Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.mft
File: mf7ny9jnjR8UpFOgS5FvfBWB0gQ.mft (raw, json)
Hash identifier: yxiax3KSnL2A7D1VsQb30xvgTA3STee7NZTpvdJZFAk=
Subject key identifier: DD:85:4D:AA:BB:87:63:8A:A7:2F:12:4A:8D:6F:48:50:33:F7:44:7F
Authority key identifier: 99:FE:E7:CB:D8:E7:8D:1F:14:A4:53:A0:4B:91:6F:7C:15:81:D2:04
Certificate issuer: /CN=99fee7cbd8e78d1f14a453a04b916f7c1581d204
Certificate serial: 0194BD4E488EC2C16DF7A7C0D0E46462BF03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.mft
Manifest number: 0E18
Signing time: Fri 31 Jan 2025 17:00:11 +0000
Manifest this update: Fri 31 Jan 2025 17:00:11 +0000
Manifest next update: Sat 01 Feb 2025 17:00:11 +0000
Files and hashes: 1: 3KUh8-hYuauka8jZQaDHKHAvPEE.roa (hash: +Qd1QnNThlMfYeG0RT/Lwm1rGPeX/Dbt9BOhFW3NK7w=)
2: OalAb_NOtnnw1Uf7t2E7JPJ6VoY.roa (hash: /2DSINFIyLLAuWT+NSN2AERglHoq5WMezjiuaEAGBLc=)
3: YLlE5pxTdS6tg_rMJZiHRJCBtz0.roa (hash: Bw/ViWsgEqyxUU4QLJ0NfAmaEK6jP82CD1tF0xNBYgI=)
4: i0UQOeJ6YNtAxZECZiMmxjiaF3I.roa (hash: Tq5saoxoAZ2SR0wF+u5fAsszTDxNlUp7BPSS54+/SOc=)
5: mf7ny9jnjR8UpFOgS5FvfBWB0gQ.crl (hash: 5xH0wVNT/n0SEBVgc1hZ9gWA0regJQIhFmmedk1R9xg=)
6: qOY7wbeKs3nIQqhImhSE17lPdCk.roa (hash: jaqajIIr+ngeFDOwuzVR6399SRRk8jyurbScXxLtxAE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:48:8e:c2:c1:6d:f7:a7:c0:d0:e4:64:62:bf:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99fee7cbd8e78d1f14a453a04b916f7c1581d204
Validity
Not Before: Jan 31 17:00:11 2025 GMT
Not After : Feb 1 17:00:11 2025 GMT
Subject: CN=dd854daabb87638aa72f124a8d6f485033f7447f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e6:35:58:7d:17:2f:ae:fb:b9:4a:c9:16:59:
fe:8d:2a:b4:3f:ab:28:ba:aa:d9:ad:60:a7:55:5a:
b2:8a:af:11:11:90:62:8b:14:c3:99:e2:68:3e:bd:
f7:03:ff:7a:e0:bf:35:31:63:3e:9f:83:c0:4d:b1:
0e:ea:e5:14:f7:1b:40:f8:83:c6:40:ae:6a:3c:39:
08:b3:b8:1c:ed:39:6e:6d:7f:d7:72:ea:fa:97:b4:
ce:59:84:c8:0f:09:fd:f3:60:76:44:f4:4f:41:12:
f7:08:56:11:25:fe:d2:88:31:43:74:39:de:19:29:
8e:a4:58:f9:9e:69:75:30:28:8c:46:4e:37:2f:0d:
fe:95:5a:23:fe:58:00:fd:eb:00:89:06:e4:dd:92:
cc:b0:13:91:a4:47:09:0b:5a:79:d6:c0:17:b8:75:
06:46:34:83:8d:59:c2:47:5e:6b:87:33:ec:01:35:
72:fb:05:07:2c:67:e8:e4:2f:40:b2:46:5f:4b:0d:
a5:2c:f8:2a:ab:61:88:1f:98:f7:77:dd:f6:a4:26:
de:07:a0:a9:43:00:e8:76:88:49:a5:3a:4e:58:32:
7f:de:32:ba:90:68:6f:ef:ad:37:49:2b:9c:a7:85:
34:d5:b2:05:03:74:a5:b7:35:92:65:12:79:c0:75:
70:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:85:4D:AA:BB:87:63:8A:A7:2F:12:4A:8D:6F:48:50:33:F7:44:7F
X509v3 Authority Key Identifier:
keyid:99:FE:E7:CB:D8:E7:8D:1F:14:A4:53:A0:4B:91:6F:7C:15:81:D2:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:ec:aa:ae:21:33:ec:ee:9e:03:2a:56:4f:36:62:f4:af:10:
dd:c3:e3:de:0d:e9:ee:61:5e:83:92:97:ab:a8:89:fb:93:9a:
ba:02:6a:96:a2:51:33:83:db:7a:86:d5:4d:98:13:97:eb:95:
1f:b2:39:c0:3a:09:30:db:8c:49:f5:44:e4:88:d6:df:2f:1b:
f3:d0:8a:53:b7:1b:25:72:db:f4:7d:84:a9:b0:0a:99:58:5e:
c1:a0:74:90:76:de:cd:45:be:11:a6:e4:45:66:a0:cc:51:74:
79:4a:35:89:87:a5:e8:14:cc:4f:04:e9:ef:c4:aa:68:2b:21:
1e:2f:68:35:9a:36:33:01:97:76:f3:7d:83:c0:1a:26:d6:c6:
c2:58:d5:65:b8:e9:bb:0d:84:f5:46:e2:b5:e2:d5:59:05:91:
4f:f1:00:da:33:e7:02:68:9d:bb:cc:e1:a0:4c:eb:03:df:49:
93:c3:99:bb:5b:93:0b:bd:89:b3:83:81:dd:fb:7d:f1:d6:03:
29:8d:fb:af:70:c7:a3:af:72:ad:14:ec:f3:77:65:f7:f6:fc:
78:5a:81:df:46:db:11:79:68:73:3d:ce:c4:bb:87:ac:78:4a:
54:02:e4:0c:03:3d:0c:e7:e0:8a:4b:cb:4b:28:af:55:20:2a:
ff:70:11:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:42:48 2025 by rpki-client