Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/7c91ca-55f7-43a4-b950-8dc94e89bf03/1/md6y4fhaF9okDPyBbZcsheQR5iQ.mft
File: md6y4fhaF9okDPyBbZcsheQR5iQ.mft (raw, json)
Hash identifier: H5lnHVj/iqOY8KTIEM6ZGW7FGERW+NkecLPHWc+ND2o=
Subject key identifier: 5A:3C:F7:16:7B:75:B8:90:65:1A:41:27:93:08:5F:16:8B:23:F2:B5
Authority key identifier: 99:DE:B2:E1:F8:5A:17:DA:24:0C:FC:81:6D:97:2C:85:E4:11:E6:24
Certificate issuer: /CN=99deb2e1f85a17da240cfc816d972c85e411e624
Certificate serial: 0194BCA9CCF69B3485DDA15DB438A894EDB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/md6y4fhaF9okDPyBbZcsheQR5iQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/7c91ca-55f7-43a4-b950-8dc94e89bf03/1/md6y4fhaF9okDPyBbZcsheQR5iQ.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 14:00:32 +0000
Manifest this update: Fri 31 Jan 2025 14:00:32 +0000
Manifest next update: Sat 01 Feb 2025 14:00:32 +0000
Files and hashes: 1: G9mF37Fb91r0jC33-YcK9r4IAmk.roa (hash: MaEVR8Nlqavgaakwb2T4C4sUXoGT+mVODKAXw14Vucs=)
2: md6y4fhaF9okDPyBbZcsheQR5iQ.crl (hash: 8tUvJXK/xNJGsXhPS1STbprNCXgLcctWUGTLB7z+ens=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:cc:f6:9b:34:85:dd:a1:5d:b4:38:a8:94:ed:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99deb2e1f85a17da240cfc816d972c85e411e624
Validity
Not Before: Jan 31 14:00:32 2025 GMT
Not After : Feb 1 14:00:32 2025 GMT
Subject: CN=5a3cf7167b75b890651a412793085f168b23f2b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:90:03:95:3a:c3:c1:40:fc:dc:81:cb:14:a7:
88:5b:c6:69:7b:04:a7:d0:a2:2a:e9:a3:16:6c:b1:
fc:5f:ce:b4:30:d6:99:5f:5c:e0:0c:5d:1b:c5:73:
85:a3:d9:ea:9d:7b:7c:be:06:14:68:03:51:25:ad:
3d:10:f9:76:8f:8a:cf:6a:9f:57:67:5a:17:c9:df:
c1:3a:7e:21:8b:d9:3b:02:50:f8:01:ee:f8:ae:ef:
e1:0c:a3:06:e4:36:68:e1:0f:8d:d3:b7:b4:e5:6a:
57:2e:f5:3d:23:e4:6b:02:67:1f:26:87:d5:22:74:
20:4a:2b:db:d5:8b:0c:33:97:7d:da:ed:a8:32:6b:
2a:52:8f:80:0c:0b:47:71:e0:f2:5e:16:31:eb:2b:
a1:3f:f0:f6:82:10:17:11:c3:da:04:ce:0a:41:6f:
39:6f:e6:0e:51:90:1f:4a:b9:77:e3:a5:67:0e:32:
05:9e:c0:0b:ac:e7:83:ac:70:79:22:bd:67:25:69:
a7:6b:c5:f7:0f:f3:ca:50:79:c5:6f:67:3d:0a:d2:
34:79:92:79:5a:29:b3:a5:18:79:6c:81:6f:c3:a0:
50:09:39:93:44:78:8b:cc:c6:76:73:c4:34:27:87:
c6:ce:0c:2c:7e:74:49:cf:8f:c3:40:2d:9b:bd:b1:
a5:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:3C:F7:16:7B:75:B8:90:65:1A:41:27:93:08:5F:16:8B:23:F2:B5
X509v3 Authority Key Identifier:
keyid:99:DE:B2:E1:F8:5A:17:DA:24:0C:FC:81:6D:97:2C:85:E4:11:E6:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/md6y4fhaF9okDPyBbZcsheQR5iQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7c91ca-55f7-43a4-b950-8dc94e89bf03/1/md6y4fhaF9okDPyBbZcsheQR5iQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7c91ca-55f7-43a4-b950-8dc94e89bf03/1/md6y4fhaF9okDPyBbZcsheQR5iQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:6f:55:0e:95:4e:b1:b2:a5:40:6a:2d:5e:5d:b4:e4:11:c1:
3b:36:d0:5f:63:f2:f8:67:4a:72:c3:7b:83:88:ce:c1:1d:78:
03:2b:6e:fa:a2:d9:ac:0c:44:e6:46:e6:8f:8f:19:e1:e1:d5:
f8:b5:09:1e:66:b1:20:bf:38:5b:8c:07:fb:2c:2a:71:28:c1:
be:60:81:aa:5b:71:2d:b9:19:1a:6b:ee:16:5e:08:30:c5:de:
fe:36:fd:ab:11:df:a6:85:5d:86:e1:1c:e0:84:0a:9b:38:98:
15:a5:7e:9f:97:95:6f:2b:0a:c8:75:b4:41:09:f9:b6:73:26:
3b:cc:62:8e:61:67:11:90:b0:b2:84:bc:21:61:3b:d1:25:59:
b1:c0:76:ec:a9:7c:ef:d5:ed:c6:9e:92:67:a4:d7:6e:58:5f:
1f:c6:2f:5b:63:e5:06:c5:2a:2f:dd:e9:ac:21:b4:83:c6:43:
df:78:17:f4:f0:84:d1:54:f7:c5:be:85:b8:47:dc:92:50:57:
57:55:0d:30:e6:63:0e:52:23:21:66:a5:1e:78:dd:5c:c4:ba:
03:d6:91:8d:e4:4b:7f:dc:51:03:f2:e5:3d:79:5c:97:d2:10:
3d:95:d8:fc:b9:b4:72:a4:c2:d3:84:d9:b9:6a:21:41:22:d7:
13:ee:34:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:49:53 2025 by rpki-client