Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/93dd43-9933-42ca-afc2-2c1891cacac7/1/mSxuCcGSxVgKSh0pQVDWI3q4kl0.mft
File: mSxuCcGSxVgKSh0pQVDWI3q4kl0.mft (raw, json)
Hash identifier: 0E9khrRH35thYW9ivDMY2wVmk8gIgQe5XqzJspvS8RI=
Subject key identifier: D1:D9:81:D4:BF:88:23:81:A0:03:1C:CF:54:98:13:BC:A5:CA:63:95
Authority key identifier: 99:2C:6E:09:C1:92:C5:58:0A:4A:1D:29:41:50:D6:23:7A:B8:92:5D
Certificate issuer: /CN=992c6e09c192c5580a4a1d294150d6237ab8925d
Certificate serial: 0194BD17DF3A893C9F90B12C92B15A24A72E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mSxuCcGSxVgKSh0pQVDWI3q4kl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/93dd43-9933-42ca-afc2-2c1891cacac7/1/mSxuCcGSxVgKSh0pQVDWI3q4kl0.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 16:00:45 +0000
Manifest this update: Fri 31 Jan 2025 16:00:45 +0000
Manifest next update: Sat 01 Feb 2025 16:00:45 +0000
Files and hashes: 1: djCZyDS3Av-3n9Oi3QzE4yqgYHQ.roa (hash: umRqAsXCH4x+gTRMItrAG7erZAX903krnPo4zn0Ncs0=)
2: kIauAKAEPDGUiqRzZKf1-zzLViU.roa (hash: ajO4l/6tIJY/grZz1/mU3dymnv+IkFvwXNVUf7Kw9ao=)
3: mSxuCcGSxVgKSh0pQVDWI3q4kl0.crl (hash: sq1maP7kOhOjcpkrg+Hh2uX+T9BJ9IvWShqWTgaOqLw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:df:3a:89:3c:9f:90:b1:2c:92:b1:5a:24:a7:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=992c6e09c192c5580a4a1d294150d6237ab8925d
Validity
Not Before: Jan 31 16:00:45 2025 GMT
Not After : Feb 1 16:00:45 2025 GMT
Subject: CN=d1d981d4bf882381a0031ccf549813bca5ca6395
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:54:ce:8a:9a:51:de:05:6b:95:95:92:e0:b2:
ac:c3:52:ae:34:7e:7c:be:f0:ac:ad:9a:b5:41:cb:
5d:f8:7e:f3:5a:67:57:25:2c:e4:be:b9:56:13:ab:
84:55:dc:2e:b4:e3:20:16:ae:8c:7f:92:48:4a:a8:
8c:b9:13:44:00:b9:e4:f6:ff:58:78:d2:06:85:e9:
79:c0:b3:3a:94:a9:53:5e:b6:0c:f8:81:42:3f:c6:
75:c6:25:a9:85:cb:c9:c6:5a:f3:2f:af:68:07:cf:
10:29:e8:38:e6:76:80:3b:03:a8:b5:d4:76:8e:40:
9b:9d:40:a2:80:aa:f6:f2:61:bc:46:22:0a:26:7e:
e3:e7:8d:04:bf:32:30:41:a9:ad:9f:7a:f7:e1:7c:
a7:51:30:a5:e9:8f:6f:cb:c1:b7:4e:eb:a0:89:65:
0d:f4:ef:76:e0:02:45:d7:81:41:14:95:59:7c:33:
05:bc:01:f2:34:0b:87:33:c7:4b:c8:32:78:75:e5:
d9:c5:24:79:ee:a2:f2:9e:e3:ef:f9:95:6a:7e:dc:
ba:cb:43:70:78:21:a4:91:bd:65:08:9b:ab:d4:43:
cb:65:90:69:ce:50:19:3f:42:c9:1a:a6:71:93:31:
90:d3:0e:7d:29:f4:27:aa:a5:51:b0:5e:51:1d:16:
79:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:D9:81:D4:BF:88:23:81:A0:03:1C:CF:54:98:13:BC:A5:CA:63:95
X509v3 Authority Key Identifier:
keyid:99:2C:6E:09:C1:92:C5:58:0A:4A:1D:29:41:50:D6:23:7A:B8:92:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSxuCcGSxVgKSh0pQVDWI3q4kl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/93dd43-9933-42ca-afc2-2c1891cacac7/1/mSxuCcGSxVgKSh0pQVDWI3q4kl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/93dd43-9933-42ca-afc2-2c1891cacac7/1/mSxuCcGSxVgKSh0pQVDWI3q4kl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:5b:e5:eb:29:43:13:b3:f0:d8:a8:1e:c6:ec:b1:5f:d3:a8:
ca:45:84:7f:db:11:97:7b:b5:3d:39:a1:e7:af:65:6b:1f:ac:
60:e6:04:e8:32:12:46:f1:ea:be:b6:16:cb:02:28:71:a5:d4:
f2:1f:60:39:e7:ae:40:97:7d:8f:fa:26:4d:f2:0d:79:79:3f:
a7:63:8d:17:46:2f:a1:4a:40:a7:b7:16:a8:56:94:5e:fe:03:
6b:fe:f2:fd:b6:5a:7b:c3:16:35:b6:a2:b6:d2:49:7f:5e:af:
17:e7:02:de:36:f7:b0:bb:db:b1:40:21:13:4f:68:45:2d:79:
ca:dc:87:34:38:18:a1:67:41:8b:27:11:e7:14:c5:16:cf:fc:
60:15:17:e5:54:79:f4:b4:e1:d9:2d:fb:98:27:69:98:e8:cb:
75:92:a5:ba:74:31:bb:69:ae:97:c0:1b:b3:5d:b3:dc:a7:93:
cc:40:5e:eb:09:01:ff:28:f3:12:57:ae:0f:e1:1a:15:15:0b:
79:95:dd:92:9a:f0:92:0a:f3:6c:10:25:28:97:3f:9b:e3:c4:
c3:a2:df:fb:d6:4c:88:34:91:2f:88:d7:92:7a:c7:50:cd:52:
cf:86:50:43:0c:1d:27:d8:bf:d3:48:da:52:a1:86:fe:39:53:
c3:21:d8:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:06:39 2025 by rpki-client