Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/122ff4-c4a7-4698-879f-ecab70ef32da/1/mK9kDIIO61-8kigcYRRPEae9cH4.mft
File: mK9kDIIO61-8kigcYRRPEae9cH4.mft (raw, json)
Hash identifier: mbd+83Nm3hL1+4gaGT7Xt76bh0byvDbcSkWSRquN6Hk=
Subject key identifier: A7:21:5E:B6:53:50:5A:BA:47:9E:CC:F6:7D:89:1D:8A:38:99:1D:3C
Authority key identifier: 98:AF:64:0C:82:0E:EB:5F:BC:92:28:1C:61:14:4F:11:A7:BD:70:7E
Certificate issuer: /CN=98af640c820eeb5fbc92281c61144f11a7bd707e
Certificate serial: 0194BD85B653B418D7FE17FB2A03DEDE1BBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mK9kDIIO61-8kigcYRRPEae9cH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/122ff4-c4a7-4698-879f-ecab70ef32da/1/mK9kDIIO61-8kigcYRRPEae9cH4.mft
Manifest number: 0182
Signing time: Fri 31 Jan 2025 18:00:44 +0000
Manifest this update: Fri 31 Jan 2025 18:00:44 +0000
Manifest next update: Sat 01 Feb 2025 18:00:44 +0000
Files and hashes: 1: OWXYykmlPDxYaUK6ibOA62-hDng.roa (hash: x4BvE6J+LBS4eTxuz/ILECCYgRYsxbKFwFccG0CtiDI=)
2: mK9kDIIO61-8kigcYRRPEae9cH4.crl (hash: 4LUerPG1qijiy8A3loCAfORTPQwjVfwIONkTuoOaE0Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:b6:53:b4:18:d7:fe:17:fb:2a:03:de:de:1b:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98af640c820eeb5fbc92281c61144f11a7bd707e
Validity
Not Before: Jan 31 18:00:44 2025 GMT
Not After : Feb 1 18:00:44 2025 GMT
Subject: CN=a7215eb653505aba479eccf67d891d8a38991d3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:bc:f8:af:9d:e1:8f:0d:e2:c2:67:0c:cb:ca:
4a:d0:d1:70:c7:67:3f:f8:6b:e4:f6:65:a5:9a:8e:
92:85:3e:9f:b7:27:e5:6b:75:42:05:ff:45:18:f7:
d3:14:5a:d6:fe:4f:6a:fa:f5:9c:5b:9a:37:94:eb:
a3:84:21:b9:a2:2f:25:f8:5b:f3:77:6e:09:95:c4:
81:86:e6:96:51:26:08:82:04:cb:38:be:c2:89:8e:
bf:e6:28:08:b5:0b:1b:be:94:1c:11:a7:35:c0:15:
6e:e9:37:f5:36:d7:a0:94:7d:5c:11:8a:db:05:dd:
28:88:f4:7e:ae:48:4e:b3:22:e0:4a:0b:68:5b:35:
47:52:40:73:f8:8e:4a:6d:18:85:0d:5b:aa:c7:21:
1b:e2:03:c1:30:d3:c5:d0:ad:76:6b:52:b9:28:13:
6d:62:59:9f:73:28:40:dc:2e:e6:bf:96:57:77:86:
6f:6f:70:47:a5:00:da:ef:e9:09:0e:ad:88:97:1f:
8f:ca:7d:23:ca:ef:7a:bc:3a:c5:9c:e0:1b:e9:c4:
74:6d:76:55:ae:f9:f2:db:9f:48:0b:ee:b7:8a:4e:
2d:ec:60:c0:eb:6f:2f:0a:17:db:03:14:b8:66:5c:
72:7d:85:24:b1:39:bf:a6:ec:7e:74:82:7b:7f:0e:
94:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:21:5E:B6:53:50:5A:BA:47:9E:CC:F6:7D:89:1D:8A:38:99:1D:3C
X509v3 Authority Key Identifier:
keyid:98:AF:64:0C:82:0E:EB:5F:BC:92:28:1C:61:14:4F:11:A7:BD:70:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mK9kDIIO61-8kigcYRRPEae9cH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/122ff4-c4a7-4698-879f-ecab70ef32da/1/mK9kDIIO61-8kigcYRRPEae9cH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/122ff4-c4a7-4698-879f-ecab70ef32da/1/mK9kDIIO61-8kigcYRRPEae9cH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:20:2f:7b:5a:75:a4:c0:5f:42:95:8d:59:d3:5b:3b:00:70:
59:39:6b:28:07:19:e3:1e:e7:d9:b5:ea:e4:05:92:a7:34:94:
50:66:08:45:25:63:2f:f4:6c:28:10:42:5f:ef:56:75:ba:d3:
42:db:b8:1b:2d:cf:4d:da:d6:a5:83:91:ff:21:20:26:85:62:
19:c7:44:1e:b0:4f:10:bd:1b:62:96:7e:93:a8:85:cd:bf:bc:
af:b0:d1:95:84:a9:c3:58:df:81:dd:51:ce:50:0a:dd:47:3a:
c7:99:40:23:e9:0e:0a:c7:8d:dd:14:4e:7e:4e:ce:3d:7a:46:
49:89:59:9e:bc:c7:d8:3b:e3:01:ce:ae:8c:36:27:59:6c:4e:
0b:8a:c0:91:5f:06:de:32:56:fd:17:96:7c:94:ff:40:09:62:
70:0e:4d:d4:84:f7:81:a3:d2:89:1d:e9:fa:5e:f8:4d:93:55:
6f:e1:22:2c:91:f6:84:39:6f:54:42:62:87:49:2b:a9:85:f3:
f9:2d:f1:ae:da:98:eb:b1:f9:37:a8:f2:e2:a2:cc:20:c2:59:
b1:10:57:8f:a2:29:b1:c1:9c:3e:a0:55:c8:e3:2f:84:52:6b:
a4:88:49:c6:de:e8:95:74:a2:2f:98:09:57:7b:56:6f:f3:3a:
88:30:59:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:56:02 2025 by rpki-client