Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/0b0d82-fa60-44cb-b83f-6a34e46aaa56/1/m4aKdvW0dI4eS7qDRwGmhXfGNGI.mft
File: m4aKdvW0dI4eS7qDRwGmhXfGNGI.mft (raw, json)
Hash identifier: rNQPmtCvnqZ8jeNELXH7egGneb16LfeJTZAJtRuR8kU=
Subject key identifier: CB:A1:DA:0E:96:6D:2C:AD:2A:43:82:9F:26:09:1C:C9:70:40:76:7D
Authority key identifier: 9B:86:8A:76:F5:B4:74:8E:1E:4B:BA:83:47:01:A6:85:77:C6:34:62
Certificate issuer: /CN=9b868a76f5b4748e1e4bba834701a68577c63462
Certificate serial: 0194BD4E4F22F523E2A0D93CE9AEAFEABB83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m4aKdvW0dI4eS7qDRwGmhXfGNGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/0b0d82-fa60-44cb-b83f-6a34e46aaa56/1/m4aKdvW0dI4eS7qDRwGmhXfGNGI.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 17:00:13 +0000
Manifest this update: Fri 31 Jan 2025 17:00:13 +0000
Manifest next update: Sat 01 Feb 2025 17:00:13 +0000
Files and hashes: 1: El3AzP_du9cgKwe4cAMY6ohro7o.roa (hash: unokVLZGXnsuik1b2lzzTnShCOzK3B+jbNl72+ddVqo=)
2: m4aKdvW0dI4eS7qDRwGmhXfGNGI.crl (hash: NF++qLvP88Iysz1we/xIrOk9Z0mrQYCHro3fyUGwvmk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:4f:22:f5:23:e2:a0:d9:3c:e9:ae:af:ea:bb:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b868a76f5b4748e1e4bba834701a68577c63462
Validity
Not Before: Jan 31 17:00:13 2025 GMT
Not After : Feb 1 17:00:13 2025 GMT
Subject: CN=cba1da0e966d2cad2a43829f26091cc97040767d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:d0:e1:f1:3d:8f:ca:f4:df:28:54:df:97:43:
c9:31:60:bc:b4:3d:5b:06:a0:f7:59:49:81:86:77:
c0:f7:71:da:db:fd:de:d3:80:1c:a0:70:ca:f7:b1:
c0:15:24:36:89:9a:78:c7:e7:4a:c7:95:be:d6:8f:
9b:82:2c:54:0a:d1:16:3d:f2:ce:9e:1d:d7:b4:49:
38:17:23:48:6c:ce:30:bd:54:b0:1b:11:6b:d8:3a:
6f:d1:58:e0:64:6f:a9:ce:f2:6f:60:d8:d6:9a:14:
8d:c0:94:2b:25:9b:32:3b:8c:70:8b:a4:c8:ea:42:
11:c1:eb:c5:2e:6e:6a:7c:88:95:71:c6:c2:56:99:
50:5e:61:36:e4:ba:9e:40:4b:d2:28:ca:e9:cb:e7:
17:d1:95:c9:4e:6f:82:4f:be:18:9a:c3:4b:2e:00:
05:d7:7a:87:f8:f0:43:cc:b5:c3:7e:8a:72:cd:b3:
46:59:94:cf:3f:3a:98:dc:49:63:4c:3d:5f:66:24:
46:71:dd:7c:58:80:af:71:18:e4:08:00:ed:4a:66:
dc:39:3f:c0:7f:92:88:52:17:9a:a7:34:4d:be:da:
0b:8a:d9:43:bb:5a:17:f3:b5:ac:a6:9b:7f:13:84:
ac:f9:d2:d8:f9:64:78:21:e0:dd:58:bd:e3:ea:4d:
bc:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:A1:DA:0E:96:6D:2C:AD:2A:43:82:9F:26:09:1C:C9:70:40:76:7D
X509v3 Authority Key Identifier:
keyid:9B:86:8A:76:F5:B4:74:8E:1E:4B:BA:83:47:01:A6:85:77:C6:34:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m4aKdvW0dI4eS7qDRwGmhXfGNGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0b0d82-fa60-44cb-b83f-6a34e46aaa56/1/m4aKdvW0dI4eS7qDRwGmhXfGNGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0b0d82-fa60-44cb-b83f-6a34e46aaa56/1/m4aKdvW0dI4eS7qDRwGmhXfGNGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:91:5c:34:8e:c2:5d:54:08:14:43:bd:71:02:a7:1b:1e:b6:
d9:37:07:8a:08:ea:89:03:61:9e:f1:13:92:16:3c:2c:8e:cb:
9e:48:dc:09:e1:e8:99:f6:58:be:5b:c1:47:b4:7b:1d:3e:a7:
16:fe:5d:59:eb:8e:58:ee:9d:31:32:35:17:c2:cb:f3:55:02:
66:3a:ce:a4:1e:59:c0:d3:49:74:2b:f7:53:0a:2a:68:6b:57:
28:8b:45:df:36:aa:b6:e8:b0:cc:fe:b7:cb:ae:85:82:ee:d5:
a4:d7:d8:78:e0:73:07:4f:4b:2c:bc:90:99:0c:fa:e0:19:5a:
e7:91:e6:e9:f8:7c:32:02:bf:4c:81:11:e4:34:c8:62:1e:28:
81:d1:ec:3a:3c:77:9d:7d:c8:bf:c1:42:49:e2:cf:51:f3:59:
44:ab:ed:18:7f:f3:a2:bf:8f:03:12:b1:a7:ec:2d:b4:a6:56:
e1:26:7c:95:45:1d:a7:06:98:b1:1e:31:03:89:7f:fd:77:07:
d3:20:a8:8e:17:f2:10:21:99:f6:69:6e:c0:7d:2e:13:65:85:
99:25:fe:51:c8:65:bc:73:c5:b8:18:85:98:69:bd:59:57:06:
dc:a0:5d:d0:7c:5b:28:36:98:46:d2:13:e8:21:28:72:4d:06:
b3:4a:72:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:10 2025 by rpki-client