Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/4b0283-a90c-4d64-8301-d221ebd0818d/1/m-02rxPaSC_feftUA-UHSGDuzQ0.mft
File: m-02rxPaSC_feftUA-UHSGDuzQ0.mft (raw, json)
Hash identifier: UZVJbo9pbIejji0ZAZlkWyUMLZHDtFIPUckPrRM0K+Y=
Subject key identifier: D3:F1:52:C4:64:73:7C:27:23:E9:3D:E0:A2:5D:32:30:0D:CF:D6:5D
Authority key identifier: 9B:ED:36:AF:13:DA:48:2F:DF:79:FB:54:03:E5:07:48:60:EE:CD:0D
Certificate issuer: /CN=9bed36af13da482fdf79fb5403e5074860eecd0d
Certificate serial: 0194BC050C593ED9CCA995A5E100A578A07A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m-02rxPaSC_feftUA-UHSGDuzQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/4b0283-a90c-4d64-8301-d221ebd0818d/1/m-02rxPaSC_feftUA-UHSGDuzQ0.mft
Manifest number: 0F0D
Signing time: Fri 31 Jan 2025 11:00:34 +0000
Manifest this update: Fri 31 Jan 2025 11:00:34 +0000
Manifest next update: Sat 01 Feb 2025 11:00:34 +0000
Files and hashes: 1: gME55grAdW0csfpDqI4X-z1lPB8.roa (hash: Yk24RuTuN+kQwIiTqSqW+TjwkayeuH80Y+g3ReFhIuE=)
2: m-02rxPaSC_feftUA-UHSGDuzQ0.crl (hash: +hng5CD3eoqKYieJIBZBwQTzEBvZJUz/QhHVslf+M6c=)
3: oAMq7eOSrrg7QzHYvuiclu2pDcU.roa (hash: 0Dq9HT+D04Msgy5j4AI+QE/myTwZkQVZ5ZeJBagVuyM=)
4: rPUiYOwFFBXwEbG0rI7AP5flCD0.roa (hash: fpp2fjiduFcCROlP6+vFm2e63EILUjHK8HyGsStaukM=)
5: tsiU7azXEn11ZU6Xi_XUw-9XI8A.roa (hash: zObDmeFB3M8dfzRuyTAH/oAzX2g0/cCu39kU8lAYB64=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:0c:59:3e:d9:cc:a9:95:a5:e1:00:a5:78:a0:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bed36af13da482fdf79fb5403e5074860eecd0d
Validity
Not Before: Jan 31 11:00:34 2025 GMT
Not After : Feb 1 11:00:34 2025 GMT
Subject: CN=d3f152c464737c2723e93de0a25d32300dcfd65d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:7c:1f:b1:a8:4f:45:11:db:4d:24:41:50:78:
03:9f:24:e6:b0:d6:d6:28:5e:25:d0:8c:87:b0:85:
8e:42:23:b9:35:48:f8:f6:05:73:51:b5:89:15:bd:
44:b6:0b:96:4d:f6:4f:76:69:92:42:57:32:7e:10:
82:8e:60:c0:ea:2b:47:39:64:61:53:5c:fc:fa:2b:
88:ff:25:df:26:bf:c8:3a:09:9e:6c:97:b8:65:d1:
7f:80:d1:79:a3:6e:80:0c:07:af:40:77:be:79:51:
55:d5:6f:0f:54:33:a0:8e:76:2d:17:a1:25:24:28:
5b:c4:37:48:c6:77:0d:12:84:79:37:cd:2d:85:1b:
0e:ce:10:9c:5c:48:86:5b:f7:14:46:42:41:9e:36:
af:dc:43:1b:7d:96:23:ab:ec:79:da:ec:f7:27:95:
3f:08:8d:a9:d8:9d:89:79:9f:e6:7d:a8:30:de:76:
72:c9:91:b7:6e:d7:56:08:28:93:92:0c:d3:55:ea:
36:3a:c6:11:29:e9:d5:02:bc:9c:43:37:43:23:7c:
c0:83:0a:63:08:1d:a1:a5:41:76:4e:04:fa:9a:c2:
87:e7:8c:01:e0:41:99:7f:4f:0a:d3:0c:03:8e:65:
26:c9:f6:16:1a:9d:12:80:6c:06:f3:9d:a0:f5:39:
28:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:F1:52:C4:64:73:7C:27:23:E9:3D:E0:A2:5D:32:30:0D:CF:D6:5D
X509v3 Authority Key Identifier:
keyid:9B:ED:36:AF:13:DA:48:2F:DF:79:FB:54:03:E5:07:48:60:EE:CD:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m-02rxPaSC_feftUA-UHSGDuzQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4b0283-a90c-4d64-8301-d221ebd0818d/1/m-02rxPaSC_feftUA-UHSGDuzQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4b0283-a90c-4d64-8301-d221ebd0818d/1/m-02rxPaSC_feftUA-UHSGDuzQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:5d:51:4f:f2:9a:b3:79:d8:75:68:e8:98:7f:45:79:ad:60:
00:ef:70:5b:42:c9:fd:21:31:07:45:f1:e2:02:7b:fd:fd:cc:
7f:84:f0:a3:b4:21:1e:15:9b:67:79:f9:08:b0:8b:1f:90:40:
25:99:6a:73:92:8d:e2:eb:71:13:30:15:0c:b6:ba:ad:1d:a3:
63:89:9c:fa:1e:3c:03:12:91:cc:e1:14:df:1f:31:6d:bd:57:
5d:d4:0f:9f:db:ff:aa:cb:47:23:29:c0:77:6b:8f:df:e2:e2:
67:4a:c1:c6:48:8d:ac:2e:43:aa:d0:e7:3f:56:e8:19:b0:55:
9d:be:8c:30:87:a7:ee:59:a0:aa:f5:c5:5f:c8:4a:c7:db:5d:
78:68:e0:93:4d:77:d1:ba:bc:3e:10:4a:d7:df:c4:df:d5:e4:
ee:83:a3:8e:42:e0:6d:07:fc:4a:f5:65:09:49:ca:9c:da:7a:
59:a8:a0:b6:63:6f:13:07:1d:cb:cd:74:d0:00:03:75:1f:5a:
90:cf:ac:bc:fe:9b:fc:ee:1a:ab:a6:97:d6:71:39:1d:8c:b2:
e0:8c:8c:06:d3:3e:10:f9:32:6a:dc:7a:3c:67:07:28:5e:4f:
29:f7:1d:ad:cf:e8:65:a3:99:5b:e3:15:a5:a2:99:d9:56:13:
7c:ce:28:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:44 2025 by rpki-client