaK63HQtFyfRwg6M.roa (hash: gj5T46CEfqmvf3lZZB8Zxjkv61wJPVASA1iw+kPG+SU=)
2: mPOIv6Zlu4Rn_Vzc0sMyfsfyf-w.crl (hash: 01Q7KN9N8QiiKACnU1x2Q61CkmoQ477DkUdM6B2wLSA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:a5:b4:58:2e:3c:96:cd:06:68:7f:79:5c:1b:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98f388bfa665bb8467fd5cdcd2c3327ec7f27fec
Validity
Not Before: Jan 31 13:00:17 2025 GMT
Not After : Feb 1 13:00:17 2025 GMT
Subject: CN=23c5360dabdae901e4d16c0f9b3c8d9c14eccb84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a6:97:19:20:8d:97:6b:32:74:43:ec:19:aa:
c9:ed:d6:bc:8a:2d:16:64:7b:3f:f0:79:43:1e:6e:
a4:b6:c6:6a:1e:1f:3d:14:75:7b:7b:6d:35:be:6d:
c9:00:eb:dc:9a:bd:22:d7:85:7d:cc:05:fe:a8:83:
1f:bc:16:c9:71:ff:5c:f5:e5:a5:5b:b6:94:e0:b3:
4f:5f:26:1e:a3:b4:e1:90:b7:0d:f3:f5:79:7b:9b:
a1:8a:26:29:93:d5:a5:1c:ec:f8:11:21:ff:30:f0:
65:cc:89:82:8d:0b:d7:ac:bd:38:e3:db:b8:a6:3a:
1f:a6:ae:9b:24:1b:a7:9d:88:a9:d0:a4:fd:c4:db:
1b:62:25:62:69:88:6e:d6:05:65:df:8b:96:b0:30:
a9:60:6b:32:81:7f:88:42:ae:c6:c5:96:b1:57:c3:
49:33:12:1a:24:2b:b9:10:8f:c9:8f:57:4c:dc:f8:
ea:ad:92:0a:5d:ec:66:b2:0c:eb:7b:ca:0f:34:c3:
c3:3c:db:d0:9c:01:90:0e:81:34:eb:1c:64:e8:ba:
be:23:31:f8:5d:8a:55:5a:65:cf:ec:87:be:f2:36:
60:09:34:35:fe:4d:a9:ba:f2:39:78:ac:0c:ea:b9:
61:2c:d6:b0:5f:dc:b5:f0:8b:21:5b:61:65:8c:22:
ce:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:C5:36:0D:AB:DA:E9:01:E4:D1:6C:0F:9B:3C:8D:9C:14:EC:CB:84
X509v3 Authority Key Identifier:
keyid:98:F3:88:BF:A6:65:BB:84:67:FD:5C:DC:D2:C3:32:7E:C7:F2:7F:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mPOIv6Zlu4Rn_Vzc0sMyfsfyf-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/6ffb9c-7d44-4cf7-84ed-2f4aa45cb5ec/1/mPOIv6Zlu4Rn_Vzc0sMyfsfyf-w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/6ffb9c-7d44-4cf7-84ed-2f4aa45cb5ec/1/mPOIv6Zlu4Rn_Vzc0sMyfsfyf-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:e0:53:66:8e:9c:59:99:8e:a4:a8:d1:e2:bf:49:87:97:86:
e9:b5:c7:db:1f:68:a6:a3:fe:0a:16:0d:b5:7a:ef:58:8b:65:
9b:23:30:64:fd:11:aa:6e:0f:5a:ba:53:aa:9d:49:2e:1c:1e:
ce:08:c5:17:f4:5c:d9:01:73:8d:4e:ac:00:69:94:db:3a:89:
10:6e:0d:18:a2:dd:ec:d5:c8:69:d0:f9:46:e8:e0:21:78:7a:
cc:8b:38:bf:1f:11:b5:d1:59:c2:24:c3:2e:3d:d8:10:26:a9:
6c:1b:56:48:47:b9:80:fb:5b:bb:1e:a8:80:e2:46:9d:fe:c0:
bc:58:ac:83:26:63:1b:18:f8:d0:d6:23:46:36:57:9d:b7:d5:
15:b5:52:da:43:ed:94:b2:37:a7:a9:66:52:02:2e:8f:ad:9c:
23:19:ba:4f:b9:73:33:70:0d:76:f6:d3:19:f7:9c:3c:23:27:
11:9c:29:f1:c9:68:35:92:a6:56:93:ff:40:c8:f6:8e:55:a4:
fd:1c:ef:95:06:ab:7f:f2:97:2c:6e:b3:b4:78:ca:ab:34:61:
7b:d6:e3:6c:bd:d2:bb:c8:08:68:44:5b:11:a7:46:ad:a8:73:
1c:c3:83:f9:a4:99:df:a3:2f:7a:0f:df:57:a5:f8:be:a6:f5:
3e:a3:ce:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:29 2025 by rpki-client