Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/4f05ce-a382-49a0-9999-e52f70c06c29/1/neeD6azVaZL1g1-0iCGDUAygPIM.mft
File: neeD6azVaZL1g1-0iCGDUAygPIM.mft (raw, json)
Hash identifier: SazkMFWwDzcu/GAkLZ0ZldpdjtAzyZZ6iLZRIqaH8PY=
Subject key identifier: 88:6F:39:36:21:B7:5E:08:ED:B3:E9:B0:B8:64:DD:00:CA:3B:88:5C
Authority key identifier: 9D:E7:83:E9:AC:D5:69:92:F5:83:5F:B4:88:21:83:50:0C:A0:3C:83
Certificate issuer: /CN=9de783e9acd56992f5835fb4882183500ca03c83
Certificate serial: 0194BC3C3AF85EC231774F44443206C8575F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/neeD6azVaZL1g1-0iCGDUAygPIM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/4f05ce-a382-49a0-9999-e52f70c06c29/1/neeD6azVaZL1g1-0iCGDUAygPIM.mft
Manifest number: 03EE
Signing time: Fri 31 Jan 2025 12:00:51 +0000
Manifest this update: Fri 31 Jan 2025 12:00:51 +0000
Manifest next update: Sat 01 Feb 2025 12:00:51 +0000
Files and hashes: 1: ZsqRMpcA5rVpeghbKlpto90ibM8.roa (hash: nVYdBvobjkBIWWz9Jd+uPsYyriFcHyHbwpsRZ8kZ4Ek=)
2: gM98BY1lyRIDiMmnpeavUnwI1rY.roa (hash: ve1xDMahiOfYFvEODore+1Lgn1TnHWQyebyINSLaR/8=)
3: neeD6azVaZL1g1-0iCGDUAygPIM.crl (hash: SCQqQ/vEEwY4lzq5xjHGzTW0vrMGwNaimvBtw6eEBm4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:3a:f8:5e:c2:31:77:4f:44:44:32:06:c8:57:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9de783e9acd56992f5835fb4882183500ca03c83
Validity
Not Before: Jan 31 12:00:51 2025 GMT
Not After : Feb 1 12:00:51 2025 GMT
Subject: CN=886f393621b75e08edb3e9b0b864dd00ca3b885c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f3:3a:b8:83:3e:af:34:69:d1:7b:f3:31:2e:
c4:ef:ea:fe:b4:2d:68:84:4f:40:95:41:28:38:de:
fa:0c:bd:7b:3d:95:5c:0d:48:33:bd:68:85:0d:33:
3c:96:b1:39:c9:2d:88:a2:34:f9:17:8b:e9:a9:ae:
ee:9a:a5:33:ea:56:a7:8d:10:54:be:dd:1c:96:d0:
93:b0:90:4c:11:b2:a9:f8:b4:cc:d7:bb:97:69:81:
4e:b4:94:e9:08:32:07:20:98:39:53:f9:e6:f6:cc:
eb:78:c4:3d:89:8d:90:3f:84:ed:7d:d1:f2:02:f8:
a5:42:41:79:48:40:37:74:4f:0e:1c:d6:93:17:c2:
4e:56:40:0c:31:d1:58:aa:37:fa:ca:a1:0c:7a:45:
81:56:6a:5d:44:33:db:b9:5c:92:55:39:43:30:6c:
45:3f:fb:13:5c:a1:fd:9c:00:5d:da:91:05:25:7c:
de:d7:96:39:4e:1e:ed:7a:9e:7d:14:9b:64:59:db:
94:02:87:ce:e7:b8:79:75:1d:7e:2d:3e:af:02:a8:
c5:29:f0:ac:89:a0:15:6f:2f:15:07:3a:d5:5b:31:
4f:ca:d1:4f:69:76:33:25:e4:5a:b9:13:bc:75:46:
38:86:d6:b2:b6:f4:a3:83:82:9d:6e:07:64:e1:36:
d8:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:6F:39:36:21:B7:5E:08:ED:B3:E9:B0:B8:64:DD:00:CA:3B:88:5C
X509v3 Authority Key Identifier:
keyid:9D:E7:83:E9:AC:D5:69:92:F5:83:5F:B4:88:21:83:50:0C:A0:3C:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/neeD6azVaZL1g1-0iCGDUAygPIM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/4f05ce-a382-49a0-9999-e52f70c06c29/1/neeD6azVaZL1g1-0iCGDUAygPIM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/4f05ce-a382-49a0-9999-e52f70c06c29/1/neeD6azVaZL1g1-0iCGDUAygPIM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:b9:a6:19:74:44:2f:7f:92:31:a1:cd:00:a2:56:fb:e6:88:
ec:9b:89:08:84:cd:90:b6:3f:7f:18:12:19:b9:19:13:c1:31:
2b:8f:45:19:2f:f7:c6:b3:9f:22:df:e7:08:63:97:3e:40:d5:
66:07:a0:e0:ed:be:cd:9d:2c:f6:58:48:42:8d:32:14:ad:f6:
f7:07:3a:3f:73:e9:66:3b:5e:b0:a8:90:84:cf:3f:ad:94:c0:
98:9b:9a:5d:b9:ba:3b:80:f8:c1:71:d4:43:ca:24:df:e6:47:
db:4e:80:5c:9c:7b:2f:b2:06:53:51:5d:11:27:d1:99:0e:00:
ce:f1:33:68:72:c5:e6:a1:bd:73:85:61:36:3f:82:e0:17:47:
a5:81:bc:fc:92:c8:8b:7f:d0:ea:58:f2:03:85:64:74:c5:39:
91:d1:98:36:76:fd:e7:9b:ec:45:af:0f:9f:d9:43:d3:e7:2c:
47:bb:51:42:bf:af:07:97:2d:8e:04:a8:86:12:29:5b:2f:4d:
3d:b7:1c:51:b1:05:cc:ea:fe:cb:4d:88:03:1a:46:52:ab:12:
fb:b8:6b:bd:03:f3:ac:c2:b5:fe:bd:e1:7b:1d:bb:28:af:6d:
de:db:d4:07:dd:52:53:aa:17:4f:1c:da:dd:29:0a:fb:8a:84:
63:56:c2:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:37:33 2025 by rpki-client