Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/504bfb-2941-447f-9c5e-c0f9f3d66872/1/mLERYbntS7CKACbVz9H-yWh8GcM.mft
File: mLERYbntS7CKACbVz9H-yWh8GcM.mft (raw, json)
Hash identifier: 10Exj6lbGjCA4ym4BO6VMeCuBOdzvp/1QLSPMRkfpg4=
Subject key identifier: B5:70:26:A5:99:1D:92:4D:FF:13:82:F5:8E:50:7A:5C:BF:0C:07:E9
Authority key identifier: 98:B1:11:61:B9:ED:4B:B0:8A:00:26:D5:CF:D1:FE:C9:68:7C:19:C3
Certificate issuer: /CN=98b11161b9ed4bb08a0026d5cfd1fec9687c19c3
Certificate serial: 0194BCE0BAE45B67F133279D2F9569111E8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mLERYbntS7CKACbVz9H-yWh8GcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/504bfb-2941-447f-9c5e-c0f9f3d66872/1/mLERYbntS7CKACbVz9H-yWh8GcM.mft
Manifest number: 0613
Signing time: Fri 31 Jan 2025 15:00:31 +0000
Manifest this update: Fri 31 Jan 2025 15:00:31 +0000
Manifest next update: Sat 01 Feb 2025 15:00:31 +0000
Files and hashes: 1: mLERYbntS7CKACbVz9H-yWh8GcM.crl (hash: I5knGyZN6QdjgIcB2WqIsou9PgWTT9llRZ2aFE8HdcM=)
2: x61cbfT7RvhEfVSD3Yzd6Sqt3eg.roa (hash: nkg8d2JuPVPfqk0kcc5OXRrb5PIvthJQYUpxPMl5/LU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:ba:e4:5b:67:f1:33:27:9d:2f:95:69:11:1e:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98b11161b9ed4bb08a0026d5cfd1fec9687c19c3
Validity
Not Before: Jan 31 15:00:31 2025 GMT
Not After : Feb 1 15:00:31 2025 GMT
Subject: CN=b57026a5991d924dff1382f58e507a5cbf0c07e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:01:cf:0c:93:74:89:2c:05:c9:35:ba:88:2f:
e9:88:03:61:ba:38:56:7e:bb:09:ea:e2:72:c9:ff:
d9:7e:61:7f:58:0e:ca:7f:be:cc:1f:62:be:b5:85:
c9:94:af:5f:8a:3f:29:d1:c5:62:d1:21:50:77:77:
50:43:e0:8a:81:ff:a5:7c:8e:e1:00:cc:40:22:e7:
df:a3:15:14:3b:6f:9d:6b:f5:89:9a:28:f4:3a:25:
0e:03:89:54:ab:8b:bb:ca:38:b3:0a:05:f0:41:90:
db:c0:b1:ba:8d:e0:89:33:c4:8c:a8:75:78:10:97:
3a:cc:3b:7e:d3:5e:5c:bd:ba:a5:12:cb:09:25:57:
ac:07:02:e8:26:96:7e:91:91:f2:d4:05:28:17:11:
b8:a9:d7:7f:ab:f6:08:83:4b:20:a4:41:5a:49:cb:
21:9f:f5:d1:57:47:d7:2a:4c:1d:e0:45:11:3e:c9:
eb:20:17:0f:56:b7:11:8e:5b:a0:84:a4:74:ca:89:
5e:ee:5f:74:b9:34:dd:71:88:59:97:ce:42:cf:c7:
02:c2:86:82:b4:3d:66:31:3c:fa:55:ea:99:eb:ef:
a3:6c:ed:56:62:12:d7:08:8c:48:2c:1c:11:4a:bc:
75:2d:57:02:79:7b:7d:45:b1:42:ae:7f:2c:2b:56:
ca:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:70:26:A5:99:1D:92:4D:FF:13:82:F5:8E:50:7A:5C:BF:0C:07:E9
X509v3 Authority Key Identifier:
keyid:98:B1:11:61:B9:ED:4B:B0:8A:00:26:D5:CF:D1:FE:C9:68:7C:19:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mLERYbntS7CKACbVz9H-yWh8GcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/504bfb-2941-447f-9c5e-c0f9f3d66872/1/mLERYbntS7CKACbVz9H-yWh8GcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/504bfb-2941-447f-9c5e-c0f9f3d66872/1/mLERYbntS7CKACbVz9H-yWh8GcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:90:13:5a:2f:8a:97:d3:dc:5b:6f:82:c4:36:ca:c7:aa:24:
04:61:21:da:25:a1:ad:a6:24:09:fb:f0:e0:d0:9a:73:51:e0:
03:95:0c:4a:eb:d4:09:aa:fc:ec:30:86:3b:4e:fe:a9:12:50:
e9:97:25:78:97:fa:1f:ff:f5:0f:ae:0e:d1:24:9c:75:d5:92:
b5:05:e1:80:75:dc:4e:1c:b0:32:e6:c2:91:2b:7d:00:8d:23:
91:23:1b:13:1e:23:5f:f3:07:18:51:77:c0:c4:be:b7:06:b6:
f8:3f:69:ec:37:ec:c1:70:34:4b:8d:5e:2a:c6:7a:5b:e7:2a:
fe:91:e4:8f:16:74:47:11:ea:e9:90:26:09:20:0d:7a:92:a2:
b8:3d:2e:da:41:3c:52:9f:4f:15:a5:ba:e9:aa:c4:35:d0:cc:
40:b8:4b:9d:a7:09:da:b7:3c:bd:f4:7d:1c:ce:36:23:d7:fa:
1d:c7:5f:47:3d:99:9a:b6:3d:0b:c8:60:27:a1:6f:61:a8:cc:
d1:8a:41:ea:c2:e3:0b:fe:64:ba:ec:15:3f:bc:a8:c5:13:28:
24:4c:77:7c:02:eb:2c:7a:92:30:19:52:3c:b1:1b:42:26:13:
7c:a7:35:1d:bd:24:1a:36:2e:92:95:79:0b:9a:54:6a:89:bc:
40:4a:75:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:30 2025 by rpki-client