Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/ab8307-5f9c-49c6-8a0b-f3b45819f2b0/1/mKmHxs0KNvlNvvEO8qLGYCCpVhE.mft
File: mKmHxs0KNvlNvvEO8qLGYCCpVhE.mft (raw, json)
Hash identifier: fiaNSlrGtNC/sRG17bY/GfChholTclBztpNISksbhRA=
Subject key identifier: 68:A9:D4:89:1D:BD:D5:75:92:ED:5C:22:6E:9B:EE:52:3A:9A:00:3D
Authority key identifier: 98:A9:87:C6:CD:0A:36:F9:4D:BE:F1:0E:F2:A2:C6:60:20:A9:56:11
Certificate issuer: /CN=98a987c6cd0a36f94dbef10ef2a2c66020a95611
Certificate serial: 0194BBCE63E9B2B69B2E4F8A0FDE10F1AF82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mKmHxs0KNvlNvvEO8qLGYCCpVhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/ab8307-5f9c-49c6-8a0b-f3b45819f2b0/1/mKmHxs0KNvlNvvEO8qLGYCCpVhE.mft
Manifest number: 0FBE
Signing time: Fri 31 Jan 2025 10:00:52 +0000
Manifest this update: Fri 31 Jan 2025 10:00:52 +0000
Manifest next update: Sat 01 Feb 2025 10:00:52 +0000
Files and hashes: 1: KkXU6YkVywPte3FQKPTwmXq43Jw.roa (hash: +grv15uxretevWYIDb50yFoisYnL85l43pH++WpX3xI=)
2: mKmHxs0KNvlNvvEO8qLGYCCpVhE.crl (hash: mmnQjb6pKgDAXjnLL5AxJozTEtPKx8F20WQmYwZUUT8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:63:e9:b2:b6:9b:2e:4f:8a:0f:de:10:f1:af:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98a987c6cd0a36f94dbef10ef2a2c66020a95611
Validity
Not Before: Jan 31 10:00:52 2025 GMT
Not After : Feb 1 10:00:52 2025 GMT
Subject: CN=68a9d4891dbdd57592ed5c226e9bee523a9a003d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:1b:33:ed:26:aa:52:49:d6:c5:0f:2b:72:dd:
4e:9d:75:74:17:65:60:1d:8b:6e:6e:ff:24:a8:4a:
08:25:06:71:47:4e:39:34:aa:69:3f:7e:9a:fd:eb:
e9:d2:52:47:ef:1a:a0:63:ab:fd:04:2f:cb:96:64:
67:e8:09:e6:10:8d:4b:36:23:4d:a0:d8:82:45:b9:
32:12:17:e8:26:8b:90:e7:6d:51:71:fd:b0:1a:25:
8d:e9:8f:64:6b:ea:72:83:81:7f:eb:47:e5:3c:18:
a1:02:ad:1d:87:e1:2a:72:38:85:9a:e0:d2:78:9a:
31:cf:e5:a4:b4:df:26:4d:86:a9:94:a7:35:4a:44:
9e:7a:f5:f2:0a:d6:8d:f2:ca:e0:c3:6e:03:56:a8:
de:41:50:ac:64:be:14:0c:65:20:49:0c:bf:07:f5:
9a:73:e3:89:a9:2f:63:1e:43:a7:dd:2e:73:3b:b2:
79:4f:6b:a5:3d:b5:81:8d:b1:d6:46:e5:80:18:68:
78:c3:0c:e4:28:74:7f:28:4c:e0:70:2e:23:b8:f9:
8f:58:9b:fd:4a:dc:d4:26:7a:4f:1c:a5:22:df:00:
76:ee:97:1a:5f:94:b6:c9:c5:6a:7e:23:d9:d0:ba:
45:0c:94:dc:fd:21:ef:91:61:fa:ef:47:10:ce:eb:
9c:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:A9:D4:89:1D:BD:D5:75:92:ED:5C:22:6E:9B:EE:52:3A:9A:00:3D
X509v3 Authority Key Identifier:
keyid:98:A9:87:C6:CD:0A:36:F9:4D:BE:F1:0E:F2:A2:C6:60:20:A9:56:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mKmHxs0KNvlNvvEO8qLGYCCpVhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ab8307-5f9c-49c6-8a0b-f3b45819f2b0/1/mKmHxs0KNvlNvvEO8qLGYCCpVhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ab8307-5f9c-49c6-8a0b-f3b45819f2b0/1/mKmHxs0KNvlNvvEO8qLGYCCpVhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:75:98:99:89:6a:9e:57:c5:d5:88:de:cc:16:72:92:fd:68:
22:ea:33:a4:0c:00:7a:79:2d:f0:2a:e9:ce:3e:ec:5e:9c:2c:
c5:0e:a3:2d:55:89:16:21:7d:6a:42:f4:5a:9e:60:38:b9:69:
cc:9f:0e:c8:ee:35:8d:fd:b6:44:c4:a2:88:1a:f5:38:53:62:
71:ef:d0:fc:82:47:fa:02:07:29:e7:da:18:a8:18:41:ad:d2:
22:46:ae:d8:c7:84:76:9d:c2:86:17:87:df:c4:b8:16:a9:1f:
3a:91:79:ef:5f:d6:a1:bc:74:18:b4:8c:13:d3:d1:54:71:1a:
c3:2e:69:01:43:11:68:65:b7:3a:65:e7:b7:9f:ac:76:f6:e5:
5a:52:3d:38:0f:3b:a1:f2:e0:1d:14:de:d7:c3:24:55:03:8d:
24:af:ac:63:19:22:bd:fa:3b:79:2b:8b:69:74:e4:96:9d:d7:
9e:6e:c4:3f:a7:3a:c1:cb:bb:77:d1:a7:6e:18:55:17:67:0f:
c6:16:8f:6a:fe:88:33:42:c4:d9:3c:46:ec:8b:17:b3:3a:51:
56:28:86:5b:0f:8e:78:5d:e6:fc:82:10:3c:1f:82:cc:77:5f:
6d:26:e6:25:e4:a5:e8:5c:53:2c:7c:5f:06:99:04:df:28:fe:
f7:d2:fb:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:02:41 2025 by rpki-client