Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/33689f-8e48-4bf3-89f5-c76f7b6b0eb6/1/Mf9qIpN-8WQNgxiN_Nersw_Mch4.mft
File: Mf9qIpN-8WQNgxiN_Nersw_Mch4.mft (raw, json)
Hash identifier: 9HXcIjSK7ePfjZoZ8X6v/NxuL9nznw1bHVhjAu8DAFA=
Subject key identifier: 88:A6:BD:E8:5D:8C:58:B1:9B:05:2E:B1:5B:83:4D:22:B6:2C:FD:AB
Authority key identifier: 31:FF:6A:22:93:7E:F1:64:0D:83:18:8D:FC:D7:AB:B3:0F:CC:72:1E
Certificate issuer: /CN=31ff6a22937ef1640d83188dfcd7abb30fcc721e
Certificate serial: 0194BD17F39684671CD8CEFC1B1E992EC60C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mf9qIpN-8WQNgxiN_Nersw_Mch4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/33689f-8e48-4bf3-89f5-c76f7b6b0eb6/1/Mf9qIpN-8WQNgxiN_Nersw_Mch4.mft
Manifest number: 06A2
Signing time: Fri 31 Jan 2025 16:00:51 +0000
Manifest this update: Fri 31 Jan 2025 16:00:51 +0000
Manifest next update: Sat 01 Feb 2025 16:00:51 +0000
Files and hashes: 1: 5_iMF-a8NMa1YPR_P3PyRQQW0y4.roa (hash: WcT24IP06Ufo9Qw11IKoVe7vKY2EcXtQIG8CxBVwap8=)
2: Mf9qIpN-8WQNgxiN_Nersw_Mch4.crl (hash: mnw8MNA1KO7OJXi4Jy1Wj8Jd0leCrB0hP/OILrcQCsI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:f3:96:84:67:1c:d8:ce:fc:1b:1e:99:2e:c6:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31ff6a22937ef1640d83188dfcd7abb30fcc721e
Validity
Not Before: Jan 31 16:00:51 2025 GMT
Not After : Feb 1 16:00:51 2025 GMT
Subject: CN=88a6bde85d8c58b19b052eb15b834d22b62cfdab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:6b:63:12:b8:ac:a0:5e:6c:32:b1:b6:79:03:
a1:b9:20:f2:95:a1:40:b8:8e:cb:6b:9f:d9:87:37:
15:f0:86:ac:2b:06:21:9c:49:d5:30:7e:00:f6:cf:
7a:d4:ab:20:62:43:8a:07:30:02:58:6c:93:e5:f8:
b1:3f:c5:d8:23:a9:6f:27:14:ec:6c:8a:80:09:bc:
f2:31:b3:72:72:7f:34:6f:e9:3f:71:72:35:1c:a3:
d1:45:d5:72:2e:7c:67:34:a4:54:7d:ab:cb:e9:8b:
71:63:4d:65:4c:ce:1a:85:62:b6:00:ee:7f:ee:6d:
e8:ed:04:4f:a5:1b:a6:eb:18:a7:59:d0:31:72:f0:
7b:ce:58:53:69:d2:f3:f4:73:9f:fe:d8:69:b7:f1:
19:50:9c:4e:b3:e1:25:53:40:86:a1:62:4b:8a:75:
0e:7e:03:0a:15:9c:cd:a7:15:13:99:7f:46:00:22:
ea:57:3e:7f:73:ac:ab:47:19:a1:d0:9f:98:c1:27:
3f:d8:d6:ac:ca:f7:d2:3b:07:72:b6:d5:c7:ce:5e:
7a:3f:31:ca:cb:b1:7e:bc:8f:ca:f1:7c:23:6e:96:
f0:f7:16:09:43:51:14:fa:eb:16:aa:72:ee:5b:23:
df:0e:80:dc:e4:e2:d8:51:92:cd:42:58:b5:17:49:
58:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:A6:BD:E8:5D:8C:58:B1:9B:05:2E:B1:5B:83:4D:22:B6:2C:FD:AB
X509v3 Authority Key Identifier:
keyid:31:FF:6A:22:93:7E:F1:64:0D:83:18:8D:FC:D7:AB:B3:0F:CC:72:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mf9qIpN-8WQNgxiN_Nersw_Mch4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/33689f-8e48-4bf3-89f5-c76f7b6b0eb6/1/Mf9qIpN-8WQNgxiN_Nersw_Mch4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/33689f-8e48-4bf3-89f5-c76f7b6b0eb6/1/Mf9qIpN-8WQNgxiN_Nersw_Mch4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:c1:32:46:2c:3f:e5:ec:30:df:74:6d:25:d8:ac:76:62:81:
9b:d7:19:fd:7f:c9:b7:69:9c:13:5e:d2:f1:eb:2f:61:8c:5a:
39:c7:ea:71:b3:d1:e3:a1:11:19:48:41:14:f0:23:68:44:c5:
d3:5b:bd:d8:54:5f:9f:93:8a:05:f2:71:68:df:9c:52:00:57:
bc:ea:86:3f:ab:3a:93:a8:9f:5e:47:35:9d:1d:24:e4:2b:b5:
e8:e7:b0:0b:01:fa:52:21:39:68:88:52:42:10:2c:d3:04:e2:
2c:85:99:e7:27:df:bb:c8:ef:49:07:a6:52:c7:24:b9:75:a2:
17:4f:6d:fb:32:81:1f:d9:40:72:00:af:bf:9e:f2:44:86:e3:
14:81:e2:eb:02:b0:5d:96:20:e9:9e:cd:d5:19:49:ca:43:c5:
1c:13:54:e5:de:a7:45:f0:bf:4f:f2:b5:bc:ec:08:71:ad:5e:
5a:ae:5d:8c:34:4b:05:ef:eb:c6:dd:e1:8e:8c:8d:a6:6b:08:
77:22:25:c8:83:68:92:b2:ab:bb:f8:83:33:ba:be:69:8f:f0:
01:73:46:c7:37:34:0e:61:56:3b:d8:b6:63:45:34:41:28:05:
f0:fd:ab:56:0a:af:8f:90:2a:2b:72:cc:da:4c:1b:30:05:9b:
6e:47:b1:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:05:09 2025 by rpki-client