Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/481466-0e38-4e3b-9bf3-285745647f5f/1/mXpkd92XDJSyoXtSUCmC1Px1skQ.mft
File: mXpkd92XDJSyoXtSUCmC1Px1skQ.mft (raw, json)
Hash identifier: k7ePVuQALEQzdGsmXWKc1cM6iOiPAeGTJPvNJVLB/2Q=
Subject key identifier: 26:7C:93:56:60:7C:11:14:3A:1E:7E:B3:0A:43:70:78:95:10:C4:98
Authority key identifier: 99:7A:64:77:DD:97:0C:94:B2:A1:7B:52:50:29:82:D4:FC:75:B2:44
Certificate issuer: /CN=997a6477dd970c94b2a17b52502982d4fc75b244
Certificate serial: 0194BC3BD40AB9137E52BE676F9C20F3E5B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mXpkd92XDJSyoXtSUCmC1Px1skQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/481466-0e38-4e3b-9bf3-285745647f5f/1/mXpkd92XDJSyoXtSUCmC1Px1skQ.mft
Manifest number: 0356
Signing time: Fri 31 Jan 2025 12:00:24 +0000
Manifest this update: Fri 31 Jan 2025 12:00:24 +0000
Manifest next update: Sat 01 Feb 2025 12:00:24 +0000
Files and hashes: 1: N5euriRPkrPM5tpe3YMpJKwtnXs.roa (hash: Aif5H8pBLwxI+pfqg48v8EjEzgULti0iCYfChkXvfLI=)
2: mXpkd92XDJSyoXtSUCmC1Px1skQ.crl (hash: jOhkWz6sL/OcnOFpYus+6uH8+3b9BT4+iYX9/M0HQm4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:d4:0a:b9:13:7e:52:be:67:6f:9c:20:f3:e5:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=997a6477dd970c94b2a17b52502982d4fc75b244
Validity
Not Before: Jan 31 12:00:24 2025 GMT
Not After : Feb 1 12:00:24 2025 GMT
Subject: CN=267c9356607c11143a1e7eb30a4370789510c498
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:21:b3:a9:03:5f:f7:b0:ac:b4:84:8d:a2:30:
e0:5d:07:4a:57:f3:c4:91:56:69:bc:d0:a2:d1:34:
1f:94:69:bc:9a:7a:d5:d9:79:8f:7e:13:f3:0a:23:
e9:02:5d:0d:6c:de:81:04:5d:56:76:f1:f7:8c:56:
c4:b3:ad:da:d0:09:07:39:54:52:5d:14:60:6f:21:
21:cb:f0:73:c1:cd:e9:15:6a:32:db:dc:ac:99:36:
4c:04:ac:09:60:4c:2c:5e:b5:ae:ba:ae:6a:e3:85:
99:76:2e:da:da:0a:6a:d4:7b:41:b2:aa:fc:69:24:
aa:73:21:69:6d:6c:24:b1:87:51:1f:4b:db:8a:42:
66:62:c7:ea:2e:fc:12:ff:7d:db:3d:37:b4:d5:16:
48:9d:ce:ab:80:dd:05:d1:9c:53:8f:67:a2:61:17:
a0:1b:ac:86:36:2c:4d:03:5a:bb:51:92:81:0a:eb:
d1:fb:be:18:97:b1:de:dc:ce:c6:f9:c1:51:8c:36:
9e:ac:f7:96:d0:ad:1e:40:58:44:72:87:63:db:55:
43:da:b3:52:a8:e9:98:8a:74:b2:f5:56:a3:14:c9:
f2:43:59:13:2d:23:28:5b:1e:69:85:fa:1b:7f:32:
3c:e4:7e:80:d3:58:fb:8d:54:87:47:96:20:01:6c:
91:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:7C:93:56:60:7C:11:14:3A:1E:7E:B3:0A:43:70:78:95:10:C4:98
X509v3 Authority Key Identifier:
keyid:99:7A:64:77:DD:97:0C:94:B2:A1:7B:52:50:29:82:D4:FC:75:B2:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mXpkd92XDJSyoXtSUCmC1Px1skQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/481466-0e38-4e3b-9bf3-285745647f5f/1/mXpkd92XDJSyoXtSUCmC1Px1skQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/481466-0e38-4e3b-9bf3-285745647f5f/1/mXpkd92XDJSyoXtSUCmC1Px1skQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:f5:db:75:d8:d3:b6:20:1a:17:9e:1a:8c:57:56:df:ad:c7:
e3:78:79:41:39:f4:f6:88:81:61:a6:b1:47:0a:29:60:3f:31:
65:9a:12:84:67:bb:b4:09:58:55:2c:4f:52:31:e1:b7:49:2b:
8b:45:b9:9f:48:53:1c:7f:7d:cf:8c:03:0d:71:1f:93:b6:01:
34:38:cb:56:a7:c6:9a:67:7a:2c:99:e5:65:c8:38:41:9f:f6:
3c:0e:8f:32:a4:c8:cd:bc:32:18:f9:13:7c:26:f5:45:40:7f:
30:0f:07:05:78:af:81:63:5a:1c:51:99:19:b3:de:d6:01:98:
d8:50:38:14:18:6d:d3:10:fd:db:25:c2:3b:36:43:f6:18:53:
74:c6:f6:0d:1b:36:c8:2f:71:e9:63:a9:3a:3e:a7:e8:66:ce:
c2:3d:f4:fb:aa:1d:78:f0:fb:2c:da:89:a3:c8:e4:32:27:ab:
05:3e:73:de:2e:4e:70:1d:30:af:c3:1d:b4:16:11:ff:b5:e0:
4b:18:74:e2:37:44:f8:d3:89:33:83:48:12:26:33:6f:2d:09:
d4:e2:dc:1d:27:fd:33:b7:f0:73:2e:e3:7a:86:d0:90:42:51:
1d:de:86:1c:cb:4c:58:89:a3:8d:5a:1a:1c:5e:70:6d:9d:52:
e3:22:68:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:59:28 2025 by rpki-client