Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/9cb5fb-ab65-4a2b-88dd-2ef7165b21b5/1/m1M3vRp8XunFenOwozxhIZzSqcs.mft
File: m1M3vRp8XunFenOwozxhIZzSqcs.mft (raw, json)
Hash identifier: pnJ0MtwU/ZWyPaAJifJhnNdyuQwpSSBhgPD8jnW8ejs=
Subject key identifier: AC:CF:09:C1:A3:3F:6B:07:58:25:F7:76:C2:B7:43:99:A8:71:C4:3B
Authority key identifier: 9B:53:37:BD:1A:7C:5E:E9:C5:7A:73:B0:A3:3C:61:21:9C:D2:A9:CB
Certificate issuer: /CN=9b5337bd1a7c5ee9c57a73b0a33c61219cd2a9cb
Certificate serial: 0194BBCDB1B03C1E319993B05B5E9F1A957C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m1M3vRp8XunFenOwozxhIZzSqcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/9cb5fb-ab65-4a2b-88dd-2ef7165b21b5/1/m1M3vRp8XunFenOwozxhIZzSqcs.mft
Manifest number: 13BE
Signing time: Fri 31 Jan 2025 10:00:07 +0000
Manifest this update: Fri 31 Jan 2025 10:00:07 +0000
Manifest next update: Sat 01 Feb 2025 10:00:07 +0000
Files and hashes: 1: hH6hMaSyonrhQA9h_vP1HTqln7M.roa (hash: 8QJDFdFinb7s3U9xb08fJBm7sr1In5Pe6TKE9Vk8YEA=)
2: m1M3vRp8XunFenOwozxhIZzSqcs.crl (hash: 4IXPaoDmg6rOoCwu9/1m/fwNHw4vv/ENGnba2Kk22Iw=)
3: xZRwQEVBqhCo3g2OnfWg1phYcj0.roa (hash: Up0oMZDKtVNJTjmYE39xr0VdPFglYOYmh22V1+hmiHs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:b1:b0:3c:1e:31:99:93:b0:5b:5e:9f:1a:95:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b5337bd1a7c5ee9c57a73b0a33c61219cd2a9cb
Validity
Not Before: Jan 31 10:00:07 2025 GMT
Not After : Feb 1 10:00:07 2025 GMT
Subject: CN=accf09c1a33f6b075825f776c2b74399a871c43b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:e4:eb:74:ce:bc:30:65:19:44:29:16:c1:8f:
f1:d4:0b:e0:66:5e:f3:a9:3e:48:07:31:82:9e:da:
11:4b:04:48:ad:4e:71:45:a3:29:bf:5b:e4:33:ff:
dc:9f:2f:c0:3e:cd:8a:d6:4f:e0:e4:2a:73:0b:53:
ef:62:79:aa:69:2d:2d:7b:99:a9:56:14:6a:01:81:
fb:fd:cb:db:64:89:fa:5b:6c:a1:ac:2f:0e:75:7e:
50:bc:b1:90:30:4f:53:3b:5a:ee:ef:3c:91:e9:87:
dc:5e:9a:f6:f0:c9:14:05:12:54:01:95:30:ac:dd:
76:ff:90:3d:27:b3:79:42:0c:c7:3b:a4:36:6c:61:
36:7b:f4:d3:70:ec:3d:dc:58:a5:1a:ef:30:8f:3b:
eb:d6:45:94:db:61:d5:89:f7:c4:1c:e4:b7:de:c2:
8c:d3:81:3d:62:2c:bb:30:30:80:f4:4d:ce:4a:e5:
9e:f0:e3:60:7a:50:e7:78:e7:45:aa:90:3c:90:a9:
62:97:4d:b2:ed:17:33:37:a4:f8:d2:f9:31:cd:cf:
cb:e0:10:2c:e5:34:df:55:90:e8:8a:19:5b:ea:1f:
42:87:d0:01:91:07:6f:a3:99:ba:7a:23:81:63:b3:
e9:2e:b4:68:1b:7d:f7:4e:84:b1:4b:e3:21:8d:09:
05:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:CF:09:C1:A3:3F:6B:07:58:25:F7:76:C2:B7:43:99:A8:71:C4:3B
X509v3 Authority Key Identifier:
keyid:9B:53:37:BD:1A:7C:5E:E9:C5:7A:73:B0:A3:3C:61:21:9C:D2:A9:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m1M3vRp8XunFenOwozxhIZzSqcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/9cb5fb-ab65-4a2b-88dd-2ef7165b21b5/1/m1M3vRp8XunFenOwozxhIZzSqcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/9cb5fb-ab65-4a2b-88dd-2ef7165b21b5/1/m1M3vRp8XunFenOwozxhIZzSqcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:38:43:62:8d:01:05:d3:45:0f:40:57:10:8a:a0:ae:c0:e5:
67:e3:1b:4e:12:96:15:80:3e:b7:57:0f:fd:8d:da:46:ec:bc:
45:f9:26:2b:4a:cb:dc:dd:c1:76:7a:ae:24:d8:bc:37:86:09:
2e:f8:3c:8e:a8:bc:a5:31:e7:51:45:7b:42:2f:fa:92:d1:91:
9d:29:21:c2:19:4b:7b:9e:96:00:1e:48:f5:a9:67:90:82:0c:
3d:21:f3:ac:b4:c4:ed:51:43:cd:2e:94:3d:a5:5d:f1:36:fc:
9f:18:eb:d2:d3:ce:b9:15:41:b9:c5:2f:bf:da:52:a7:dc:e6:
6e:ce:f5:d7:3e:bd:bc:96:cd:5e:37:3a:51:cd:dd:d5:54:5d:
c0:0c:8f:bc:57:e5:66:8c:1e:91:4f:6c:e0:e1:f2:e5:f9:8d:
58:d1:b1:ef:bb:68:43:3e:44:a3:72:65:4f:9b:36:cd:34:d7:
36:18:fd:ed:42:ae:6d:5b:4a:8b:49:7d:62:05:7b:ff:4e:d3:
a7:d5:8a:db:ab:db:87:2d:0b:93:37:7a:6b:16:03:63:73:36:
b5:ab:61:cb:06:b5:54:b6:4e:0e:91:fe:d3:81:a2:78:0a:4d:
51:5b:d5:b5:8e:f0:7d:19:02:f4:18:02:c5:ce:e8:a5:05:9b:
9e:72:35:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:43:19 2025 by rpki-client