Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/89afba-4fed-42ef-a751-f5ff9afc3266/1/mnZNjTrnJbReDUgH9hLsPR8qP08.mft
File: mnZNjTrnJbReDUgH9hLsPR8qP08.mft (raw, json)
Hash identifier: TwP2D5BQjXMsGOIBqORGbai0D9b37d7fnyuXmQDZLdM=
Subject key identifier: 3B:B7:5D:83:95:11:B7:7B:CB:A8:3C:57:91:0C:00:7B:E8:41:F6:95
Authority key identifier: 9A:76:4D:8D:3A:E7:25:B4:5E:0D:48:07:F6:12:EC:3D:1F:2A:3F:4F
Certificate issuer: /CN=9a764d8d3ae725b45e0d4807f612ec3d1f2a3f4f
Certificate serial: 0194BC3C7CFD45353C68E0885CFA6F35487F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mnZNjTrnJbReDUgH9hLsPR8qP08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/89afba-4fed-42ef-a751-f5ff9afc3266/1/mnZNjTrnJbReDUgH9hLsPR8qP08.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 12:01:08 +0000
Manifest this update: Fri 31 Jan 2025 12:01:08 +0000
Manifest next update: Sat 01 Feb 2025 12:01:08 +0000
Files and hashes: 1: GX6PPZ2aZNuKqCQABtqOUWCcHRs.roa (hash: iBMcSS3f9LeIBBwiwQeNPCdp76Ute65WO/S9tw7lGK8=)
2: mnZNjTrnJbReDUgH9hLsPR8qP08.crl (hash: 6V64l+ekDJpPBAKZJuvbkdecxkL7Z0232+l/YrhdJgc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:7c:fd:45:35:3c:68:e0:88:5c:fa:6f:35:48:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a764d8d3ae725b45e0d4807f612ec3d1f2a3f4f
Validity
Not Before: Jan 31 12:01:08 2025 GMT
Not After : Feb 1 12:01:08 2025 GMT
Subject: CN=3bb75d839511b77bcba83c57910c007be841f695
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:d1:0c:95:0f:06:8b:22:34:c8:fe:79:01:2f:
fb:91:81:f3:0a:ac:cc:ea:26:3b:f6:9f:bb:00:58:
31:f5:6e:8f:12:04:c9:09:86:fe:85:e7:24:ea:31:
19:6f:73:d3:0e:1b:19:53:ea:db:73:62:37:0b:1a:
db:9f:6e:f4:b3:11:ae:09:7d:d9:57:86:f2:f9:45:
a5:8d:3b:04:1f:2b:ed:9c:e2:55:09:a2:0e:28:bf:
90:83:a6:04:63:1f:a9:d0:92:63:79:17:fa:81:e0:
e3:63:e6:43:fe:1b:6d:59:01:ca:c9:f7:b2:a2:3b:
ef:b9:a8:07:42:95:3e:89:e6:db:8b:16:b8:f8:6b:
f0:5c:f4:40:23:25:c9:d5:f1:fd:60:7c:17:ef:5e:
61:59:e0:15:06:90:51:fa:ff:54:ed:b9:ae:c9:36:
b1:c0:f7:2c:02:a6:37:42:d3:11:ae:b5:1c:c0:b3:
db:d9:ad:fd:0d:6d:0c:7b:c7:5e:6c:d0:fb:69:a3:
66:7d:ce:53:32:e1:a1:23:78:f5:81:4a:b3:3a:39:
53:e3:45:b9:e4:b6:1b:83:e1:47:d0:e6:de:af:21:
58:e1:3d:2f:99:d0:23:40:0a:1c:ad:b7:89:9a:0e:
8f:4b:52:04:a4:ed:cc:86:18:c4:38:6b:1c:e7:d9:
49:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:B7:5D:83:95:11:B7:7B:CB:A8:3C:57:91:0C:00:7B:E8:41:F6:95
X509v3 Authority Key Identifier:
keyid:9A:76:4D:8D:3A:E7:25:B4:5E:0D:48:07:F6:12:EC:3D:1F:2A:3F:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mnZNjTrnJbReDUgH9hLsPR8qP08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/89afba-4fed-42ef-a751-f5ff9afc3266/1/mnZNjTrnJbReDUgH9hLsPR8qP08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/89afba-4fed-42ef-a751-f5ff9afc3266/1/mnZNjTrnJbReDUgH9hLsPR8qP08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:5c:26:60:4a:07:ca:19:5d:43:9a:9c:f3:d7:97:62:0d:c7:
53:33:f0:c6:9d:d3:1b:41:b0:e0:0d:19:a7:cc:93:d8:80:19:
c2:8a:8e:7f:d5:d1:ce:7f:f2:1f:5b:4d:14:fc:97:bf:b6:07:
a0:69:b7:e4:be:8e:38:71:22:73:63:03:04:6e:f1:70:66:cc:
a0:1c:8e:41:a7:cb:50:f5:ce:63:ca:c1:35:03:74:48:4a:9a:
bc:c1:02:e1:91:51:5e:b9:51:b2:85:b9:f5:3b:07:1e:ab:ea:
f7:dd:bc:37:94:fa:33:69:d8:96:25:67:7c:21:90:b9:22:01:
88:2e:6d:ed:61:91:6f:4d:b6:21:a9:9b:a9:e3:b6:64:13:6d:
a2:5e:c4:92:86:e9:5d:22:ce:39:9b:0a:ae:3f:21:43:29:d5:
b1:b7:07:d3:24:08:27:11:c3:d2:a3:f7:73:bd:e1:e6:7e:e1:
8c:81:eb:8f:63:94:e2:90:c0:39:b5:10:42:10:38:33:83:86:
c5:fb:7d:ec:b0:42:8e:be:27:fd:e6:18:df:b2:9b:24:42:9e:
e8:11:40:15:03:87:50:2f:81:c2:f8:c3:69:be:f5:ea:60:11:
12:16:46:af:b6:a3:ff:a4:51:8d:ed:df:69:5e:03:0e:3b:29:
d3:eb:8a:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:34:31 2025 by rpki-client