Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/0a4c1e-1fc5-407a-bd08-0717da053585/1/m3kt5w8zuCiCVCvvI7GNqXU4ygQ.mft
File: m3kt5w8zuCiCVCvvI7GNqXU4ygQ.mft (raw, json)
Hash identifier: roEevK94qNDarVVldWoyoawt7WquHFmczknS63+LqSk=
Subject key identifier: B2:06:46:40:97:F1:0A:85:B3:C2:0B:14:96:D8:2E:38:43:0D:01:66
Authority key identifier: 9B:79:2D:E7:0F:33:B8:28:82:54:2B:EF:23:B1:8D:A9:75:38:CA:04
Certificate issuer: /CN=9b792de70f33b82882542bef23b18da97538ca04
Certificate serial: 0194BCE059997D3F08DAE56698648EBA3974
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m3kt5w8zuCiCVCvvI7GNqXU4ygQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/0a4c1e-1fc5-407a-bd08-0717da053585/1/m3kt5w8zuCiCVCvvI7GNqXU4ygQ.mft
Manifest number: 1230
Signing time: Fri 31 Jan 2025 15:00:06 +0000
Manifest this update: Fri 31 Jan 2025 15:00:06 +0000
Manifest next update: Sat 01 Feb 2025 15:00:06 +0000
Files and hashes: 1: dX70ap0ffv2FBe6b9Bt26afmx5k.roa (hash: cA6YfbXERPxQEeXnO3dLN4qw3GbtwfitkG8Nn52ipuk=)
2: m3kt5w8zuCiCVCvvI7GNqXU4ygQ.crl (hash: Nq113TtIHdkWp4ZB3+ot+tmqe7+gaaC3yqFgAZoaK5U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:59:99:7d:3f:08:da:e5:66:98:64:8e:ba:39:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b792de70f33b82882542bef23b18da97538ca04
Validity
Not Before: Jan 31 15:00:06 2025 GMT
Not After : Feb 1 15:00:06 2025 GMT
Subject: CN=b206464097f10a85b3c20b1496d82e38430d0166
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d6:a1:31:16:e3:a8:cf:f7:57:30:9d:77:25:
53:66:e8:9a:9a:de:ad:42:f4:1a:40:8c:1d:e5:28:
5b:8b:42:0a:09:80:ab:74:23:2b:1f:18:5e:d8:d3:
ef:2c:15:b3:e0:77:64:78:11:eb:53:14:42:2c:36:
dd:db:73:7a:1a:1a:71:e1:2b:26:37:b9:f3:34:f9:
23:30:c0:1e:db:92:4a:81:ab:0f:ea:b9:ae:2e:e7:
39:8f:5c:42:9e:21:7b:4e:76:80:d9:fb:dd:54:33:
82:a2:93:2d:fc:3a:88:75:eb:aa:83:c1:a8:71:9e:
b7:a2:cf:dc:66:e3:0f:82:e4:aa:6e:c4:43:99:a3:
bb:ad:21:44:d7:07:3c:5d:11:89:bb:33:94:e7:6a:
97:75:6a:24:af:49:52:c2:46:23:aa:98:c2:5b:44:
f8:b1:89:80:1f:56:06:b2:2a:50:3e:b2:bd:49:e3:
47:af:96:52:fd:8e:c7:4b:83:7e:8b:db:2f:18:3d:
5a:63:d7:e6:da:c1:38:c7:da:0d:a8:98:d8:2d:8b:
8f:09:40:4b:77:72:55:46:61:56:63:6e:a0:4b:c8:
56:50:58:08:78:8f:07:95:48:60:73:0a:d1:70:9d:
7a:3b:dc:f9:03:d3:22:37:fe:4a:63:cb:59:2a:c6:
f0:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:06:46:40:97:F1:0A:85:B3:C2:0B:14:96:D8:2E:38:43:0D:01:66
X509v3 Authority Key Identifier:
keyid:9B:79:2D:E7:0F:33:B8:28:82:54:2B:EF:23:B1:8D:A9:75:38:CA:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m3kt5w8zuCiCVCvvI7GNqXU4ygQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/0a4c1e-1fc5-407a-bd08-0717da053585/1/m3kt5w8zuCiCVCvvI7GNqXU4ygQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/0a4c1e-1fc5-407a-bd08-0717da053585/1/m3kt5w8zuCiCVCvvI7GNqXU4ygQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:7e:b1:21:e2:77:2d:91:6a:3a:26:26:ef:27:5a:2d:5d:97:
75:c5:e9:79:3d:39:b0:af:c5:ec:cc:91:5a:c3:17:e5:72:c8:
43:7e:e0:ee:b9:70:09:d5:fe:c6:4b:bf:ed:11:9e:43:c6:0d:
55:06:88:65:dd:ea:f6:bf:b2:b5:48:30:b7:6f:76:fa:13:9a:
3e:d9:e6:3f:61:c5:d4:22:78:8d:38:0e:8e:c2:6f:c6:ca:b0:
74:91:c4:af:18:25:18:6a:90:00:b8:fd:46:3c:85:45:2f:a7:
82:ac:69:b4:41:6f:88:a7:1c:4b:8b:8b:e6:a8:52:56:b9:68:
e8:82:cd:46:d8:ff:e3:ec:ab:37:2f:8d:38:71:4d:7d:39:cc:
bf:d8:9d:67:96:31:56:87:21:c1:88:a4:b4:d8:75:8b:f8:71:
c0:eb:2a:ef:1b:31:7d:a1:40:82:c9:de:52:11:c3:c3:2b:ed:
5a:96:59:b2:4e:db:3a:ac:94:bc:bd:b7:d5:d7:d8:81:32:b6:
e8:1c:c7:96:01:9d:fc:6f:a1:1c:59:b2:47:46:2d:31:b0:6d:
94:75:3a:44:66:dd:47:28:1a:a2:5e:89:93:50:2e:48:ff:25:
3a:8a:a8:e6:f1:d5:ec:91:3e:32:92:a2:6e:b0:5d:55:0d:ca:
dc:17:73:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:29 2025 by rpki-client