Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/be1cc1-8286-44f7-98a2-020fc6813121/1/m3pi514OySux3vHhlV90n_1FUHI.mft
File: m3pi514OySux3vHhlV90n_1FUHI.mft (raw, json)
Hash identifier: +7DXf+uup7pM43PxlxGKmfAb/CJxzQKtHrn6/74oPVc=
Subject key identifier: 13:98:DC:12:EF:E2:AC:A4:CB:1F:B1:34:77:2C:4F:1F:DD:D2:28:45
Authority key identifier: 9B:7A:62:E7:5E:0E:C9:2B:B1:DE:F1:E1:95:5F:74:9F:FD:45:50:72
Certificate issuer: /CN=9b7a62e75e0ec92bb1def1e1955f749ffd455072
Certificate serial: 0194BBCE094D58CC4C776C4792B5A19DB1ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m3pi514OySux3vHhlV90n_1FUHI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/be1cc1-8286-44f7-98a2-020fc6813121/1/m3pi514OySux3vHhlV90n_1FUHI.mft
Manifest number: 0A2B
Signing time: Fri 31 Jan 2025 10:00:29 +0000
Manifest this update: Fri 31 Jan 2025 10:00:29 +0000
Manifest next update: Sat 01 Feb 2025 10:00:29 +0000
Files and hashes: 1: 9Hrj-EA-GkYopqbsPm3T1J9rcdg.roa (hash: DY2LhwUZIsCiZof3w2j02FU4GvRZOJ3xOlslZBpIU3g=)
2: m3pi514OySux3vHhlV90n_1FUHI.crl (hash: EkvapRLB9RRtdQd1AxkROlbO9Y6iaV2LNImh3XCJOUI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:09:4d:58:cc:4c:77:6c:47:92:b5:a1:9d:b1:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b7a62e75e0ec92bb1def1e1955f749ffd455072
Validity
Not Before: Jan 31 10:00:29 2025 GMT
Not After : Feb 1 10:00:29 2025 GMT
Subject: CN=1398dc12efe2aca4cb1fb134772c4f1fddd22845
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:3b:18:47:b9:ba:db:03:98:d4:78:7e:6a:58:
11:0d:a8:bb:af:b8:46:44:93:07:e1:dc:7e:7f:22:
65:24:99:ca:da:a6:66:16:33:db:0c:b4:6b:a8:59:
76:4b:d1:1f:3b:2a:46:ee:23:92:56:c4:b8:b1:b7:
55:db:cf:33:5d:9b:71:6e:b8:bc:6d:bf:e6:74:d2:
9a:89:58:4a:fe:f7:17:25:2d:e8:fb:06:0b:c5:4c:
c0:38:fc:15:a1:00:fa:7e:b4:8a:7f:71:d3:db:72:
71:88:24:85:b9:82:a4:2e:a3:85:7b:05:67:35:0a:
a5:d8:b3:bc:5a:43:9f:64:23:0a:cf:e3:0d:d1:48:
de:8b:f4:95:3d:26:7a:81:78:6e:ba:57:b5:22:6f:
5a:37:48:68:4f:28:f0:ec:63:d0:d4:ee:09:b3:fc:
a1:49:72:87:98:11:cb:39:86:95:8e:88:9f:ca:10:
d9:d3:12:db:cf:8d:a5:73:0d:d7:c3:ba:e1:3c:fe:
79:03:ee:5d:ae:1d:7c:2e:d1:c5:e9:58:0c:47:e2:
79:86:1f:ef:9f:3c:63:87:0a:1f:48:06:c9:c0:0f:
d7:1d:a1:62:c8:87:c9:b9:37:a7:16:92:9a:04:f0:
47:8d:b4:30:2d:b2:41:bc:18:0b:7d:d8:78:65:19:
22:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:98:DC:12:EF:E2:AC:A4:CB:1F:B1:34:77:2C:4F:1F:DD:D2:28:45
X509v3 Authority Key Identifier:
keyid:9B:7A:62:E7:5E:0E:C9:2B:B1:DE:F1:E1:95:5F:74:9F:FD:45:50:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m3pi514OySux3vHhlV90n_1FUHI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/be1cc1-8286-44f7-98a2-020fc6813121/1/m3pi514OySux3vHhlV90n_1FUHI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/be1cc1-8286-44f7-98a2-020fc6813121/1/m3pi514OySux3vHhlV90n_1FUHI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:a8:bf:40:8d:ac:83:e0:e9:c9:6c:96:00:9c:1a:32:55:f6:
31:df:e9:74:8e:4b:b6:90:ed:d1:1b:1a:f4:91:e0:a3:6c:b5:
65:ce:79:69:96:99:00:60:df:81:27:93:4f:05:ae:dc:6a:15:
bc:bd:64:92:ba:02:96:79:23:96:d6:a4:e3:01:02:34:a2:6e:
d8:ca:aa:ee:be:04:11:f7:3b:e7:f7:cf:f5:d0:0f:22:da:d2:
fd:3c:c2:58:7e:2e:a4:5b:7a:fe:3e:2d:5e:d4:52:94:06:da:
f3:ff:65:3a:c4:70:af:a7:b0:4d:f8:c3:5e:fa:22:76:83:a8:
13:1f:94:3f:41:64:e9:2c:18:f4:c2:d8:8c:0a:de:27:f0:6a:
2c:f6:da:2f:d8:a0:29:17:3b:65:d5:33:a7:68:f7:ac:21:bb:
8f:38:9e:3b:51:89:15:26:a0:75:17:36:80:4d:5f:b5:52:05:
6a:3d:81:6d:17:d1:3d:8b:8c:f0:f0:5a:92:e1:81:0a:b1:29:
9c:e2:62:12:34:05:ea:b2:48:92:67:44:ee:18:44:b6:10:ef:
d4:4c:49:b1:d1:83:c6:2e:de:ee:d9:6d:56:7d:66:71:09:c5:
66:aa:62:d4:e3:78:b1:01:96:31:32:cd:f0:94:15:fa:2c:aa:
7d:3e:31:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:53 2025 by rpki-client