Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/9a36cc-6dca-4a2a-bf6f-d47bd7d0192f/1/MZ7ds2aRntdfRmDPsOC25fxAFhM.mft
File: MZ7ds2aRntdfRmDPsOC25fxAFhM.mft (raw, json)
Hash identifier: OEcTyz0s1HIhzpZS/JHC8orkTQGHbz8mREYtXf5dWvA=
Subject key identifier: 6F:FE:79:DB:93:EC:88:7D:9E:10:AB:5C:3B:A6:02:FC:D8:32:00:55
Authority key identifier: 31:9E:DD:B3:66:91:9E:D7:5F:46:60:CF:B0:E0:B6:E5:FC:40:16:13
Certificate issuer: /CN=319eddb366919ed75f4660cfb0e0b6e5fc401613
Certificate serial: 0194BD4E53C9A6466C1F44BC0F6F6F7213C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MZ7ds2aRntdfRmDPsOC25fxAFhM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/9a36cc-6dca-4a2a-bf6f-d47bd7d0192f/1/MZ7ds2aRntdfRmDPsOC25fxAFhM.mft
Manifest number: 0AFC
Signing time: Fri 31 Jan 2025 17:00:14 +0000
Manifest this update: Fri 31 Jan 2025 17:00:14 +0000
Manifest next update: Sat 01 Feb 2025 17:00:14 +0000
Files and hashes: 1: 7-NvAjzZCDNIKTeDDn1z2wnsySM.roa (hash: ha7JC+Qd7+z1dgl9rMcZhtfsQI4xudXeagPgQxWUyhc=)
2: MZ7ds2aRntdfRmDPsOC25fxAFhM.crl (hash: QftBQGvRwt9/cMluDTkpeQPl7q/2AMhcnfsW6miMP60=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:53:c9:a6:46:6c:1f:44:bc:0f:6f:6f:72:13:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=319eddb366919ed75f4660cfb0e0b6e5fc401613
Validity
Not Before: Jan 31 17:00:14 2025 GMT
Not After : Feb 1 17:00:14 2025 GMT
Subject: CN=6ffe79db93ec887d9e10ab5c3ba602fcd8320055
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:99:dc:78:ce:c0:f0:f2:89:1c:72:43:1a:67:
d4:8d:f8:36:c8:26:e5:37:ba:c1:49:b1:e7:ec:55:
3b:f8:28:e6:b4:aa:84:c0:9c:a9:10:ab:27:88:9e:
cf:90:d7:08:7e:31:24:40:b2:57:95:fa:5c:98:db:
f4:aa:8d:81:89:8f:9c:40:59:55:47:7c:a8:c0:bb:
1d:29:9a:5c:cb:bd:0d:0b:d7:73:62:c3:27:d8:5b:
f3:51:ae:bd:44:8e:aa:9e:85:5b:81:fc:f7:f5:47:
88:9f:8b:e1:ef:52:e2:58:68:25:5f:83:01:f3:4b:
4f:4d:c9:37:eb:12:d7:98:c8:fd:8b:45:0e:46:44:
5e:9c:47:7b:0e:33:bd:09:10:07:9f:9c:5f:63:a8:
a2:f1:9a:b5:8e:38:e4:d1:42:56:fa:4e:3b:7f:88:
58:b7:8a:48:bc:8a:e7:73:11:89:57:04:66:31:ff:
f2:f0:d6:80:5f:86:9f:6d:01:d3:fb:64:e8:33:ef:
a2:3a:bd:0e:7e:95:75:be:ab:4d:8c:4e:94:c3:c3:
de:58:f9:1f:3e:a1:3c:3d:95:43:59:b4:f9:fd:b6:
db:be:6e:75:b3:49:61:94:30:40:1d:df:d4:d9:a7:
0a:f4:87:24:79:75:ea:10:b4:38:ed:60:8a:a1:a4:
9f:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:FE:79:DB:93:EC:88:7D:9E:10:AB:5C:3B:A6:02:FC:D8:32:00:55
X509v3 Authority Key Identifier:
keyid:31:9E:DD:B3:66:91:9E:D7:5F:46:60:CF:B0:E0:B6:E5:FC:40:16:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MZ7ds2aRntdfRmDPsOC25fxAFhM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/9a36cc-6dca-4a2a-bf6f-d47bd7d0192f/1/MZ7ds2aRntdfRmDPsOC25fxAFhM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/9a36cc-6dca-4a2a-bf6f-d47bd7d0192f/1/MZ7ds2aRntdfRmDPsOC25fxAFhM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:b9:2b:0a:5c:24:8c:e6:69:a8:f0:05:d1:76:8d:c7:ba:89:
49:27:e5:a6:d7:93:98:1c:39:3b:75:fd:2c:7a:de:9f:a8:76:
f4:b6:52:5e:39:d2:b2:a1:13:fc:11:6b:07:fe:b0:4d:5c:8e:
4b:60:7d:c2:8f:a7:7a:84:4f:6e:f1:cf:c7:9b:6e:0c:b3:95:
17:10:3d:a3:89:de:c8:a9:b4:f1:c0:1e:f9:74:d4:a8:be:d7:
52:0e:89:f4:03:65:68:0b:cd:35:22:5c:ae:89:e3:63:75:8d:
30:0d:be:b7:47:68:c1:c3:ec:d5:c0:c6:7f:bd:70:d4:22:d6:
39:80:97:98:e3:02:22:6a:41:1f:ec:29:20:04:77:62:64:d2:
d0:cb:79:f0:f9:c7:88:bf:12:d2:61:1c:10:df:ad:a3:ef:fd:
b2:5e:83:12:c2:e5:8d:88:19:a5:25:49:4e:6a:83:50:d7:38:
49:2d:4a:73:2f:16:10:99:4c:5e:0d:6b:85:bd:f2:73:bc:06:
b2:af:d5:ac:b9:d4:1d:ee:1e:18:2a:e3:88:8e:a5:0b:ed:7a:
f4:8e:90:7e:26:1d:3d:4d:25:58:06:50:bf:f7:13:7d:91:7c:
cf:35:76:06:de:71:f0:2d:e5:24:53:0c:7b:c0:e1:a0:80:2a:
21:4e:51:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:29:39 2025 by rpki-client