Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/0222d8-8d8a-44c0-a11f-dc0c4f1083c9/1/morKHCZcEygjx4T9qEL3oaBbjLc.mft
File: morKHCZcEygjx4T9qEL3oaBbjLc.mft (raw, json)
Hash identifier: WasdbuZtoaVq2TRJ8QpHy3jgUftbomnCR0SkjfvN/2E=
Subject key identifier: 1B:62:24:00:08:20:F4:69:57:63:DC:B7:EE:59:87:83:90:CC:20:E1
Authority key identifier: 9A:8A:CA:1C:26:5C:13:28:23:C7:84:FD:A8:42:F7:A1:A0:5B:8C:B7
Certificate issuer: /CN=9a8aca1c265c132823c784fda842f7a1a05b8cb7
Certificate serial: 0194BC3C1E690775A40E3449200578D03516
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/morKHCZcEygjx4T9qEL3oaBbjLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/0222d8-8d8a-44c0-a11f-dc0c4f1083c9/1/morKHCZcEygjx4T9qEL3oaBbjLc.mft
Manifest number: 9D
Signing time: Fri 31 Jan 2025 12:00:43 +0000
Manifest this update: Fri 31 Jan 2025 12:00:43 +0000
Manifest next update: Sat 01 Feb 2025 12:00:43 +0000
Files and hashes: 1: PXv4MGw4HfMQV8zuoB-3WTegwaw.roa (hash: GqIG1YKim2qQL71fUd8HU7TowoibLsmIA+NjM1XqDss=)
2: morKHCZcEygjx4T9qEL3oaBbjLc.crl (hash: ILVGyBKdJJ1L692vdmHm91t+hxDdPqdpJjoOX/yad/0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:1e:69:07:75:a4:0e:34:49:20:05:78:d0:35:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a8aca1c265c132823c784fda842f7a1a05b8cb7
Validity
Not Before: Jan 31 12:00:43 2025 GMT
Not After : Feb 1 12:00:43 2025 GMT
Subject: CN=1b6224000820f4695763dcb7ee59878390cc20e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:1e:88:22:9a:ba:90:c5:34:81:cb:2e:44:cc:
b1:15:25:95:8e:41:64:80:81:25:0b:18:d9:a2:c6:
27:67:62:e6:81:9c:48:fd:17:9f:08:7c:b5:c3:8e:
31:3e:03:f0:6e:5a:e0:22:15:9f:d1:3c:28:e2:df:
57:69:7b:bb:5d:96:d3:62:a3:db:56:4c:21:25:55:
3e:5c:11:a2:23:50:92:72:6e:86:9f:e2:75:2b:2c:
2f:96:8d:0c:8e:8b:60:f4:2e:b2:d6:2b:b8:b0:b1:
c6:40:3b:e4:9f:3a:e1:9a:28:93:3d:37:81:f2:48:
4e:e9:39:0e:cc:ce:a1:f3:3e:a8:43:90:b1:87:58:
72:72:a7:9c:a9:e6:85:6d:e7:0a:0b:a5:cb:0d:71:
4e:c3:b1:84:72:79:d3:94:59:15:d9:67:47:64:19:
92:d5:76:5f:e2:a6:60:c6:5d:0e:90:2a:76:19:90:
05:63:84:34:ad:b5:b8:4c:a7:cc:51:88:12:89:b2:
b9:3a:0e:52:ee:d2:99:76:a9:b2:75:2c:96:bb:c4:
ca:b4:0d:78:8c:0d:a1:36:35:4f:1d:31:09:0f:a7:
e7:5c:f9:a9:89:ce:17:c5:37:25:aa:2f:6e:74:62:
22:3a:c2:f1:c0:8c:8b:a4:87:aa:2b:5d:63:65:dc:
ea:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:62:24:00:08:20:F4:69:57:63:DC:B7:EE:59:87:83:90:CC:20:E1
X509v3 Authority Key Identifier:
keyid:9A:8A:CA:1C:26:5C:13:28:23:C7:84:FD:A8:42:F7:A1:A0:5B:8C:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/morKHCZcEygjx4T9qEL3oaBbjLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/0222d8-8d8a-44c0-a11f-dc0c4f1083c9/1/morKHCZcEygjx4T9qEL3oaBbjLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/0222d8-8d8a-44c0-a11f-dc0c4f1083c9/1/morKHCZcEygjx4T9qEL3oaBbjLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:0c:f4:08:8c:58:69:eb:f1:6f:35:56:c6:2d:a4:04:53:71:
15:41:7f:c1:cb:35:21:26:75:8a:77:14:bd:a0:88:56:aa:cb:
93:3f:1a:21:24:3c:81:a2:d7:e7:45:ff:e3:e3:bb:6f:96:43:
2b:90:49:17:0a:b2:9a:50:81:a3:ca:6d:6d:d8:19:e6:00:f3:
06:ec:b7:7e:2b:ec:09:cd:88:ab:c8:d5:cf:3c:6d:48:f0:fc:
a8:5d:75:df:ab:dc:2c:5c:45:df:d2:8d:2d:3d:4c:e4:e7:f7:
89:8c:fe:25:e9:e5:36:2b:6f:d0:25:5e:ff:7a:ea:eb:a9:30:
7a:42:9d:4f:e6:e5:ef:2a:0f:66:53:54:85:2a:1b:5d:80:3d:
5b:51:59:42:6d:df:ca:1d:ad:03:a4:5e:16:82:e0:44:5e:3a:
8b:41:3b:bd:ea:4d:36:19:87:10:be:a5:7d:20:13:cb:95:90:
e5:fc:c7:85:84:25:17:7e:50:78:f8:02:ea:10:e1:08:8b:46:
db:da:7b:5e:7d:36:aa:85:61:e0:5a:70:3d:49:e1:40:a3:0d:
c0:68:24:63:83:d1:60:b7:da:93:0e:80:94:5b:bd:19:40:e2:
86:32:63:fa:f2:ed:de:61:a3:74:98:f2:68:40:09:5e:95:20:
b5:08:31:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:47:16 2025 by rpki-client