Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/c28ebc-749f-48f6-89a2-edc316222644/1/mF1HL6U4IE8cI-i2p1gHO4DPwZk.mft
File: mF1HL6U4IE8cI-i2p1gHO4DPwZk.mft (raw, json)
Hash identifier: LY0PcMcYO2pUObDun7M3ry3OKgzh4Gym3k+eTw05sJM=
Subject key identifier: 62:6D:81:67:D1:BE:1A:15:3F:32:BD:66:01:AE:50:7B:78:A5:2E:85
Authority key identifier: 98:5D:47:2F:A5:38:20:4F:1C:23:E8:B6:A7:58:07:3B:80:CF:C1:99
Certificate issuer: /CN=985d472fa538204f1c23e8b6a758073b80cfc199
Certificate serial: 0194BC3C421E92A3C8511618BE05B98E826F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mF1HL6U4IE8cI-i2p1gHO4DPwZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/c28ebc-749f-48f6-89a2-edc316222644/1/mF1HL6U4IE8cI-i2p1gHO4DPwZk.mft
Manifest number: 0FFC
Signing time: Fri 31 Jan 2025 12:00:53 +0000
Manifest this update: Fri 31 Jan 2025 12:00:53 +0000
Manifest next update: Sat 01 Feb 2025 12:00:53 +0000
Files and hashes: 1: AzENH95bt8URAYkHoVsIpFCsCKo.roa (hash: AH2b85dRr2FxufgtlMVISLL90V2KJDLxN1PjWzu3Llc=)
2: mF1HL6U4IE8cI-i2p1gHO4DPwZk.crl (hash: 7cTR4Bhk5lF60iD4kiGqvkKUtDYXCb59Ai1UReJRB6I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:42:1e:92:a3:c8:51:16:18:be:05:b9:8e:82:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=985d472fa538204f1c23e8b6a758073b80cfc199
Validity
Not Before: Jan 31 12:00:53 2025 GMT
Not After : Feb 1 12:00:53 2025 GMT
Subject: CN=626d8167d1be1a153f32bd6601ae507b78a52e85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:a1:9f:eb:64:0d:6a:ac:a9:6e:cb:76:d9:ba:
47:80:a2:0b:ba:d1:8c:66:2a:1f:61:de:dd:18:52:
a1:8d:49:fb:27:bd:4e:af:c5:d5:ac:4e:e6:50:04:
d0:3c:04:91:68:45:a1:aa:37:66:15:7b:68:50:b3:
a1:96:d6:ea:60:4d:f8:72:2c:d4:ee:27:46:5d:0c:
63:92:41:87:0e:14:77:18:82:9d:2f:35:6a:35:52:
9f:83:32:8b:2c:ba:c6:a0:f8:0e:29:2f:c2:5a:d5:
04:7b:80:fe:4e:7d:cd:e5:99:e4:69:3b:d0:a8:7d:
62:5a:8d:17:61:a7:1f:07:78:d8:4a:a5:29:31:c2:
fa:d2:b7:71:ce:f5:b9:34:e4:04:96:14:a4:a9:5c:
61:a6:4a:fe:08:a3:01:5d:c1:42:8e:f5:11:fd:4d:
ac:78:50:19:ce:ca:57:3d:4c:1e:49:a1:86:f5:ed:
7c:d8:3c:e0:33:8b:43:79:45:d5:04:0e:4e:05:b5:
fa:68:c3:16:60:7b:36:5b:81:00:ed:69:04:90:ba:
0f:b9:24:22:2d:7b:74:a6:46:8e:a6:ad:04:a3:a4:
bf:53:32:4a:7d:05:76:bd:b2:2c:a6:df:a9:79:c1:
44:0e:20:a2:97:b5:7f:d9:2b:4f:5d:c6:3f:bc:81:
77:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:6D:81:67:D1:BE:1A:15:3F:32:BD:66:01:AE:50:7B:78:A5:2E:85
X509v3 Authority Key Identifier:
keyid:98:5D:47:2F:A5:38:20:4F:1C:23:E8:B6:A7:58:07:3B:80:CF:C1:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mF1HL6U4IE8cI-i2p1gHO4DPwZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/c28ebc-749f-48f6-89a2-edc316222644/1/mF1HL6U4IE8cI-i2p1gHO4DPwZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/c28ebc-749f-48f6-89a2-edc316222644/1/mF1HL6U4IE8cI-i2p1gHO4DPwZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:e7:ba:f6:96:ae:31:46:21:3d:36:a5:0c:c9:0d:3f:b3:f8:
53:13:04:9d:1f:0c:2a:34:06:65:d2:c6:bd:e7:5d:f6:83:45:
1a:d5:d0:ef:34:c9:65:32:53:d6:04:ba:6d:7a:cb:5d:48:25:
aa:66:07:02:26:94:d5:dc:db:cf:d5:4c:a3:ce:7b:c7:de:c1:
6c:f4:9b:10:46:1f:3e:19:9e:6f:22:7f:ad:79:32:25:25:56:
45:86:1a:01:f4:29:5a:bf:72:11:66:55:09:60:a0:4b:c3:06:
39:f4:84:a6:29:10:ba:5b:cb:9b:48:0c:ca:51:bb:4a:39:fd:
68:ee:6a:6f:a8:b3:32:16:46:a1:40:c3:cd:f7:48:96:d8:21:
45:dc:f4:22:0a:eb:72:30:65:0d:24:80:97:ec:4f:f8:32:0a:
30:35:0e:d4:5d:f9:f4:40:e8:d8:e7:9c:c6:cb:04:70:30:c2:
a2:e2:8f:a9:cc:77:c8:07:4d:9e:bf:9e:dc:eb:d6:a6:98:8e:
54:71:d4:56:ae:28:ed:44:e6:81:84:ee:ac:fb:4e:d9:3c:e6:
94:84:69:83:e6:86:ad:c0:51:a0:ea:06:06:02:e8:d3:93:21:
9f:90:88:40:e7:b5:f0:47:8b:7f:f1:f5:97:9c:8b:d4:d3:9d:
0c:c3:33:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:17:52 2025 by rpki-client