Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/316020-9fc5-4b7c-ae41-e9554483ffa7/1/n_M5Y3TL9ddnEl8C3PD5cpYyMJI.mft
File: n_M5Y3TL9ddnEl8C3PD5cpYyMJI.mft (raw, json)
Hash identifier: mjufjUKKoHCW8MxhuwcLbF3y2zHWti7nbCbp4V6fdBM=
Subject key identifier: 47:51:59:A1:EB:FB:B9:22:55:21:CE:D2:39:B9:28:EF:79:16:AD:03
Authority key identifier: 9F:F3:39:63:74:CB:F5:D7:67:12:5F:02:DC:F0:F9:72:96:32:30:92
Certificate issuer: /CN=9ff3396374cbf5d767125f02dcf0f97296323092
Certificate serial: 0194BD854D0483F2C0D399CD5B9F32AB288A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n_M5Y3TL9ddnEl8C3PD5cpYyMJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/316020-9fc5-4b7c-ae41-e9554483ffa7/1/n_M5Y3TL9ddnEl8C3PD5cpYyMJI.mft
Manifest number: 142F
Signing time: Fri 31 Jan 2025 18:00:17 +0000
Manifest this update: Fri 31 Jan 2025 18:00:17 +0000
Manifest next update: Sat 01 Feb 2025 18:00:17 +0000
Files and hashes: 1: VzkNnK8ZZLi3EdFem2ht2MqP6yg.roa (hash: vDh90IOKG2Z4aklRGqaqLJS7/W1wdLFm/VhjhWpb5HU=)
2: n_M5Y3TL9ddnEl8C3PD5cpYyMJI.crl (hash: qoLwUEOW6pxpBP9obh08rOB0bjtNUuZgV82gSVaTH5E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:4d:04:83:f2:c0:d3:99:cd:5b:9f:32:ab:28:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ff3396374cbf5d767125f02dcf0f97296323092
Validity
Not Before: Jan 31 18:00:17 2025 GMT
Not After : Feb 1 18:00:17 2025 GMT
Subject: CN=475159a1ebfbb9225521ced239b928ef7916ad03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:c6:7b:19:98:67:6a:89:d1:d3:ed:4a:60:36:
24:b6:f0:00:4d:42:92:ac:f4:d4:10:b8:76:c0:61:
70:61:f9:b4:57:3e:2e:1f:73:87:ab:76:1a:7f:9a:
b6:e7:b9:8c:ed:21:a8:e7:35:34:bf:d3:1f:3f:9f:
16:39:8f:ac:ee:49:11:56:89:f0:e6:e2:70:22:9e:
3b:1e:1e:d8:3f:80:04:9e:f2:8b:df:0a:5e:81:e9:
44:75:73:07:a4:00:90:b6:3f:0f:42:44:52:e3:c8:
20:24:ee:90:4d:42:ee:d2:97:71:4e:2f:d3:58:e6:
f2:83:69:22:fe:77:f0:93:c4:e8:90:f5:11:57:7e:
a2:8d:04:5f:f4:df:fe:a5:7f:b6:dd:ad:de:aa:cc:
27:09:52:4b:a0:68:da:aa:99:b2:9f:09:41:32:f2:
a7:4d:c9:42:a3:f1:cf:36:ec:58:d8:73:18:c2:09:
49:67:7a:51:a4:50:5b:49:08:38:f3:77:4d:80:cd:
f5:07:02:9c:4d:80:6b:54:94:ba:35:b4:70:0d:ba:
a0:5c:d5:42:bb:dd:78:44:c1:ce:91:9d:95:6c:a6:
b0:c9:b1:48:44:bd:00:93:52:ca:55:b7:80:c8:f6:
b2:1c:2d:d7:9e:45:2f:1e:f0:bf:38:20:98:e1:06:
3e:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:51:59:A1:EB:FB:B9:22:55:21:CE:D2:39:B9:28:EF:79:16:AD:03
X509v3 Authority Key Identifier:
keyid:9F:F3:39:63:74:CB:F5:D7:67:12:5F:02:DC:F0:F9:72:96:32:30:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n_M5Y3TL9ddnEl8C3PD5cpYyMJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/316020-9fc5-4b7c-ae41-e9554483ffa7/1/n_M5Y3TL9ddnEl8C3PD5cpYyMJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/316020-9fc5-4b7c-ae41-e9554483ffa7/1/n_M5Y3TL9ddnEl8C3PD5cpYyMJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:03:e1:96:b8:00:3c:f0:df:a8:7a:94:b0:44:0f:9f:fc:a7:
01:ae:59:5d:66:18:44:84:8b:7b:1a:27:08:2e:12:b6:3f:fd:
ac:f6:11:5b:99:7b:7d:f5:de:00:9c:9e:ae:eb:e1:ae:5f:cb:
f8:ba:5c:45:89:63:42:e5:95:9f:46:a1:2b:20:82:e1:82:69:
3e:84:a8:be:18:33:3c:3c:65:6c:7d:e7:38:b1:72:99:1e:2c:
3a:4c:1d:fc:23:0d:36:99:49:bd:d2:71:04:a4:db:04:bb:aa:
70:20:07:c4:28:56:72:4a:26:55:25:13:f9:b1:3a:3a:a3:13:
07:e2:fd:93:97:74:1d:8a:a2:1e:fc:95:51:1e:4f:76:0d:04:
df:8a:de:e5:df:da:ec:86:30:23:44:f9:ef:b4:32:f5:17:b8:
38:75:e0:9c:70:53:d3:ca:82:ea:8a:65:52:cc:3f:71:3b:be:
e4:eb:a3:3b:7b:3d:3c:d2:ae:8f:0a:e5:4e:e0:f3:c3:de:2f:
1d:37:0b:53:f1:bd:23:1a:54:d7:1a:b3:27:2e:fd:8b:95:71:
91:61:70:0c:45:3c:a1:d3:da:9b:fb:84:7e:96:80:d9:66:35:
7e:55:2d:6e:86:42:f0:19:c4:36:43:5b:8e:2f:33:87:e9:c2:
b0:11:e0:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:14:28 2025 by rpki-client