Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/c937be-f5b1-43c6-9587-4e06621bd98a/1/mpLTBwi51OjHwoyX-AN8gCcUTEc.mft
File: mpLTBwi51OjHwoyX-AN8gCcUTEc.mft (raw, json)
Hash identifier: hKYnbxnKN598jIWZm+K2WN25tQfnM8D0ISBMfp1nlos=
Subject key identifier: 9A:B9:54:9D:93:B6:0F:63:2F:9C:E7:48:FF:A3:36:14:F3:00:75:7F
Authority key identifier: 9A:92:D3:07:08:B9:D4:E8:C7:C2:8C:97:F8:03:7C:80:27:14:4C:47
Certificate issuer: /CN=9a92d30708b9d4e8c7c28c97f8037c8027144c47
Certificate serial: 0194BCE0C991AC3F80993369FE8F77FDA0A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mpLTBwi51OjHwoyX-AN8gCcUTEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/c937be-f5b1-43c6-9587-4e06621bd98a/1/mpLTBwi51OjHwoyX-AN8gCcUTEc.mft
Manifest number: 1431
Signing time: Fri 31 Jan 2025 15:00:35 +0000
Manifest this update: Fri 31 Jan 2025 15:00:35 +0000
Manifest next update: Sat 01 Feb 2025 15:00:35 +0000
Files and hashes: 1: Od-Up9G1FWem-yoSr_pXW5rnVIA.roa (hash: vWn4KDX8+1TqyTBBcDwsTTYdGzuVvyYM5vL1dIvw2nw=)
2: mpLTBwi51OjHwoyX-AN8gCcUTEc.crl (hash: W8rcd36+LKNJTWGJXf5r5nR0vXW8U5VKnvJV3ZPfLz8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:c9:91:ac:3f:80:99:33:69:fe:8f:77:fd:a0:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a92d30708b9d4e8c7c28c97f8037c8027144c47
Validity
Not Before: Jan 31 15:00:35 2025 GMT
Not After : Feb 1 15:00:35 2025 GMT
Subject: CN=9ab9549d93b60f632f9ce748ffa33614f300757f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:65:ca:fd:92:cb:c8:f9:8e:09:5c:23:22:26:
ad:f6:7c:f1:0d:91:b6:c2:eb:63:40:69:79:30:64:
2b:01:52:18:9d:de:dd:15:35:90:e2:eb:52:3c:60:
2b:12:cb:25:0b:53:88:bc:1d:42:df:2d:81:97:80:
e6:f7:80:ef:12:76:66:73:80:7d:b3:6a:10:fb:29:
6d:c5:8a:dd:f8:fc:e7:90:e3:a6:bc:e6:27:d7:9f:
c8:a0:02:07:bb:ed:a9:71:2f:85:7e:5e:4f:43:cf:
46:a9:4c:72:12:ae:5b:d9:00:87:87:01:23:64:ae:
0d:7b:3f:6e:ee:a1:d5:4d:a7:d9:ba:96:e0:86:a5:
cb:67:bf:b9:ce:90:4b:be:90:df:92:b9:e9:41:09:
f9:73:0b:ca:c3:72:b9:af:f5:1b:c0:59:98:cd:3d:
b7:33:c4:fa:08:ec:b9:03:94:b0:98:0d:e0:ee:8e:
86:bb:bb:ab:29:62:29:ba:3c:48:4c:f7:1c:44:b5:
53:31:97:3b:12:d8:1d:51:65:2f:5c:d1:f8:2b:b8:
84:63:0e:d1:b0:dd:8a:95:96:83:bc:de:03:12:28:
92:33:22:3b:57:bb:6b:51:41:b1:b6:0a:59:fc:e4:
f2:32:bd:8e:8a:fb:d3:02:2b:eb:df:18:bc:04:c2:
2d:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:B9:54:9D:93:B6:0F:63:2F:9C:E7:48:FF:A3:36:14:F3:00:75:7F
X509v3 Authority Key Identifier:
keyid:9A:92:D3:07:08:B9:D4:E8:C7:C2:8C:97:F8:03:7C:80:27:14:4C:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mpLTBwi51OjHwoyX-AN8gCcUTEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/c937be-f5b1-43c6-9587-4e06621bd98a/1/mpLTBwi51OjHwoyX-AN8gCcUTEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/c937be-f5b1-43c6-9587-4e06621bd98a/1/mpLTBwi51OjHwoyX-AN8gCcUTEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:66:c5:72:67:33:64:10:44:70:6b:b0:dd:f5:91:f6:cb:8f:
3b:41:88:4f:94:a6:08:a1:ea:e3:91:a5:f7:75:17:5c:7d:1a:
2e:d6:30:3f:b9:d4:e6:02:fd:62:51:bd:98:3f:6f:02:84:a4:
ba:75:77:35:75:6c:f2:99:12:50:ae:c4:65:40:8b:04:bb:a3:
ff:96:20:7c:8a:ce:ed:01:d9:b8:9a:2e:91:6f:22:ec:ba:6f:
80:f7:0b:a3:a3:17:26:e9:c0:79:e3:46:7f:9d:25:43:4e:0d:
32:5d:36:bb:35:e6:30:6b:1e:35:54:89:d0:58:bd:77:bd:17:
ce:26:4e:be:f1:86:57:48:cf:69:00:9c:fa:d4:da:b9:18:a4:
2f:b1:67:67:de:36:5e:5a:52:0d:3a:99:a1:db:11:cd:fe:3b:
89:21:eb:84:76:08:da:33:58:3a:21:27:2a:52:84:b4:76:02:
67:4e:b6:d6:b7:d0:1a:1f:fe:10:09:6d:da:e1:2c:b0:a6:a9:
10:5a:15:0a:5c:e9:9b:7d:1a:5d:43:05:47:3c:b0:72:85:46:
ee:fe:a4:8e:ec:36:61:54:a0:99:15:b1:65:d6:4d:d5:1a:8a:
22:16:b1:e9:f8:41:e7:44:0e:47:09:c1:d7:39:3e:49:62:55:
32:c9:1f:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:30:37 2025 by rpki-client