Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/6bf232-1a28-4aa4-8ebd-bf7fa94d2a4e/1/m8c4G4L5davxnX1QGo2QvNxDnwY.mft
File: m8c4G4L5davxnX1QGo2QvNxDnwY.mft (raw, json)
Hash identifier: dY1zinIhJiE2haq5Em94R/3Cxsk7UkEGyHyWvPvHd78=
Subject key identifier: E0:EC:6C:EB:AA:75:AE:64:EB:5C:C4:28:F6:42:69:D3:10:75:90:0A
Authority key identifier: 9B:C7:38:1B:82:F9:75:AB:F1:9D:7D:50:1A:8D:90:BC:DC:43:9F:06
Certificate issuer: /CN=9bc7381b82f975abf19d7d501a8d90bcdc439f06
Certificate serial: 0194BC04C5711C87192686107A19BFD0EFF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m8c4G4L5davxnX1QGo2QvNxDnwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/6bf232-1a28-4aa4-8ebd-bf7fa94d2a4e/1/m8c4G4L5davxnX1QGo2QvNxDnwY.mft
Manifest number: 078A
Signing time: Fri 31 Jan 2025 11:00:16 +0000
Manifest this update: Fri 31 Jan 2025 11:00:16 +0000
Manifest next update: Sat 01 Feb 2025 11:00:16 +0000
Files and hashes: 1: 4AyeZ6UgoSX9es2BbU_DizGhUdY.roa (hash: VWKfnEijREHtHZ2eztHBUGUXBqi65LO9HiloDpo6nX4=)
2: m8c4G4L5davxnX1QGo2QvNxDnwY.crl (hash: Cd3PGPFbXDQ0FJBFT0xCeSjadhNZKA7XgNJ0i/+rwEU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:c5:71:1c:87:19:26:86:10:7a:19:bf:d0:ef:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bc7381b82f975abf19d7d501a8d90bcdc439f06
Validity
Not Before: Jan 31 11:00:16 2025 GMT
Not After : Feb 1 11:00:16 2025 GMT
Subject: CN=e0ec6cebaa75ae64eb5cc428f64269d31075900a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:33:42:f0:89:67:90:52:b2:96:87:06:a4:02:
64:b6:f5:db:4f:7b:dc:40:12:17:2a:68:c8:a7:01:
1d:25:12:6b:3c:b9:7b:4d:af:a7:9b:e1:af:fb:cc:
12:dd:5d:74:99:87:96:48:5d:fb:c3:24:0c:af:a1:
8f:c1:33:36:74:a7:f1:d5:c1:02:90:d0:71:55:bb:
1c:31:f7:ad:b6:72:1b:9d:9f:56:d3:98:64:12:c3:
db:27:27:e0:0f:26:b1:0a:ac:8d:29:bf:20:b1:3d:
16:a8:f1:81:28:2d:bf:bd:46:e0:1e:91:f0:f3:76:
22:b1:81:91:b3:68:36:28:a1:4a:49:07:e2:2b:49:
18:1a:da:1a:ba:f8:fe:70:ca:ab:20:9f:0b:f1:8f:
eb:51:55:52:1d:e8:69:a8:86:24:c4:a5:73:07:ec:
b1:49:f4:85:30:1a:b9:e8:15:1a:63:f6:5e:e5:39:
cd:78:b9:32:e6:5d:bc:42:80:34:f2:3f:d9:4e:24:
c3:b6:a5:3a:2c:99:fe:bd:c7:28:06:c2:0d:7a:ac:
70:fe:89:c9:2a:90:a5:5e:a7:cd:5f:b7:61:a4:e4:
70:51:d6:ba:07:8f:21:41:b3:11:40:8f:10:05:7a:
52:6b:2a:ee:37:21:d4:a4:91:a3:83:3a:8e:a6:69:
b2:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:EC:6C:EB:AA:75:AE:64:EB:5C:C4:28:F6:42:69:D3:10:75:90:0A
X509v3 Authority Key Identifier:
keyid:9B:C7:38:1B:82:F9:75:AB:F1:9D:7D:50:1A:8D:90:BC:DC:43:9F:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m8c4G4L5davxnX1QGo2QvNxDnwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6bf232-1a28-4aa4-8ebd-bf7fa94d2a4e/1/m8c4G4L5davxnX1QGo2QvNxDnwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6bf232-1a28-4aa4-8ebd-bf7fa94d2a4e/1/m8c4G4L5davxnX1QGo2QvNxDnwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:1b:5a:ad:35:77:aa:f2:12:8a:4d:40:06:da:8c:8a:73:d3:
c3:df:8d:ad:90:ff:df:b2:5a:89:00:d0:38:da:28:bc:ba:c9:
52:35:30:f3:47:a4:2a:32:e4:a8:e7:57:d0:b9:8e:f0:06:74:
aa:78:5d:8b:86:c2:50:61:c4:ef:a3:b8:24:87:0c:cb:94:d3:
09:9d:5f:58:e9:a5:64:30:b4:8d:55:fe:9f:7f:23:05:ef:5a:
73:53:18:f9:13:81:4e:4a:8d:86:d8:3f:c0:10:36:59:2b:e8:
22:f8:76:58:cd:38:0d:28:80:87:31:0e:8a:9c:6d:3f:6f:11:
c7:53:41:3e:a2:d0:cc:df:69:27:ce:c2:50:c7:68:b7:b0:5b:
ff:ca:e9:83:70:8b:1b:ab:95:12:ea:4d:97:37:91:94:32:24:
22:b7:19:8e:a4:a9:2b:6a:85:74:d4:17:48:d1:a5:ed:f7:c5:
72:66:28:9a:be:b4:48:6b:8a:48:47:d1:ef:e9:d3:97:37:f4:
9a:87:67:ee:f2:85:77:74:37:17:59:6e:66:28:78:f4:36:75:
e2:8f:23:3b:e3:af:82:38:1a:19:de:13:57:04:21:98:25:bb:
63:c9:8f:a6:71:be:dd:6b:b3:01:a6:98:aa:e4:d2:4b:be:47:
1c:d5:fc:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 08:20:43 2025 by rpki-client