Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/1edd25-ff90-40ae-8a20-f76b8353ad68/1/mZYvXuAnimDLvNQWkZH3FIEhatQ.mft
File: mZYvXuAnimDLvNQWkZH3FIEhatQ.mft (raw, json)
Hash identifier: GKr6j8RgoC6QCbPg4f0kTDktcLUXgrblkrTZTIjpTSc=
Subject key identifier: CF:48:A2:2C:B6:F5:48:D1:36:C5:7A:DF:1E:68:7B:23:E7:D4:F3:67
Authority key identifier: 99:96:2F:5E:E0:27:8A:60:CB:BC:D4:16:91:91:F7:14:81:21:6A:D4
Certificate issuer: /CN=99962f5ee0278a60cbbcd4169191f71481216ad4
Certificate serial: 0194BD176C9BF08AA240569E334533AF6E74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mZYvXuAnimDLvNQWkZH3FIEhatQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/1edd25-ff90-40ae-8a20-f76b8353ad68/1/mZYvXuAnimDLvNQWkZH3FIEhatQ.mft
Manifest number: 1162
Signing time: Fri 31 Jan 2025 16:00:16 +0000
Manifest this update: Fri 31 Jan 2025 16:00:16 +0000
Manifest next update: Sat 01 Feb 2025 16:00:16 +0000
Files and hashes: 1: PcKfcpxjxCfbogVi4GU3TNWXfWo.roa (hash: FyEhv9qszU5/I+NRa1KRYr4i13WZJNlUiL5+rA2wd9M=)
2: dKjh9OyM_cot3UzX7jW4QBDob5U.roa (hash: HTTUqeSNDV7AnFAFILfDkkX8OZRGZuFCWYdTMt5tQp0=)
3: mZYvXuAnimDLvNQWkZH3FIEhatQ.crl (hash: 9kSzzDKTt7WeQeTTeQBA7cUndhgQLdXd2+suoOK0+90=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:6c:9b:f0:8a:a2:40:56:9e:33:45:33:af:6e:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99962f5ee0278a60cbbcd4169191f71481216ad4
Validity
Not Before: Jan 31 16:00:16 2025 GMT
Not After : Feb 1 16:00:16 2025 GMT
Subject: CN=cf48a22cb6f548d136c57adf1e687b23e7d4f367
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:7c:3a:6c:a7:3f:d7:e7:7f:b1:72:16:f2:62:
2f:f2:3d:8f:f5:07:2f:a4:95:4a:f0:0c:4d:d9:35:
f8:ac:0b:b2:c5:4f:b3:d0:0f:74:aa:51:d5:d5:3e:
c1:37:6d:58:b9:ff:fd:96:48:e2:11:3f:50:35:f8:
f5:e0:8c:20:05:c9:02:f9:2b:6e:4f:33:79:2b:f0:
b7:64:ce:c0:f9:ae:9f:17:72:09:cf:b3:c5:02:82:
37:3f:74:f3:9f:4b:09:43:46:78:47:15:7a:18:46:
b0:5f:2d:3b:31:a1:69:56:50:5f:2b:a0:5b:ee:72:
c9:2d:d7:1b:cf:e9:53:36:70:0f:b4:99:24:37:e7:
ac:0a:93:64:a5:f3:03:bb:66:19:7f:4e:2f:89:f5:
bc:ca:7a:e0:d4:1d:bf:2a:65:4a:6e:4a:9d:51:47:
f3:41:62:f0:69:d9:c3:af:f6:8e:a2:80:f9:60:6a:
72:0a:fc:09:d3:09:9d:36:30:4e:00:6d:b5:56:17:
fd:c7:a5:d5:33:fd:2e:e5:50:ad:f1:07:1e:a7:8d:
87:ae:33:55:00:ae:ab:de:2e:35:26:8a:e4:96:e3:
71:dd:2b:37:a4:e4:e3:ed:58:e7:94:ea:18:e8:1e:
05:f5:76:c6:86:39:04:1d:2c:ed:ac:01:7c:12:2c:
a7:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:48:A2:2C:B6:F5:48:D1:36:C5:7A:DF:1E:68:7B:23:E7:D4:F3:67
X509v3 Authority Key Identifier:
keyid:99:96:2F:5E:E0:27:8A:60:CB:BC:D4:16:91:91:F7:14:81:21:6A:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mZYvXuAnimDLvNQWkZH3FIEhatQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1edd25-ff90-40ae-8a20-f76b8353ad68/1/mZYvXuAnimDLvNQWkZH3FIEhatQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1edd25-ff90-40ae-8a20-f76b8353ad68/1/mZYvXuAnimDLvNQWkZH3FIEhatQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:62:fa:c8:5c:dc:c6:7d:36:b3:84:88:1e:36:07:26:42:c6:
47:1a:9a:39:b7:a7:22:92:dc:b9:e4:a3:0b:3b:d1:2d:7d:c4:
9b:5d:f1:bc:e6:49:46:36:c7:90:da:f1:f1:8e:19:b0:08:1f:
6b:72:17:e3:4e:56:8c:17:28:a8:e8:75:e9:33:4f:b2:fc:fb:
fe:f2:3f:47:0e:96:4f:1c:0d:9c:9f:00:62:3e:e7:2e:d7:39:
b4:45:ac:ee:6e:84:f9:9d:be:98:35:bb:21:63:e1:fc:8f:99:
f4:a4:b7:f0:5a:8c:59:3f:75:8a:52:5e:32:7b:cc:18:31:7e:
fe:3c:b0:d1:ba:05:6c:d8:76:b9:50:7f:b6:61:c1:4f:72:c4:
b4:ac:de:1b:c0:d2:fa:82:bf:71:7d:6b:8e:a0:7e:af:64:ff:
4d:a4:40:4c:6d:8d:6b:2f:11:f8:9b:58:c6:94:7d:77:87:35:
37:fb:6d:99:a3:1e:09:a8:ff:05:bb:95:ca:04:0b:11:10:c8:
aa:d1:0e:7b:72:f5:c0:59:79:5d:57:e1:d2:3f:1b:dc:d6:8e:
ea:e9:6d:f1:28:89:8d:41:4e:f2:3c:ad:3f:85:be:26:53:0a:
0f:d5:ca:9b:b8:a2:47:4b:a8:83:0b:52:9d:5a:bf:27:b2:68:
0f:58:96:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 10:18:04 2025 by rpki-client