Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/59d987-fa5d-406f-9c6a-1d6076e0e290/1/M12DGvzJ10zPPuQKDraPmQhbmN0.mft
File: M12DGvzJ10zPPuQKDraPmQhbmN0.mft (raw, json)
Hash identifier: N2+IRj2IMu8GLLhBqZ3LK6duqYve/Upul7T49ZpXwi4=
Subject key identifier: 3A:0C:AA:11:39:F5:13:FB:DF:23:04:86:7D:93:95:6F:06:82:E4:11
Authority key identifier: 33:5D:83:1A:FC:C9:D7:4C:CF:3E:E4:0A:0E:B6:8F:99:08:5B:98:DD
Certificate issuer: /CN=335d831afcc9d74ccf3ee40a0eb68f99085b98dd
Certificate serial: 0194BC04DFB3546C98E659C1E4C597158BE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M12DGvzJ10zPPuQKDraPmQhbmN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/59d987-fa5d-406f-9c6a-1d6076e0e290/1/M12DGvzJ10zPPuQKDraPmQhbmN0.mft
Manifest number: 08E0
Signing time: Fri 31 Jan 2025 11:00:23 +0000
Manifest this update: Fri 31 Jan 2025 11:00:23 +0000
Manifest next update: Sat 01 Feb 2025 11:00:23 +0000
Files and hashes: 1: M12DGvzJ10zPPuQKDraPmQhbmN0.crl (hash: d1VBnWkdbl3ldq+RK8rshtYoPUrkHmqHtwEU2/98isY=)
2: R9RvWbhDm0SQa4wbE9QSWeXh3Vk.roa (hash: ErtYPmRmXoAaumaJ3Qu1+zPb7HB9aNdfUQEtd+bYSjU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:df:b3:54:6c:98:e6:59:c1:e4:c5:97:15:8b:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=335d831afcc9d74ccf3ee40a0eb68f99085b98dd
Validity
Not Before: Jan 31 11:00:23 2025 GMT
Not After : Feb 1 11:00:23 2025 GMT
Subject: CN=3a0caa1139f513fbdf2304867d93956f0682e411
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:69:87:9e:c0:55:ba:7f:40:59:70:1d:4e:30:
15:aa:5b:4d:2d:b9:cc:9f:17:64:0b:ac:22:64:bd:
4d:ab:e1:f4:24:0e:ad:bd:b9:cf:ab:4c:c4:80:ca:
b9:6e:2f:ac:bf:21:ea:13:2b:a9:c6:c9:f3:86:0f:
1e:51:8a:77:77:ed:6b:22:4d:e6:72:5c:6e:2d:b9:
05:8d:66:16:5a:e9:c4:2f:94:b7:ea:54:1e:ff:35:
9e:26:9e:11:46:4a:d2:30:0f:c3:7e:42:1d:b5:2e:
db:4f:c4:8f:17:4e:98:15:2d:d8:7a:69:9e:78:12:
51:4d:77:60:2b:fd:93:f6:19:a8:f4:0f:07:7c:7d:
bf:f2:bc:9a:26:d3:b3:30:8a:52:55:26:bc:a8:5e:
d2:65:bf:47:06:43:3c:e3:bc:f9:d0:ad:8a:9e:61:
62:83:4c:02:3b:6b:a6:6e:c9:60:a7:4e:3e:06:8b:
9f:b5:17:e1:ef:b6:47:81:22:54:21:ff:0c:c0:c4:
ab:c3:71:2f:54:0a:16:5a:2b:13:03:50:b2:fb:2c:
1a:d7:64:91:c3:50:91:04:3e:98:eb:09:78:a8:7f:
ae:23:b5:76:58:a2:2b:9b:ae:9e:fb:08:08:53:82:
e7:a4:57:83:5a:c8:3a:52:42:7f:0c:18:c3:b0:8c:
03:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:0C:AA:11:39:F5:13:FB:DF:23:04:86:7D:93:95:6F:06:82:E4:11
X509v3 Authority Key Identifier:
keyid:33:5D:83:1A:FC:C9:D7:4C:CF:3E:E4:0A:0E:B6:8F:99:08:5B:98:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M12DGvzJ10zPPuQKDraPmQhbmN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/59d987-fa5d-406f-9c6a-1d6076e0e290/1/M12DGvzJ10zPPuQKDraPmQhbmN0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/59d987-fa5d-406f-9c6a-1d6076e0e290/1/M12DGvzJ10zPPuQKDraPmQhbmN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:a5:04:f7:64:b1:2b:ff:95:7f:4b:14:9c:51:99:14:f6:83:
d5:1d:3d:bb:90:b2:b8:4d:ea:d4:08:1b:dd:f5:69:d8:32:11:
17:be:43:93:4d:c5:52:44:8b:bd:ff:78:04:9c:a7:e9:ac:99:
c1:89:64:de:b2:6f:c2:b7:27:74:a8:1f:8c:87:4c:68:98:df:
6c:69:d5:5d:fc:1f:b2:e2:20:9f:a9:c4:8e:fc:31:3d:36:24:
d0:ef:33:5a:75:5d:07:1d:55:7b:ef:86:fe:09:3e:56:38:3e:
dd:69:93:60:ec:c9:cd:b4:aa:fd:fd:11:74:e8:c5:0b:7f:47:
f6:f2:f5:d7:8c:6b:f2:26:4d:14:68:3d:1f:a7:7a:a2:df:32:
56:a2:37:af:67:cb:1c:96:6a:7f:98:54:fa:3f:69:ec:5f:cc:
89:47:02:3e:cd:c5:9e:65:72:21:87:5b:6d:2f:6e:3a:d5:7e:
12:c4:da:a5:59:bb:09:6b:65:75:82:a8:e1:56:1c:f2:bc:81:
eb:ba:2c:6a:19:ab:0e:a8:44:5e:9f:8e:48:dd:d0:e0:d1:04:
ba:f6:9c:0c:5f:bb:62:f8:6c:b4:50:de:2c:cf:67:1f:4a:36:
1d:61:65:d6:1c:33:80:5a:98:36:ff:63:75:89:16:df:2f:57:
14:66:89:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:38 2025 by rpki-client