Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/be8d59-7704-45f8-b399-a88f574152b6/1/mRf3d-caw0Ei7bNe3WDPFNdbnvY.mft
File: mRf3d-caw0Ei7bNe3WDPFNdbnvY.mft (raw, json)
Hash identifier: A69das7NZg4zjGPShonr30c8W1HRamdIOehOlSGNTt0=
Subject key identifier: 10:81:91:C6:75:45:02:5C:6E:74:FB:FE:4C:FD:35:AC:8D:05:92:0F
Authority key identifier: 99:17:F7:77:E7:1A:C3:41:22:ED:B3:5E:DD:60:CF:14:D7:5B:9E:F6
Certificate issuer: /CN=9917f777e71ac34122edb35edd60cf14d75b9ef6
Certificate serial: 0194BCA9F444F072442922E8BD120A3CD7AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mRf3d-caw0Ei7bNe3WDPFNdbnvY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/be8d59-7704-45f8-b399-a88f574152b6/1/mRf3d-caw0Ei7bNe3WDPFNdbnvY.mft
Manifest number: 1119
Signing time: Fri 31 Jan 2025 14:00:41 +0000
Manifest this update: Fri 31 Jan 2025 14:00:41 +0000
Manifest next update: Sat 01 Feb 2025 14:00:41 +0000
Files and hashes: 1: 8d3irncdHLZkdRnMP5XTaUSwUDg.roa (hash: rzsl5FRJP8PNH7SlWyQWAee7OQ1otGN4ArKngJgMF9U=)
2: Xs9T6PK5ijOVxCmCgq_6E2A__nQ.roa (hash: S5Af46ICAzl/XprWaWxfdUsVmQ9qZwM6fg2ZXROy37M=)
3: c54NoWEXWRQA-dbSZ-8W6mQyP8E.roa (hash: nRoWd4CNF6uxWBOBAy58vxnhfOJmaxOekRUGTIQqLKA=)
4: mRf3d-caw0Ei7bNe3WDPFNdbnvY.crl (hash: V1EzeHqxae4w+dDp21mbp8AQNOIZVR1If10gHRPL4rg=)
5: yODnLhtEhpSHZKcWtftsr2wrfHM.roa (hash: vGS7Y/f4ssyV0t0WiPGg8Dqt5gZnLrzS3R4VljxDfWM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:f4:44:f0:72:44:29:22:e8:bd:12:0a:3c:d7:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9917f777e71ac34122edb35edd60cf14d75b9ef6
Validity
Not Before: Jan 31 14:00:41 2025 GMT
Not After : Feb 1 14:00:41 2025 GMT
Subject: CN=108191c67545025c6e74fbfe4cfd35ac8d05920f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:0b:9a:be:0c:ff:d3:f9:70:f1:2d:a0:3e:c6:
20:84:be:48:b9:ea:47:18:8b:b7:e6:f8:e8:eb:51:
f7:e5:13:7f:2d:b8:2a:60:6e:85:63:ee:dd:47:dd:
0a:fc:09:c9:04:c4:40:82:66:82:4e:13:c7:10:03:
9c:ca:c7:df:99:ad:bd:ef:a9:b3:3d:aa:61:ed:fe:
09:6f:8d:ba:46:ac:67:da:22:40:78:64:fe:63:00:
e8:04:8b:6b:41:ba:cf:73:24:6a:ef:00:98:d7:5b:
44:08:ca:cd:a9:51:9a:6e:45:cb:0c:88:c2:fe:21:
5b:b3:be:a8:62:05:8f:33:ab:7b:a9:09:2f:0a:53:
1c:2a:55:e9:1c:04:6a:d8:74:36:93:f2:a9:a5:ee:
2f:23:16:61:6d:25:ad:ae:09:39:3c:04:5c:6f:97:
f4:ca:9a:8d:af:2f:a1:0f:fb:4e:a1:b6:17:3c:ec:
ba:5c:fe:81:c1:dd:77:01:02:1a:c8:79:15:e9:f7:
66:73:a9:7a:a2:c1:97:96:fc:f0:f8:6f:53:1b:a0:
4c:96:3e:37:e6:fa:94:97:1e:89:ee:37:fe:c6:b4:
1a:5c:d6:6b:57:c9:e5:c7:b1:47:38:e0:13:0d:b1:
7b:79:56:bb:a2:5b:56:fa:fe:55:a6:f6:87:10:28:
9e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:81:91:C6:75:45:02:5C:6E:74:FB:FE:4C:FD:35:AC:8D:05:92:0F
X509v3 Authority Key Identifier:
keyid:99:17:F7:77:E7:1A:C3:41:22:ED:B3:5E:DD:60:CF:14:D7:5B:9E:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mRf3d-caw0Ei7bNe3WDPFNdbnvY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/be8d59-7704-45f8-b399-a88f574152b6/1/mRf3d-caw0Ei7bNe3WDPFNdbnvY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/be8d59-7704-45f8-b399-a88f574152b6/1/mRf3d-caw0Ei7bNe3WDPFNdbnvY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:98:6d:2d:e1:9f:79:94:0f:da:53:53:88:fe:ca:97:d4:cc:
da:b8:a7:d4:62:33:1d:6c:91:a5:13:ce:47:82:4f:ce:3a:75:
f4:61:3c:0a:93:9a:ca:4e:b7:61:51:7e:9a:26:8b:f1:56:f2:
b0:0f:89:d5:d0:21:64:c3:ec:23:f5:e5:d2:28:c5:25:82:01:
17:2f:4d:f9:f0:44:b6:22:00:9c:da:48:a2:e5:36:87:3c:02:
f6:a7:17:50:e2:5c:ab:b5:3e:a8:08:8b:6e:87:62:fa:cc:9a:
f0:bc:ca:86:c5:18:9e:32:4f:0c:89:48:f4:c6:0f:5a:ee:fa:
f5:df:fb:7e:31:a6:a7:12:2e:6d:95:4d:b4:42:f8:36:76:03:
ff:20:14:15:fc:23:1c:a1:e9:bf:9c:66:61:ec:7e:60:e8:b2:
64:92:72:dd:8f:78:85:6f:bf:22:3b:3c:64:d6:87:5f:72:1b:
b1:ac:1c:b2:0a:19:bd:cc:21:78:c1:ec:4f:4d:88:01:08:55:
70:03:e4:3b:7a:63:00:f8:4c:93:d2:af:d1:fa:d5:a8:e1:58:
e2:33:f1:59:ad:ad:68:98:94:a8:16:92:73:53:0c:9d:0b:51:
50:f6:a8:11:1d:cf:73:d7:e5:3f:20:dc:ae:fb:a3:f6:2d:72:
28:0a:72:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:17:28 2025 by rpki-client