Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/f3eb66-d7d7-411a-ad0b-e538e29fb1c0/1/mNs9zyXSwixbmX0VenzvrE1F92I.mft
File: mNs9zyXSwixbmX0VenzvrE1F92I.mft (raw, json)
Hash identifier: xvMjq0hXXJwTCS6+ZgPoItmS1corokq0Bx0XbBQOKP4=
Subject key identifier: EF:18:9B:9E:F3:D6:02:A1:81:81:DB:09:49:A7:85:70:F3:48:28:AA
Authority key identifier: 98:DB:3D:CF:25:D2:C2:2C:5B:99:7D:15:7A:7C:EF:AC:4D:45:F7:62
Certificate issuer: /CN=98db3dcf25d2c22c5b997d157a7cefac4d45f762
Certificate serial: 0194BC3C7D3519288B518F7E745D0ABA59BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mNs9zyXSwixbmX0VenzvrE1F92I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/f3eb66-d7d7-411a-ad0b-e538e29fb1c0/1/mNs9zyXSwixbmX0VenzvrE1F92I.mft
Manifest number: 0773
Signing time: Fri 31 Jan 2025 12:01:08 +0000
Manifest this update: Fri 31 Jan 2025 12:01:08 +0000
Manifest next update: Sat 01 Feb 2025 12:01:08 +0000
Files and hashes: 1: kDzvgB_NRFmAkvFmWwXdAAjTFCw.roa (hash: Je9V/SETkk0rgpci9CjD3RfuSHpDZJpA+Ok7E2xKrCw=)
2: mNs9zyXSwixbmX0VenzvrE1F92I.crl (hash: ScoFSErUVfzKWJ9rQqdwGgwMQEWeT+Vx2/33bE9qM0M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:7d:35:19:28:8b:51:8f:7e:74:5d:0a:ba:59:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98db3dcf25d2c22c5b997d157a7cefac4d45f762
Validity
Not Before: Jan 31 12:01:08 2025 GMT
Not After : Feb 1 12:01:08 2025 GMT
Subject: CN=ef189b9ef3d602a18181db0949a78570f34828aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:9c:24:50:d1:33:81:82:d8:e2:89:63:ac:3d:
35:c1:49:02:c0:83:1b:48:8a:3a:58:c2:a2:65:5a:
d7:67:89:1a:6f:41:d5:c6:d4:93:6e:2d:18:11:c8:
3b:1b:a5:a4:4a:30:8e:bd:91:c5:5f:a3:53:24:c7:
89:aa:37:6c:2a:95:46:fb:6a:02:cd:33:72:bb:16:
7e:0a:8a:e1:b8:65:95:13:a9:db:0a:cb:af:81:9e:
ee:26:e8:bd:50:65:db:f4:f8:a0:7e:4d:77:fb:ce:
1a:1f:a1:e6:53:ef:d4:48:5e:b6:ab:2d:15:61:90:
56:49:8f:2b:01:b8:28:46:46:5b:f4:a5:47:5d:f2:
bb:fd:37:60:79:e6:e4:18:96:02:e6:38:88:e5:ad:
3c:4a:62:ba:84:f0:e5:94:8a:28:cf:0c:78:5b:ac:
0f:c2:66:22:af:ae:3b:da:38:52:5d:65:c6:84:1c:
d8:d8:8a:dc:49:3d:fb:9e:96:72:67:67:53:37:b0:
3c:11:b6:77:80:c9:6d:f5:61:a8:5b:27:1c:1f:6b:
60:c1:93:81:c7:77:3b:b8:c9:a7:84:9a:90:92:3a:
1d:66:f1:1c:09:f7:f2:83:c4:e9:da:6c:81:e4:cf:
d1:d3:05:89:99:1e:60:ee:ba:9f:6b:83:61:cb:35:
18:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:18:9B:9E:F3:D6:02:A1:81:81:DB:09:49:A7:85:70:F3:48:28:AA
X509v3 Authority Key Identifier:
keyid:98:DB:3D:CF:25:D2:C2:2C:5B:99:7D:15:7A:7C:EF:AC:4D:45:F7:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mNs9zyXSwixbmX0VenzvrE1F92I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/f3eb66-d7d7-411a-ad0b-e538e29fb1c0/1/mNs9zyXSwixbmX0VenzvrE1F92I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/f3eb66-d7d7-411a-ad0b-e538e29fb1c0/1/mNs9zyXSwixbmX0VenzvrE1F92I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:22:14:5e:75:78:2c:44:d5:11:8e:2f:7e:d7:55:d4:f4:3c:
a3:7c:f0:39:35:a4:20:e7:bd:b2:7e:32:6d:7a:d1:3a:7a:e8:
99:2c:32:26:0d:c6:30:13:a3:ac:96:90:d7:8f:36:32:c1:9b:
ca:f2:e2:bc:df:f5:dc:92:5c:f0:87:f6:4f:c7:60:38:7d:bf:
df:30:45:43:58:8b:18:0b:3a:fa:6f:89:02:6a:97:78:97:c9:
df:2c:04:f0:fe:8f:26:be:68:d5:ba:08:a9:a2:d6:c4:61:38:
cc:79:8f:6c:4c:50:d1:cb:c1:a8:3b:56:80:62:39:35:e8:b0:
50:b2:a1:55:d3:b0:b7:a6:94:91:76:c7:1f:09:4e:03:6e:d1:
4a:f7:ee:82:e3:ca:87:ca:1b:a6:d7:31:a8:61:ee:f3:41:b6:
71:2d:e9:32:6f:f6:93:ba:05:f7:4c:3c:08:c1:82:bf:0f:3f:
94:9c:e0:cc:93:34:ff:40:a8:02:ba:76:13:ea:4d:c6:26:95:
c4:96:62:3b:45:05:25:e1:8d:b3:76:9b:78:a3:3a:52:ce:6e:
7f:dd:88:5b:2d:25:dc:98:1c:45:62:7a:7d:43:e1:46:28:71:
a3:39:f8:c3:da:07:35:11:4a:43:f1:cf:67:78:e4:a6:70:75:
0d:81:6b:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:01:32 2025 by rpki-client