Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/61c61d-5ed8-4766-9b4b-056b9c231f34/1/mSgtd8Zi5ou4foMzi3ata-rZMYU.mft
File: mSgtd8Zi5ou4foMzi3ata-rZMYU.mft (raw, json)
Hash identifier: aXw54BPHw1IaI5jnaZMUvAT2Ps9NdHURv+qmX0pBWgY=
Subject key identifier: DF:2C:E5:9C:6A:6B:B4:FC:36:0F:6E:5C:75:7F:25:2B:F7:44:DA:12
Authority key identifier: 99:28:2D:77:C6:62:E6:8B:B8:7E:83:33:8B:76:AD:6B:EA:D9:31:85
Certificate issuer: /CN=99282d77c662e68bb87e83338b76ad6bead93185
Certificate serial: 0194BD854202DCC48A89E77960E54AB9D4D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mSgtd8Zi5ou4foMzi3ata-rZMYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/61c61d-5ed8-4766-9b4b-056b9c231f34/1/mSgtd8Zi5ou4foMzi3ata-rZMYU.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 18:00:14 +0000
Manifest this update: Fri 31 Jan 2025 18:00:14 +0000
Manifest next update: Sat 01 Feb 2025 18:00:14 +0000
Files and hashes: 1: TAIaujQ4VKKsXuUakY0dKEcAcGs.roa (hash: d9TADe0Qn4Oy08MasSNafdYWP3qjs55v/m6HHzPTGmc=)
2: mSgtd8Zi5ou4foMzi3ata-rZMYU.crl (hash: k9axN8ULAIFnPjcEHZfeyiMgzNfELMb7bcphS+PZ1j4=)
3: osc7ldM1EyAIq-Pc65jfOVsDsEo.roa (hash: jLW59X/F/Mi9You64kz4gdG8TC0tIrDCV1yujScQLmQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:42:02:dc:c4:8a:89:e7:79:60:e5:4a:b9:d4:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99282d77c662e68bb87e83338b76ad6bead93185
Validity
Not Before: Jan 31 18:00:14 2025 GMT
Not After : Feb 1 18:00:14 2025 GMT
Subject: CN=df2ce59c6a6bb4fc360f6e5c757f252bf744da12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:38:9f:f3:cf:5d:98:a5:1a:5c:c5:56:6b:34:
25:ab:c1:75:97:3d:51:02:9c:20:07:1e:e0:67:cd:
e0:4c:8f:27:54:7c:a3:f6:6b:79:79:2a:c1:f5:e1:
48:4e:8c:6f:66:0c:9e:42:ad:af:20:6d:64:0d:ce:
b9:b8:3f:36:39:49:d7:e1:e9:c7:54:35:db:24:a9:
9b:57:66:cd:97:bd:fc:24:02:a4:bd:47:5b:f8:f4:
00:c4:26:99:90:35:5d:19:74:51:0f:00:de:c5:3b:
36:90:40:dd:b4:12:3e:a5:af:ec:97:91:a2:89:0a:
af:70:9d:7a:72:85:c6:7d:dd:05:47:9a:fd:cc:e1:
4f:16:49:47:9e:8f:9c:2f:eb:94:6d:6c:b9:6b:e1:
1f:f0:1f:6e:fb:80:af:05:ce:29:07:d5:10:8d:be:
c5:c1:74:b7:a8:dc:ee:3b:c2:2c:1f:d6:b5:b7:2f:
25:ad:7d:7f:5e:af:8c:bb:74:3f:8e:bc:65:2e:db:
bd:2e:52:83:67:04:a8:20:8b:81:54:b2:6b:9d:be:
fb:79:48:30:0b:c3:f6:c3:b5:5b:7f:fa:1b:7e:3e:
fc:ba:f2:b3:c0:9e:3d:70:8d:10:67:37:35:bf:db:
68:91:0d:56:ba:d1:75:3a:fe:19:25:f3:ea:c1:e9:
29:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:2C:E5:9C:6A:6B:B4:FC:36:0F:6E:5C:75:7F:25:2B:F7:44:DA:12
X509v3 Authority Key Identifier:
keyid:99:28:2D:77:C6:62:E6:8B:B8:7E:83:33:8B:76:AD:6B:EA:D9:31:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSgtd8Zi5ou4foMzi3ata-rZMYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/61c61d-5ed8-4766-9b4b-056b9c231f34/1/mSgtd8Zi5ou4foMzi3ata-rZMYU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/61c61d-5ed8-4766-9b4b-056b9c231f34/1/mSgtd8Zi5ou4foMzi3ata-rZMYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:09:85:ac:99:7d:58:18:59:61:cd:c4:1f:31:4e:3d:25:f9:
43:c0:6c:a0:24:69:de:13:ca:48:9a:46:1a:19:9a:55:af:60:
76:c7:98:dd:7e:9e:e2:72:5d:7f:2a:e0:01:e4:67:fd:39:ef:
11:e0:5f:d0:c5:fc:54:df:4e:a3:1e:6f:df:3f:d9:04:1c:47:
5e:b0:ac:92:a7:94:21:90:51:3f:bf:f4:16:70:4a:d7:be:32:
48:45:5b:6e:3b:83:d1:96:75:bb:51:5e:b0:53:5a:58:b5:eb:
de:da:be:ff:92:12:d0:87:47:e2:da:a1:b5:29:c2:69:dd:43:
04:57:67:88:32:0e:2f:91:b3:82:4b:3b:17:dd:37:e8:09:7a:
1a:f1:d7:8a:db:b1:a2:93:b2:5c:ef:3d:72:14:03:28:17:9a:
c0:ab:8f:8a:93:e3:f3:e4:b2:e5:a9:10:3f:cc:84:2f:77:2b:
4e:54:0e:45:f1:69:be:35:22:21:c2:4f:0e:47:c1:8c:c9:e6:
ee:54:24:a8:b4:b0:11:5e:a1:f6:db:56:2a:73:92:7c:c2:18:
d7:05:90:73:e5:88:55:d3:fe:f2:11:46:73:85:3a:55:3d:2f:
11:14:e7:09:b5:e1:f2:4d:de:af:41:d1:0c:5f:e9:52:a4:37:
3d:22:92:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:27 2025 by rpki-client