Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/428911-8816-4f11-97a6-4882e6b568b2/1/rM-ri4kwEKG14lBy4dRWkEST9S0.mft
File: rM-ri4kwEKG14lBy4dRWkEST9S0.mft (raw, json)
Hash identifier: FboZzcnfur9F/3u0RN+8WNv37coPBVPYIiTp0q+r3tg=
Subject key identifier: 98:55:4C:84:58:48:3F:40:64:0A:55:9A:F1:F0:1D:9A:03:B2:FD:A5
Authority key identifier: AC:CF:AB:8B:89:30:10:A1:B5:E2:50:72:E1:D4:56:90:44:93:F5:2D
Certificate issuer: /CN=accfab8b893010a1b5e25072e1d456904493f52d
Certificate serial: 0194BC3BC13DD28F1CE22DCA2D0E73B316EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rM-ri4kwEKG14lBy4dRWkEST9S0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/428911-8816-4f11-97a6-4882e6b568b2/1/rM-ri4kwEKG14lBy4dRWkEST9S0.mft
Manifest number: 0CEE
Signing time: Fri 31 Jan 2025 12:00:20 +0000
Manifest this update: Fri 31 Jan 2025 12:00:20 +0000
Manifest next update: Sat 01 Feb 2025 12:00:20 +0000
Files and hashes: 1: 1-3Y-4ahWm1ezt431zCYGOBUyQvs.roa (hash: zupu0GMNILT7rH6BKtk5nw5qlb8oVDhhuZpZjAfbi5M=)
2: rM-ri4kwEKG14lBy4dRWkEST9S0.crl (hash: JmKqbQLAB5wFUKdlR4zzm7ngwTUqFytw4Zc2hPoYqJw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:c1:3d:d2:8f:1c:e2:2d:ca:2d:0e:73:b3:16:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=accfab8b893010a1b5e25072e1d456904493f52d
Validity
Not Before: Jan 31 12:00:20 2025 GMT
Not After : Feb 1 12:00:20 2025 GMT
Subject: CN=98554c8458483f40640a559af1f01d9a03b2fda5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:8e:1e:b9:f8:6b:85:98:23:d9:fa:0c:ae:3e:
5e:bc:21:e5:84:a7:36:6a:16:2a:9d:40:19:92:8e:
9a:49:3d:3d:8c:9b:99:82:ca:d1:c6:67:d6:f1:92:
b3:91:9a:0a:19:19:b5:44:7e:99:3b:ab:e5:c9:c7:
ad:0e:8c:91:ca:b0:a0:ac:ab:d4:7c:58:48:99:43:
cd:7f:89:f4:74:ee:59:4b:47:76:e7:6e:46:e1:c7:
59:ed:c8:38:4c:92:f3:b2:ba:d7:c8:6a:e6:65:c5:
3c:1f:1a:36:1f:b3:e7:e0:de:32:2d:bf:18:ce:fc:
ff:00:e3:e1:b5:d0:4b:e3:44:f7:7f:b8:9f:91:a1:
f2:ef:a1:9a:d8:94:95:fe:b5:7f:a0:e5:7c:62:dd:
9a:eb:57:60:20:fe:1e:55:3a:a0:1a:87:6c:8d:c4:
7f:c0:56:86:47:20:91:92:19:b8:3a:6f:79:ee:70:
80:ff:cd:ac:01:42:4f:fb:11:a7:a5:36:bc:09:b6:
be:05:42:ea:bd:9a:68:38:65:eb:07:78:a9:a2:3a:
e7:94:97:c1:0c:7d:dc:4d:1a:50:fa:ba:25:71:65:
99:93:b6:82:1f:f7:d4:27:c8:e2:61:fc:e1:eb:5c:
10:1d:b8:46:ed:10:9c:6e:f4:dd:74:f3:f7:b7:53:
4a:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:55:4C:84:58:48:3F:40:64:0A:55:9A:F1:F0:1D:9A:03:B2:FD:A5
X509v3 Authority Key Identifier:
keyid:AC:CF:AB:8B:89:30:10:A1:B5:E2:50:72:E1:D4:56:90:44:93:F5:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rM-ri4kwEKG14lBy4dRWkEST9S0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/428911-8816-4f11-97a6-4882e6b568b2/1/rM-ri4kwEKG14lBy4dRWkEST9S0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/428911-8816-4f11-97a6-4882e6b568b2/1/rM-ri4kwEKG14lBy4dRWkEST9S0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:7d:77:8a:cd:e7:ee:59:b6:f8:c3:9c:ec:29:53:51:d7:aa:
d1:16:aa:50:4b:fe:33:5a:c9:3f:af:ec:85:ee:a9:e9:2f:81:
1c:dc:05:e5:6c:aa:aa:eb:4a:5a:0e:9e:d4:a7:9e:48:5e:5e:
42:fb:a3:05:2e:3d:d4:90:fd:0d:c8:3f:e4:a5:32:50:8a:12:
70:1f:4b:69:75:30:5e:df:0b:36:19:0b:17:0a:27:7c:c8:e3:
a0:31:3f:97:3b:36:50:a4:a7:7e:ac:f9:a5:54:00:5e:88:2d:
78:a9:e3:13:ef:fc:23:18:42:4d:d2:a2:4e:95:19:1e:95:94:
d3:1a:11:bd:5e:d4:bc:d3:ba:bb:3e:b3:c1:bf:f0:81:72:c1:
eb:10:c6:28:d3:0b:82:a2:a0:cf:dc:6b:fe:aa:6a:bb:fc:89:
b6:75:1f:d5:5a:78:3d:0f:25:05:08:66:fa:9b:30:48:ea:f4:
d1:d8:f3:65:c6:bf:1b:58:bf:a7:e1:db:96:40:16:76:26:dc:
4e:d4:1e:d9:3b:33:a1:2e:4f:37:91:91:66:48:95:cb:ec:20:
a1:1f:26:3d:36:9d:22:d8:b5:43:f2:96:e3:23:16:bb:a0:c2:
76:dd:cd:ac:da:ba:98:83:7c:b7:c3:fe:7e:16:a9:91:0f:42:
89:22:88:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:10:41 2025 by rpki-client