Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/e439ca-519d-432c-b96a-3d2fb810e191/1/mU78TONvxEPcWBYnTqwddpMCkIE.mft
File: mU78TONvxEPcWBYnTqwddpMCkIE.mft (raw, json)
Hash identifier: 6oZFgzBrrGlF6umHHDp8eHldc4guL52HjdFA4Q442Pg=
Subject key identifier: 61:EF:8D:01:5A:F8:D3:9B:12:AD:53:A1:C9:8D:42:1D:9B:E0:9F:61
Authority key identifier: 99:4E:FC:4C:E3:6F:C4:43:DC:58:16:27:4E:AC:1D:76:93:02:90:81
Certificate issuer: /CN=994efc4ce36fc443dc5816274eac1d7693029081
Certificate serial: 0194BD4E3A703BFAE6D26EF987D37599372A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mU78TONvxEPcWBYnTqwddpMCkIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/e439ca-519d-432c-b96a-3d2fb810e191/1/mU78TONvxEPcWBYnTqwddpMCkIE.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 17:00:08 +0000
Manifest this update: Fri 31 Jan 2025 17:00:08 +0000
Manifest next update: Sat 01 Feb 2025 17:00:08 +0000
Files and hashes: 1: MhCfthOppsmBaiAYHVVk_2GAFYE.roa (hash: Prn81nEGvzCuVunt3w8adc4Qe6uMN6AiQAgwWZDR5Uo=)
2: mU78TONvxEPcWBYnTqwddpMCkIE.crl (hash: 2URW9woKLBgimiFDhSloOvg9VYKsEL5bZCyCtb06t5M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:3a:70:3b:fa:e6:d2:6e:f9:87:d3:75:99:37:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=994efc4ce36fc443dc5816274eac1d7693029081
Validity
Not Before: Jan 31 17:00:08 2025 GMT
Not After : Feb 1 17:00:08 2025 GMT
Subject: CN=61ef8d015af8d39b12ad53a1c98d421d9be09f61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:f8:3a:5e:7d:f5:11:17:ff:2f:dc:6b:31:08:
80:9c:1d:80:1e:4b:e5:11:af:d6:30:c3:7e:0e:c9:
a4:e8:cc:78:3a:81:41:fc:70:5c:6b:6d:e5:c4:2e:
69:d1:19:cd:1d:45:d6:89:d8:0a:96:04:b2:41:06:
7c:b9:ca:fa:1c:87:07:7a:a6:ea:c2:06:57:8a:a8:
af:21:ef:bd:e6:78:02:77:c8:10:f0:fb:02:47:05:
97:77:86:4b:fc:a1:fd:f6:bb:35:8f:00:9e:f1:0f:
60:6d:61:8f:10:3f:e1:a1:e9:fe:25:aa:d7:2b:77:
0c:a7:ca:8f:98:b4:e6:02:c3:55:6b:6e:d2:81:98:
96:53:e4:92:a0:df:ca:1a:61:37:bd:4c:92:f2:69:
a1:2e:94:c1:17:ec:40:a6:8c:1b:ec:a5:6f:48:cd:
05:7f:1d:b2:65:eb:66:c5:c2:72:3c:02:9c:32:74:
bd:09:f0:5d:ef:20:6e:47:db:b2:0c:f3:fd:f9:24:
1b:02:1b:52:85:b9:95:09:9b:9c:24:f0:63:89:eb:
3c:0a:39:08:f9:b8:aa:e6:e9:60:85:12:ac:75:e9:
0f:98:ea:05:e9:81:3e:ec:14:4a:1f:5a:56:40:4f:
2e:25:03:cf:9c:75:ca:cc:ed:0b:d9:65:30:68:2b:
30:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:EF:8D:01:5A:F8:D3:9B:12:AD:53:A1:C9:8D:42:1D:9B:E0:9F:61
X509v3 Authority Key Identifier:
keyid:99:4E:FC:4C:E3:6F:C4:43:DC:58:16:27:4E:AC:1D:76:93:02:90:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mU78TONvxEPcWBYnTqwddpMCkIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/e439ca-519d-432c-b96a-3d2fb810e191/1/mU78TONvxEPcWBYnTqwddpMCkIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/e439ca-519d-432c-b96a-3d2fb810e191/1/mU78TONvxEPcWBYnTqwddpMCkIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:c9:f8:0e:50:ac:1d:01:c0:d2:e8:6e:00:34:ff:fe:ba:c7:
e0:a4:6e:55:d3:b8:32:ee:42:40:67:92:84:86:a3:41:4f:2e:
88:23:fb:7f:c7:43:0c:13:c6:75:b8:38:9d:6f:fb:8e:b9:c1:
96:25:4a:a2:60:0b:a6:18:23:7f:f8:38:fe:22:9c:0a:54:51:
20:3e:c8:9c:b2:7b:59:be:f3:49:ae:a5:0f:d4:bd:0d:04:78:
87:ba:5e:7c:a5:d8:5e:f3:1a:17:b2:24:80:78:9b:b1:4b:53:
7b:d9:d6:5c:7e:ea:11:4d:c9:cf:cc:57:05:55:ad:4b:dc:6c:
a3:85:fd:18:8f:e6:62:04:2a:12:dd:4f:48:83:59:f4:50:6d:
01:e5:e3:04:a5:36:e0:9b:24:f1:01:59:70:14:8b:5d:25:55:
41:a5:cb:e5:d9:95:6f:85:4b:c5:f8:c1:10:a2:5d:22:ba:4e:
c1:bf:87:56:4c:bf:49:d8:50:b2:5c:81:82:df:f8:53:1d:c8:
c2:8f:f9:42:13:95:c9:23:ab:0f:66:37:e3:ef:99:a5:6f:4b:
6a:c6:fa:86:ae:73:2a:01:b7:33:c5:65:b6:90:66:59:7c:85:
2d:e1:3c:92:ac:f7:dc:fa:67:0c:96:89:35:af:9a:50:e7:f9:
e4:53:bd:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:23 2025 by rpki-client