Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/7dd289-6cb5-4371-846c-93dec735f717/1/mQfHuJZW3TOcuY-3wrA3HFkmpkE.mft
File: mQfHuJZW3TOcuY-3wrA3HFkmpkE.mft (raw, json)
Hash identifier: SwNPyLtjYC9MpffFmcUqqADbO67/cYQkeUW5KWVm21k=
Subject key identifier: E6:D7:89:FE:82:F0:96:49:6F:32:58:A1:5D:7B:01:A0:44:29:32:23
Authority key identifier: 99:07:C7:B8:96:56:DD:33:9C:B9:8F:B7:C2:B0:37:1C:59:26:A6:41
Certificate issuer: /CN=9907c7b89656dd339cb98fb7c2b0371c5926a641
Certificate serial: 0194BCAA1876FC73E8E62EF794481730150A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mQfHuJZW3TOcuY-3wrA3HFkmpkE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/7dd289-6cb5-4371-846c-93dec735f717/1/mQfHuJZW3TOcuY-3wrA3HFkmpkE.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 14:00:51 +0000
Manifest this update: Fri 31 Jan 2025 14:00:51 +0000
Manifest next update: Sat 01 Feb 2025 14:00:51 +0000
Files and hashes: 1: N_CNkQ4xgCl7xoE5UA_a_QkJVEU.roa (hash: Tpui/v5StmkjsF0FORh913wDyuFXShlf6/KyOzlpFaw=)
2: a9P-AA4M71AoAQl3T5rg8IgqWV8.roa (hash: p+vdBIjmH5hq5HNOBx9P2IYX3IN+k3FDRRTfZzHcnHA=)
3: mQfHuJZW3TOcuY-3wrA3HFkmpkE.crl (hash: DmmA0i2vxaqE/J0449fC+tVYSn+mMqws6+Zm5BVTigg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:18:76:fc:73:e8:e6:2e:f7:94:48:17:30:15:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9907c7b89656dd339cb98fb7c2b0371c5926a641
Validity
Not Before: Jan 31 14:00:51 2025 GMT
Not After : Feb 1 14:00:51 2025 GMT
Subject: CN=e6d789fe82f096496f3258a15d7b01a044293223
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ee:3a:63:84:8e:91:d5:1b:18:c5:d9:8a:2a:
90:71:e9:64:f4:21:20:bf:e5:7c:7d:07:e4:b7:0a:
a7:e9:27:ba:20:ad:d9:f1:98:08:49:55:4f:cf:98:
dd:f1:f0:28:2c:02:47:f4:0e:29:6e:c6:77:22:e4:
39:9a:60:ba:1a:41:19:8a:70:15:65:e8:37:d0:b6:
ca:0c:3a:ca:09:b8:65:18:1f:27:37:0b:cf:a2:74:
4f:6d:6f:ef:79:09:b6:9b:38:55:cf:fd:08:45:d7:
0b:95:a2:d0:82:c1:4a:82:a9:a7:a8:3f:3f:db:d4:
9e:e0:08:63:ab:94:17:d4:9a:aa:7b:01:d9:2a:15:
68:7e:ea:0e:0f:7b:81:6f:94:01:4b:14:57:05:f5:
4b:f3:ed:0d:fe:80:1a:b8:d9:97:18:ef:2c:d5:dd:
97:ef:d4:e6:eb:39:02:94:e9:55:6d:ca:26:ab:10:
0f:b4:e2:9b:99:af:50:85:e7:e7:c9:2d:3f:14:0c:
6f:3c:43:2d:25:7f:62:dd:6b:19:e6:3b:88:b0:5e:
a5:6b:81:92:88:2e:9c:39:c7:c0:64:15:48:13:22:
0b:f0:d3:7a:32:26:73:40:46:53:bf:4f:b4:e2:8d:
34:28:90:e9:9b:35:4b:74:71:dc:1d:3f:01:96:16:
b0:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:D7:89:FE:82:F0:96:49:6F:32:58:A1:5D:7B:01:A0:44:29:32:23
X509v3 Authority Key Identifier:
keyid:99:07:C7:B8:96:56:DD:33:9C:B9:8F:B7:C2:B0:37:1C:59:26:A6:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mQfHuJZW3TOcuY-3wrA3HFkmpkE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7dd289-6cb5-4371-846c-93dec735f717/1/mQfHuJZW3TOcuY-3wrA3HFkmpkE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7dd289-6cb5-4371-846c-93dec735f717/1/mQfHuJZW3TOcuY-3wrA3HFkmpkE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:46:e4:99:ef:6b:d3:5f:23:78:d2:b9:0d:29:3b:3e:5c:1d:
f6:05:a0:4a:61:78:0b:5f:fc:16:4d:d0:0a:6a:ac:f7:5f:27:
1f:ee:29:f0:12:0d:5e:9b:09:66:50:c1:1b:fb:c3:d1:37:fc:
bb:bb:dd:5d:82:f8:58:1b:4b:86:5b:2f:ba:92:97:47:b9:d7:
18:36:89:a9:65:fc:af:87:82:08:97:4f:d3:d6:03:2a:f9:88:
a0:35:ed:d9:d2:75:cd:48:bc:ee:ae:65:dd:e6:fa:3a:18:15:
ed:0c:46:50:a9:cd:47:e4:59:ac:82:34:aa:7d:ff:96:3a:34:
67:6d:a5:8a:a9:b5:f7:cb:e3:1e:fa:22:5f:9c:2e:e4:9f:63:
1e:a3:4d:e3:91:7d:e6:77:12:29:f8:cb:f1:4e:a5:86:ef:60:
ff:df:01:74:24:23:25:f1:bb:99:54:cf:de:70:8a:9e:d0:81:
f9:26:8a:cb:97:97:08:9c:06:c6:cd:20:64:bc:ba:1e:08:0a:
ac:fd:f5:fd:35:f0:f1:a9:92:7a:a8:e5:cf:49:aa:74:e3:7d:
17:2c:61:0c:6a:b0:d5:02:19:13:1c:55:f3:15:60:66:96:ea:
63:14:76:60:f3:e6:98:b8:4f:ce:17:0a:6b:27:43:23:b4:cc:
4e:65:a2:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:40:21 2025 by rpki-client