Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/fb42e6-cc51-4d2b-8637-a243cbfaaef3/1/mGzlJJY15OKWTTdEk9zDeoddBTk.mft
File: mGzlJJY15OKWTTdEk9zDeoddBTk.mft (raw, json)
Hash identifier: 2mwwqMtEs+vPVrI5wMK2yph6u17SZku1tlNdn+Z/5HA=
Subject key identifier: FF:8F:AB:66:CF:DF:38:C5:58:B7:9F:01:B5:73:E4:59:E8:EE:13:56
Authority key identifier: 98:6C:E5:24:96:35:E4:E2:96:4D:37:44:93:DC:C3:7A:87:5D:05:39
Certificate issuer: /CN=986ce5249635e4e2964d374493dcc37a875d0539
Certificate serial: 0194BBCDDF8C2C1A958CCE69B6884341859D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mGzlJJY15OKWTTdEk9zDeoddBTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/fb42e6-cc51-4d2b-8637-a243cbfaaef3/1/mGzlJJY15OKWTTdEk9zDeoddBTk.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 10:00:18 +0000
Manifest this update: Fri 31 Jan 2025 10:00:18 +0000
Manifest next update: Sat 01 Feb 2025 10:00:18 +0000
Files and hashes: 1: I46JWrJ0wkgqhhjcXFEe1Gwyho8.roa (hash: DdJIf3u90dazdq9CZo2Xm0G5puQXvhN9Fr/LhJUcUXI=)
2: mGzlJJY15OKWTTdEk9zDeoddBTk.crl (hash: qbMLSpVOylsmPxH787KqxKHCGuotzcwpmzYkfQWgnfE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:df:8c:2c:1a:95:8c:ce:69:b6:88:43:41:85:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=986ce5249635e4e2964d374493dcc37a875d0539
Validity
Not Before: Jan 31 10:00:18 2025 GMT
Not After : Feb 1 10:00:18 2025 GMT
Subject: CN=ff8fab66cfdf38c558b79f01b573e459e8ee1356
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a1:1e:10:98:61:6a:44:00:76:39:57:ff:16:
51:0f:26:51:87:a8:42:6e:55:c4:e7:c2:1e:fa:96:
4f:24:6c:85:45:fe:67:5e:f3:1b:3a:eb:d4:ef:94:
d8:8a:8d:57:93:90:ca:c5:f6:bc:54:6c:1b:61:ba:
9e:9e:fd:27:41:e3:e8:53:71:e9:1a:c8:7a:f9:e1:
93:03:11:d7:a5:9a:79:36:dc:f4:37:13:a6:32:3d:
6c:f9:4e:82:58:56:6d:14:16:29:ef:50:10:b2:3d:
2d:de:fb:e5:7e:5a:d9:e5:a7:ee:a3:56:7e:49:fe:
6b:22:53:14:58:11:fe:83:13:63:3b:99:50:1e:57:
23:d3:5f:e0:cb:9b:a5:ea:7a:23:c2:4e:b3:da:15:
6b:c7:d2:c1:5a:45:34:31:8b:a6:0a:8e:1f:ea:57:
01:a7:bc:2a:80:79:aa:ef:dc:80:27:06:e5:28:e6:
0a:2c:38:a9:1b:08:1b:b2:ba:e9:a8:ea:10:11:e5:
34:17:c0:11:2f:84:74:18:ea:dc:bc:71:e6:62:98:
78:1f:9d:5d:4e:21:c1:d7:d9:4a:4f:28:e4:88:41:
90:15:2f:9e:7f:89:82:b7:85:77:95:cf:db:0a:ff:
fa:a0:51:5c:13:6a:de:4c:b0:f6:55:08:29:17:cf:
27:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:8F:AB:66:CF:DF:38:C5:58:B7:9F:01:B5:73:E4:59:E8:EE:13:56
X509v3 Authority Key Identifier:
keyid:98:6C:E5:24:96:35:E4:E2:96:4D:37:44:93:DC:C3:7A:87:5D:05:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGzlJJY15OKWTTdEk9zDeoddBTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/fb42e6-cc51-4d2b-8637-a243cbfaaef3/1/mGzlJJY15OKWTTdEk9zDeoddBTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/fb42e6-cc51-4d2b-8637-a243cbfaaef3/1/mGzlJJY15OKWTTdEk9zDeoddBTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:f6:bc:b8:d7:11:2f:0c:2a:66:d4:0d:8b:00:15:ca:5f:76:
7f:dd:9d:4d:32:3c:87:f8:0b:4b:70:87:6f:41:d0:8a:b7:c7:
96:2f:34:97:e1:f2:49:aa:90:ad:de:d2:c4:fd:09:e8:6e:ee:
cb:64:31:db:54:d2:61:1b:cf:9c:54:22:0a:0b:df:8c:0a:e9:
02:6f:d5:cc:a9:ff:67:d1:a2:f2:c1:28:ef:a4:9e:e8:6b:3d:
bc:66:1e:b3:d0:d9:b8:e5:f3:b3:91:80:60:de:d0:3e:54:b9:
74:c9:11:de:6b:ea:bf:cd:5c:e5:0a:d6:1f:3b:d1:f7:55:e2:
64:0f:e9:0e:30:3e:a1:da:01:b2:4b:3c:06:c4:36:79:89:e8:
80:bd:05:99:62:5c:1d:b2:8d:ab:1c:05:65:b3:15:4c:93:33:
33:39:a8:ef:97:be:e7:1c:de:0d:53:66:15:dc:f0:d1:e7:1a:
0e:ba:46:73:1f:4a:9d:53:db:68:44:15:bc:38:a2:21:e9:e9:
97:27:38:7d:b4:0b:53:ce:22:76:cc:82:f8:54:06:bc:c2:aa:
51:39:58:5c:4d:df:cf:0a:37:76:6d:65:f5:c4:53:ed:f9:12:
7a:c4:33:3c:bf:54:e8:75:cb:31:94:85:d4:34:de:bc:05:7f:
b6:86:a8:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:17 2025 by rpki-client