Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/86641e-669c-4a8d-ae0b-fe341b3005e3/1/mRQlj7nTZXszdhQr_GPazk-CEcQ.mft
File: mRQlj7nTZXszdhQr_GPazk-CEcQ.mft (raw, json)
Hash identifier: PMtYdy8euFYLXNeYQrrTbpKnS1PVzIt7eK9CXmozYp4=
Subject key identifier: 55:B2:96:79:FD:06:1D:D1:34:A1:4C:BE:C1:31:EE:8B:57:E2:27:9F
Authority key identifier: 99:14:25:8F:B9:D3:65:7B:33:76:14:2B:FC:63:DA:CE:4F:82:11:C4
Certificate issuer: /CN=9914258fb9d3657b3376142bfc63dace4f8211c4
Certificate serial: 0194BD4E35E9D42B9515F0D4FD65E55F3ABF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mRQlj7nTZXszdhQr_GPazk-CEcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/86641e-669c-4a8d-ae0b-fe341b3005e3/1/mRQlj7nTZXszdhQr_GPazk-CEcQ.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 17:00:06 +0000
Manifest this update: Fri 31 Jan 2025 17:00:06 +0000
Manifest next update: Sat 01 Feb 2025 17:00:06 +0000
Files and hashes: 1: 2JXcaA80r7d-EIDaMijpbBPasoc.roa (hash: gf95/nywAYIZdNJbfxynwrtY4coqSX3R7aiF8YJONgo=)
2: mRQlj7nTZXszdhQr_GPazk-CEcQ.crl (hash: nCB/xHGIEQYwNrNYVg/oKVsBIsNHGw+xm+VL4C3cwvs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:35:e9:d4:2b:95:15:f0:d4:fd:65:e5:5f:3a:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9914258fb9d3657b3376142bfc63dace4f8211c4
Validity
Not Before: Jan 31 17:00:06 2025 GMT
Not After : Feb 1 17:00:06 2025 GMT
Subject: CN=55b29679fd061dd134a14cbec131ee8b57e2279f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:9e:48:da:9c:d1:14:7a:32:90:4b:f2:88:d3:
06:d6:0d:50:75:83:ba:53:58:0d:dc:d3:dc:8c:cd:
04:1b:e4:33:b7:aa:35:ed:18:c1:31:7a:c4:38:af:
cf:b8:1b:6d:c8:2b:f3:16:e5:82:00:3c:5d:8a:ee:
21:dd:80:ea:fc:75:69:e1:b0:ec:28:13:12:10:80:
92:fc:d7:d4:c0:ef:a6:a9:fc:f9:a3:4d:39:9d:5a:
dc:7b:07:8a:ab:69:fb:fd:0c:e9:a4:28:74:b6:7e:
51:f5:89:5e:ba:56:d5:05:f4:4e:7d:a8:0d:94:18:
c8:b7:e9:28:84:07:4d:80:dc:80:1c:e6:f8:00:b5:
a9:b4:d2:e4:f7:71:cb:5c:e8:d8:54:7a:cb:12:85:
33:c4:ef:07:ee:70:b9:b3:d8:33:fc:4a:ef:8f:10:
eb:63:fa:27:25:d0:2c:ef:b1:9c:15:f9:83:84:77:
14:da:22:19:99:f3:1e:c5:fc:3c:27:0e:9b:f8:88:
c8:ee:04:1a:5e:8b:ef:b1:5f:34:9d:0f:cd:b9:55:
52:3c:1e:12:d0:b4:70:e4:b0:5e:64:7b:bf:31:32:
e4:cb:06:e1:a5:5d:3c:b3:54:47:13:0e:7f:ac:cd:
0a:80:67:cb:17:a5:3f:51:01:dc:21:81:03:dd:76:
f1:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:B2:96:79:FD:06:1D:D1:34:A1:4C:BE:C1:31:EE:8B:57:E2:27:9F
X509v3 Authority Key Identifier:
keyid:99:14:25:8F:B9:D3:65:7B:33:76:14:2B:FC:63:DA:CE:4F:82:11:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mRQlj7nTZXszdhQr_GPazk-CEcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/86641e-669c-4a8d-ae0b-fe341b3005e3/1/mRQlj7nTZXszdhQr_GPazk-CEcQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/86641e-669c-4a8d-ae0b-fe341b3005e3/1/mRQlj7nTZXszdhQr_GPazk-CEcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:52:d1:eb:62:3a:d8:42:91:e3:36:53:84:b8:e2:1d:cb:fd:
96:0c:5e:b2:14:04:3f:06:6b:b9:7f:c4:a9:cd:20:6a:0b:b6:
9b:09:1c:6b:d8:f1:f4:67:2c:fd:3a:e5:80:f9:95:98:71:d2:
e7:a7:17:35:c6:50:1a:2a:a1:b8:52:43:c8:a7:18:b7:81:f4:
41:1c:c3:2b:c3:30:33:4a:1b:d1:6e:62:71:c7:65:84:08:ef:
37:3e:c3:c6:4f:56:ca:e8:93:8a:c1:40:79:9c:d3:bf:22:8f:
52:71:87:42:13:f0:c9:89:3c:8d:85:97:41:e7:30:be:b3:1d:
19:69:98:2b:3b:ba:75:e4:92:9c:42:52:41:b6:cf:bb:91:71:
3e:b5:22:ca:91:fa:fd:0e:16:1a:4d:ad:3a:c6:aa:b7:86:93:
a2:ec:05:f4:26:53:9b:f9:d0:6c:72:37:1a:fc:35:07:46:d1:
f2:84:72:2c:cf:49:0f:9b:4e:c4:28:1d:95:ae:a7:78:68:c5:
6a:6b:f3:a8:ec:b7:14:31:bb:51:c6:4a:e6:5e:15:02:aa:06:
29:a4:9c:f7:63:51:bd:c3:fd:a8:44:59:45:01:54:1b:7f:10:
d7:c5:77:00:4e:c0:70:cd:6a:f5:94:99:e8:af:7c:6a:07:7a:
e4:c9:b5:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:10 2025 by rpki-client