Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/d505e8-02b3-4d87-94c6-1da4b92799f6/1/mCtWk7gmH7U5_qOxPIFxFfAMGN8.mft
File: mCtWk7gmH7U5_qOxPIFxFfAMGN8.mft (raw, json)
Hash identifier: Q1UX4mgHfQB9pfXyuSOVg1D+1TEXwiBa7+iVE7lPUvg=
Subject key identifier: 6F:F5:F1:09:22:52:64:83:3B:3A:23:CF:B2:2D:0A:75:13:4F:51:E4
Authority key identifier: 98:2B:56:93:B8:26:1F:B5:39:FE:A3:B1:3C:81:71:15:F0:0C:18:DF
Certificate issuer: /CN=982b5693b8261fb539fea3b13c817115f00c18df
Certificate serial: 0194BD4E5CE85CBFC4909462542769DB2162
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCtWk7gmH7U5_qOxPIFxFfAMGN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/d505e8-02b3-4d87-94c6-1da4b92799f6/1/mCtWk7gmH7U5_qOxPIFxFfAMGN8.mft
Manifest number: 039F
Signing time: Fri 31 Jan 2025 17:00:16 +0000
Manifest this update: Fri 31 Jan 2025 17:00:16 +0000
Manifest next update: Sat 01 Feb 2025 17:00:16 +0000
Files and hashes: 1: eVKsEsZr6gB68Zo9TNcu-9I752U.roa (hash: EZGdWjVxX6cyHbSc76sTqplIRnZDqoYAvS/hd1OeT4Q=)
2: mCtWk7gmH7U5_qOxPIFxFfAMGN8.crl (hash: z56Fw3QtxpwJu/GSExbyiAwWyTiTHW+FGRY+LpOkZvE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:5c:e8:5c:bf:c4:90:94:62:54:27:69:db:21:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982b5693b8261fb539fea3b13c817115f00c18df
Validity
Not Before: Jan 31 17:00:16 2025 GMT
Not After : Feb 1 17:00:16 2025 GMT
Subject: CN=6ff5f109225264833b3a23cfb22d0a75134f51e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:0c:af:74:2b:21:c8:5f:f3:dc:5d:24:8c:c7:
08:51:d3:b9:92:ac:a7:22:4c:4e:68:c3:03:c0:f3:
0a:af:dd:5c:df:22:bb:27:f7:ff:b0:62:4e:61:73:
7f:fd:eb:79:ed:63:9f:cf:74:89:3c:ab:77:11:28:
01:97:84:6e:5d:c6:31:73:81:d1:94:8d:a1:33:63:
13:a2:5b:6b:75:ec:d4:3b:74:5b:a2:46:e5:b0:59:
60:25:ee:50:18:42:a5:13:35:62:81:1b:4a:7f:67:
7c:cd:e7:83:c3:f9:16:76:44:df:4a:0a:80:db:30:
2d:6e:d0:d2:53:7f:25:e4:d8:5a:4e:0b:78:72:de:
2e:80:bb:da:37:ea:07:6b:55:45:dc:27:08:75:42:
51:ff:7a:db:c0:58:94:11:75:58:8c:ce:b2:22:b7:
64:12:ff:eb:4c:c1:6d:65:3d:b2:9c:79:0a:8c:30:
b8:fe:b9:c7:ff:2f:1c:7a:0c:2d:16:dc:6f:5a:83:
ac:a4:47:88:78:3a:c7:f5:4b:7a:da:12:43:11:a8:
2e:f4:3e:d9:66:40:a0:eb:d6:bc:37:81:99:f0:2f:
72:7b:7b:b0:e8:3e:f6:fa:3a:3e:11:a5:db:4c:82:
88:56:11:8c:5e:86:af:7b:0a:96:08:4d:75:cd:e1:
79:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:F5:F1:09:22:52:64:83:3B:3A:23:CF:B2:2D:0A:75:13:4F:51:E4
X509v3 Authority Key Identifier:
keyid:98:2B:56:93:B8:26:1F:B5:39:FE:A3:B1:3C:81:71:15:F0:0C:18:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCtWk7gmH7U5_qOxPIFxFfAMGN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/d505e8-02b3-4d87-94c6-1da4b92799f6/1/mCtWk7gmH7U5_qOxPIFxFfAMGN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/d505e8-02b3-4d87-94c6-1da4b92799f6/1/mCtWk7gmH7U5_qOxPIFxFfAMGN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:6b:bf:3a:4a:8a:05:a9:8a:73:87:65:45:97:db:d5:9c:5d:
75:b8:a7:d9:8b:3d:8b:db:70:3e:cb:99:17:e8:dd:22:f6:96:
ca:d7:c5:77:d1:6b:89:fe:05:3c:bc:86:29:a4:47:c1:b3:4e:
8b:38:c4:e1:d9:49:1f:ab:1d:33:0b:da:df:37:38:3d:cf:15:
47:66:e4:45:fb:6c:2e:6b:13:51:01:6d:ce:33:25:bd:91:65:
5b:7b:4d:36:1b:8d:ac:5d:e2:bd:eb:5e:d7:b2:f9:0e:fc:4f:
48:04:50:25:a1:85:73:78:18:1c:7e:15:16:28:8d:57:5f:65:
b0:53:3b:d3:ad:cc:c6:d7:4a:bc:92:94:70:89:e8:48:14:f2:
d1:1a:45:df:f1:3a:6b:7d:65:5b:45:89:f1:41:42:64:76:62:
ce:86:0a:5a:1a:87:bb:f4:b3:d4:d6:75:e7:2b:71:de:a2:83:
b1:46:86:40:7e:fa:1d:40:5c:ac:2c:db:cf:fd:f6:8d:02:e5:
cb:75:09:ad:25:9b:bb:5f:a5:ac:89:4b:e6:01:51:02:c2:46:
27:60:1d:88:e6:60:3c:28:18:51:bc:a1:ad:ae:8d:44:ab:fa:
22:b9:63:2c:73:9d:11:42:68:aa:42:a4:e0:fa:18:b2:e9:8c:
d4:18:c7:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:41:41 2025 by rpki-client