Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.mft
File: mkjB2ACM3AWdsLJ6qVFHmcBtVEM.mft (raw, json)
Hash identifier: j1tuvBZOUr+/rKmxkN/JoCCVbN9tYw1qLqInh2tnFa8=
Subject key identifier: 6C:58:35:4B:CA:A3:32:77:A7:59:65:98:F4:B7:5C:FE:51:80:F7:B7
Authority key identifier: 9A:48:C1:D8:00:8C:DC:05:9D:B0:B2:7A:A9:51:47:99:C0:6D:54:43
Certificate issuer: /CN=9a48c1d8008cdc059db0b27aa9514799c06d5443
Certificate serial: 0194BCE06BB2BBF1F758EA84D0E15F43B732
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.mft
Manifest number: 0F9B
Signing time: Fri 31 Jan 2025 15:00:11 +0000
Manifest this update: Fri 31 Jan 2025 15:00:11 +0000
Manifest next update: Sat 01 Feb 2025 15:00:11 +0000
Files and hashes: 1: GS3n997-WSAnBFI5sxW4oYhya68.roa (hash: 9uLSgMiqXXeu2TS+gBYSbYKO48DlZM21pWe2MUShNG8=)
2: K1RZ-_Fg9dSZIebCMUhpe6gbgJc.roa (hash: DeEJ/lwM2EUWvyFmV2osr5NnI9rnfMu9oAVwUv2cQPg=)
3: mkjB2ACM3AWdsLJ6qVFHmcBtVEM.crl (hash: oczdOn0vV9Aj4mxOFR0Yui8lfe+w/gI0Tqm+aqaoOf0=)
4: tKjpgYt3F1U92FlxxtExmwv_VJA.roa (hash: PCobIxyuHsntJ/hl1UTuu1qlban1/mIdUKP0z5QY3l0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:6b:b2:bb:f1:f7:58:ea:84:d0:e1:5f:43:b7:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a48c1d8008cdc059db0b27aa9514799c06d5443
Validity
Not Before: Jan 31 15:00:11 2025 GMT
Not After : Feb 1 15:00:11 2025 GMT
Subject: CN=6c58354bcaa33277a7596598f4b75cfe5180f7b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c9:6a:32:f7:00:65:7c:77:bc:1d:4d:fd:8e:
d7:9d:66:50:f8:94:77:91:de:87:0b:f1:74:12:8d:
cc:7e:2f:88:c9:3c:33:42:c1:19:25:40:7b:e9:a5:
a5:fa:17:52:f8:d0:21:f7:7f:0e:24:e2:a4:32:5e:
8d:ab:30:ce:9a:52:5f:60:a8:9e:81:c3:e9:81:51:
ba:93:55:5e:1b:b7:ef:95:a3:60:1c:4b:3c:fc:41:
44:25:2b:f9:a7:00:b5:42:12:f2:64:24:12:0e:03:
b5:3b:28:8b:06:31:37:cc:a9:e6:ae:64:cb:f6:01:
73:d8:af:3e:d8:a0:b5:71:70:11:84:e3:ba:0f:b5:
a1:18:1b:6c:2b:e3:bd:c8:f9:5b:f3:d9:03:c8:a6:
ce:50:b4:39:61:54:70:06:22:cd:20:11:82:b8:51:
25:c2:a8:76:0c:80:d2:59:14:1a:33:0e:08:2a:a0:
a0:44:35:3f:c5:01:89:7c:e0:51:32:1c:7c:69:04:
b4:ce:b9:c9:0a:13:d5:f8:5d:22:38:5b:40:27:50:
f3:d7:6b:25:c6:34:44:14:64:dc:d0:57:0e:84:1d:
09:ad:40:b2:07:0e:57:ca:c5:aa:d6:90:6b:91:ac:
44:dc:bc:13:df:12:b3:fd:e7:48:b8:1a:10:76:ab:
4e:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:58:35:4B:CA:A3:32:77:A7:59:65:98:F4:B7:5C:FE:51:80:F7:B7
X509v3 Authority Key Identifier:
keyid:9A:48:C1:D8:00:8C:DC:05:9D:B0:B2:7A:A9:51:47:99:C0:6D:54:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:9c:6e:f3:57:f8:d5:84:50:87:80:23:a1:ba:8b:c1:22:67:
95:d0:84:25:cd:bb:89:3c:ad:b7:8b:f6:55:80:8a:9b:d7:23:
fb:87:2c:c3:dc:e9:3a:31:07:82:a8:04:99:cb:ca:bc:f6:56:
ab:39:95:46:94:20:bb:84:e0:1a:90:17:0e:ac:ce:13:14:3b:
bb:b1:c6:86:4f:31:b0:d1:d1:27:ba:8e:ed:f0:fd:f8:95:ea:
c3:af:04:ab:aa:e8:5b:df:83:2a:99:e7:b2:46:80:ea:a3:cb:
96:1d:3f:86:9d:ac:5c:20:88:1d:e2:4e:66:9b:27:34:cd:10:
c0:50:5d:f2:a3:40:60:e7:f7:9b:af:ca:67:01:6b:a1:ef:ef:
19:12:c6:03:bd:db:45:bd:45:5a:7e:1f:e8:89:5c:0c:1a:2b:
3d:c9:db:8a:81:7c:a4:9c:e9:84:a4:ca:a7:4e:9e:cd:d0:e0:
51:ea:c6:0e:fa:28:4d:63:83:9a:5c:a6:2d:e2:2b:70:6a:16:
a4:0d:2e:c6:d0:25:e1:b2:56:d0:0b:9a:60:de:7b:6a:a3:69:
ec:75:e1:4c:b9:de:70:0a:f7:f7:25:98:7f:28:8e:0e:30:7e:
74:ae:ef:46:ff:f0:83:0c:16:4e:93:5c:63:d2:42:15:25:45:
41:63:88:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 06:56:13 2025 by rpki-client