Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/048df6-bccd-4885-8f43-4dc2071a5bf1/1/mUQHi0B3KxcscEbnRGIEmAzq4Tk.mft
File: mUQHi0B3KxcscEbnRGIEmAzq4Tk.mft (raw, json)
Hash identifier: j6Jn3AbBRTAFpg0M7BkZM5Hy/Uru9Xn80gxTF/oU5vM=
Subject key identifier: B1:0F:20:C4:8D:43:F7:7A:76:5D:0B:4E:E6:D6:77:72:FF:01:FE:E2
Authority key identifier: 99:44:07:8B:40:77:2B:17:2C:70:46:E7:44:62:04:98:0C:EA:E1:39
Certificate issuer: /CN=9944078b40772b172c7046e7446204980ceae139
Certificate serial: 0194BD4EAC45B6080505D93EB8BB4A61AF53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mUQHi0B3KxcscEbnRGIEmAzq4Tk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/048df6-bccd-4885-8f43-4dc2071a5bf1/1/mUQHi0B3KxcscEbnRGIEmAzq4Tk.mft
Manifest number: 1400
Signing time: Fri 31 Jan 2025 17:00:37 +0000
Manifest this update: Fri 31 Jan 2025 17:00:37 +0000
Manifest next update: Sat 01 Feb 2025 17:00:37 +0000
Files and hashes: 1: Ku7W6RCmGf1FMZYF6bxZkcHlJ3U.roa (hash: yodxfHzeCCrONRmxjgNBHi9TEwJB+PIep9C2GIrnRgo=)
2: mUQHi0B3KxcscEbnRGIEmAzq4Tk.crl (hash: 1uMGbHkAJ6TVnWwwlBcyjLrtjLyr6cUsOFTS0oe08eQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:ac:45:b6:08:05:05:d9:3e:b8:bb:4a:61:af:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9944078b40772b172c7046e7446204980ceae139
Validity
Not Before: Jan 31 17:00:37 2025 GMT
Not After : Feb 1 17:00:37 2025 GMT
Subject: CN=b10f20c48d43f77a765d0b4ee6d67772ff01fee2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:45:5c:29:f4:1f:2a:4a:59:b6:b8:de:1d:7d:
45:07:20:8b:95:25:ac:3e:24:16:27:ba:20:96:1f:
e6:c2:83:e3:b5:d4:a0:2a:9c:89:91:6c:c8:92:55:
f6:5b:1a:3c:5e:77:70:73:e3:d6:73:37:cc:da:cd:
44:db:cf:b8:b1:29:dc:70:ae:64:5f:03:e4:e5:df:
c0:88:e6:10:1e:41:41:dc:f6:d8:19:21:61:0c:58:
1a:e8:34:68:bc:ba:af:34:1c:e5:c1:f9:f1:4b:9a:
a5:c0:17:70:66:a6:8b:4c:58:ab:ec:be:a7:f1:06:
e9:64:f4:a8:93:e6:b0:b2:99:5a:07:b1:67:f2:c7:
62:5b:29:3a:cf:aa:55:92:78:96:16:e3:44:40:46:
03:45:12:91:ab:62:2d:ce:18:4f:3b:25:4d:ea:ec:
23:cd:1f:59:1c:58:13:94:c5:16:0d:8d:f6:f7:e1:
e5:ba:1f:18:f9:13:a4:20:ed:45:7e:f2:9b:74:68:
6e:4b:5d:b3:c8:e3:40:57:96:99:4d:72:9b:fb:cf:
5e:b1:2b:99:b4:73:19:b4:2b:83:81:f7:3b:99:04:
ae:f1:13:5a:8e:df:a2:68:0e:95:2f:2d:6c:50:84:
7c:9b:5f:a0:36:91:2c:6f:17:65:94:bd:91:3c:9b:
ed:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:0F:20:C4:8D:43:F7:7A:76:5D:0B:4E:E6:D6:77:72:FF:01:FE:E2
X509v3 Authority Key Identifier:
keyid:99:44:07:8B:40:77:2B:17:2C:70:46:E7:44:62:04:98:0C:EA:E1:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mUQHi0B3KxcscEbnRGIEmAzq4Tk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/048df6-bccd-4885-8f43-4dc2071a5bf1/1/mUQHi0B3KxcscEbnRGIEmAzq4Tk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/048df6-bccd-4885-8f43-4dc2071a5bf1/1/mUQHi0B3KxcscEbnRGIEmAzq4Tk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:0f:57:f6:ff:8d:6f:db:d0:f0:ee:28:92:82:e9:e2:b1:e4:
c8:ad:da:0a:6d:94:3b:a9:69:ae:39:22:87:36:7a:d0:79:16:
87:be:f4:4b:b0:42:71:a8:6e:75:92:1e:53:e5:34:3e:9d:ee:
bb:1a:a6:42:3e:83:6b:c5:d8:11:28:56:98:e1:44:3e:4d:26:
ad:ae:da:1d:c1:c7:df:7d:d9:9c:db:32:99:f5:fb:df:6c:1f:
03:3e:2c:23:48:94:23:e0:54:35:12:40:83:e5:d5:88:80:ef:
15:21:80:a9:4d:2e:c6:08:76:13:40:82:ee:d7:04:e4:71:88:
40:21:d2:e5:cb:d8:35:54:e0:ed:ca:e7:66:5c:c8:98:e5:4f:
82:e3:da:7b:d6:c9:79:6d:8f:76:bc:eb:93:cf:90:a9:59:9a:
73:5b:94:fe:42:38:38:09:a9:b9:9f:55:19:13:68:dc:00:21:
71:bb:74:34:b0:7c:18:62:85:02:c4:00:b4:af:dc:7c:db:73:
3f:42:fa:ef:17:5d:76:fa:aa:1d:c5:7d:ad:07:93:f3:97:13:
2c:bd:fe:91:66:de:b8:35:fd:45:8f:e5:c7:a7:4a:d6:05:0e:
53:38:3e:c6:69:01:59:77:73:4d:e5:04:a0:52:8d:11:73:1b:
7e:fd:16:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:22 2025 by rpki-client