Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/d54e81-3317-4283-b45f-c81743b2cae6/1/m2fALef8jRGhr-euYsWFTRd2dVM.mft
File: m2fALef8jRGhr-euYsWFTRd2dVM.mft (raw, json)
Hash identifier: LL5iIMXPxzmgfBQhKSD8qIXCHYlpUD1f10XPs8JFGmE=
Subject key identifier: 34:6F:18:92:72:F2:69:62:90:E7:DD:FA:DF:A1:B3:B4:97:FB:69:90
Authority key identifier: 9B:67:C0:2D:E7:FC:8D:11:A1:AF:E7:AE:62:C5:85:4D:17:76:75:53
Certificate issuer: /CN=9b67c02de7fc8d11a1afe7ae62c5854d17767553
Certificate serial: 0194BD4EB13EF86BC440F2B708A33F035DCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m2fALef8jRGhr-euYsWFTRd2dVM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/d54e81-3317-4283-b45f-c81743b2cae6/1/m2fALef8jRGhr-euYsWFTRd2dVM.mft
Manifest number: 142F
Signing time: Fri 31 Jan 2025 17:00:38 +0000
Manifest this update: Fri 31 Jan 2025 17:00:38 +0000
Manifest next update: Sat 01 Feb 2025 17:00:38 +0000
Files and hashes: 1: 1mDSvWCAPrTbdUwmp52_NsdaJps.roa (hash: FwQIJqtRB7XaFGpge2zOocq9MbKJo1suVWwULTT7sHA=)
2: JI_IFEVZOLgwy-WHZOm2izr6PIo.roa (hash: OO8EbVI1MKPERWUpbisO0H4MA7HYDCDhv160pD1pO5c=)
3: m2fALef8jRGhr-euYsWFTRd2dVM.crl (hash: Emo+D7A5poopG0kKC42hQjcVLj6DIeDK3s/JBpVCSP8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:b1:3e:f8:6b:c4:40:f2:b7:08:a3:3f:03:5d:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b67c02de7fc8d11a1afe7ae62c5854d17767553
Validity
Not Before: Jan 31 17:00:38 2025 GMT
Not After : Feb 1 17:00:38 2025 GMT
Subject: CN=346f189272f2696290e7ddfadfa1b3b497fb6990
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:73:97:b6:ae:82:bc:8b:8e:b6:be:3e:30:89:
73:0e:46:bb:c2:47:b6:bd:9c:0d:1f:11:3e:4f:a5:
c0:58:dd:f3:0c:29:23:f1:83:17:b4:d6:ac:63:38:
f2:f2:0e:98:0e:e7:30:d3:ec:4e:07:3c:6c:64:7b:
a5:6e:c9:95:47:c0:28:00:b8:c0:9f:ad:03:c8:46:
06:be:96:ca:d2:26:67:8f:9c:cb:f2:8e:f1:24:f2:
91:ea:24:78:31:f5:fe:d5:62:97:0a:b6:79:11:72:
31:71:43:87:71:77:f9:8e:ac:88:50:1d:da:35:d7:
34:0c:87:df:d1:c2:9d:b0:01:e9:9d:ef:6f:ce:56:
92:a7:ec:17:70:e0:8e:bd:c6:76:00:11:6a:c4:1e:
05:95:0e:9c:d5:b5:f9:45:b0:e3:3b:c9:8c:b6:5a:
29:33:43:83:83:99:26:ab:b4:ed:aa:ef:08:3a:b6:
21:4c:57:f0:ad:85:73:00:12:8d:f4:e0:ba:e4:b4:
00:2d:78:06:7b:02:41:bb:d8:22:87:86:f6:35:fc:
55:5c:fb:3e:b3:8f:15:1c:f6:30:16:84:04:06:57:
16:10:f4:f1:58:55:13:4a:c0:41:6d:b2:fe:ff:18:
a4:6d:c8:e0:e7:42:3a:51:a7:61:91:75:59:e0:62:
a2:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:6F:18:92:72:F2:69:62:90:E7:DD:FA:DF:A1:B3:B4:97:FB:69:90
X509v3 Authority Key Identifier:
keyid:9B:67:C0:2D:E7:FC:8D:11:A1:AF:E7:AE:62:C5:85:4D:17:76:75:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m2fALef8jRGhr-euYsWFTRd2dVM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d54e81-3317-4283-b45f-c81743b2cae6/1/m2fALef8jRGhr-euYsWFTRd2dVM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d54e81-3317-4283-b45f-c81743b2cae6/1/m2fALef8jRGhr-euYsWFTRd2dVM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:29:82:53:03:94:40:0b:15:ad:b4:19:6d:e0:7b:18:9b:ba:
c5:35:a5:72:03:88:15:14:01:ac:73:af:80:56:16:4a:bd:76:
aa:c9:26:c6:25:02:7d:4c:de:0e:a9:d1:18:d0:65:bc:f8:76:
10:44:64:06:1d:70:b6:d3:98:2e:fd:00:42:19:ec:9a:c1:3a:
e4:fa:00:11:fd:b7:db:5b:73:23:4c:d7:64:c5:02:0a:6f:ff:
79:70:69:72:da:11:f0:5a:92:da:fe:41:80:df:fb:af:7a:07:
f4:69:e4:9d:5c:f1:d4:20:ec:08:8e:e3:38:38:b2:cc:ea:9b:
34:ff:a1:02:44:14:bb:60:80:f4:cd:0f:01:dc:9e:a0:bc:a8:
2a:4d:e2:c6:99:59:ef:69:d3:2e:83:42:91:82:bc:b2:c4:cb:
ad:a8:97:d1:c3:2e:0d:aa:b4:ba:3a:db:b9:3e:41:27:32:9a:
4b:33:ee:ad:74:c2:70:a7:42:c3:c4:0a:4d:71:e8:47:b7:54:
8f:c7:25:af:d6:8a:7d:c4:76:ba:69:60:d5:f3:d5:74:d4:aa:
55:45:cb:76:e1:98:d5:5b:b9:7f:b0:bd:57:08:6e:42:9a:34:
42:b4:b8:24:dd:f0:b4:1d:ac:d3:36:df:bf:7e:85:8b:c9:2b:
0c:18:36:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:47:04 2025 by rpki-client