Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/e06713-d6da-401c-bae5-65d33f1b58c8/1/m5MZAlcz2oftj8ogMuP4pmBJWnE.mft
File: m5MZAlcz2oftj8ogMuP4pmBJWnE.mft (raw, json)
Hash identifier: T4Da9EC5KlUS0Bz34annt0yG+h2EFiEj/ENUgltcMhk=
Subject key identifier: 26:5B:16:D9:11:B5:D9:5A:00:F0:BE:9E:2E:09:86:A4:0A:34:22:8F
Authority key identifier: 9B:93:19:02:57:33:DA:87:ED:8F:CA:20:32:E3:F8:A6:60:49:5A:71
Certificate issuer: /CN=9b9319025733da87ed8fca2032e3f8a660495a71
Certificate serial: 0194BC04D453EC7B7205EE7477FD14E6DB23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m5MZAlcz2oftj8ogMuP4pmBJWnE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/e06713-d6da-401c-bae5-65d33f1b58c8/1/m5MZAlcz2oftj8ogMuP4pmBJWnE.mft
Manifest number: 1276
Signing time: Fri 31 Jan 2025 11:00:20 +0000
Manifest this update: Fri 31 Jan 2025 11:00:20 +0000
Manifest next update: Sat 01 Feb 2025 11:00:20 +0000
Files and hashes: 1: m5MZAlcz2oftj8ogMuP4pmBJWnE.crl (hash: Z6+RTYgdXE7Q9TXJRL7/qYiCp2gftn1mrQ6q1BS6E+Q=)
2: ngQh5dUp9npBOACQWIONz3R5Xk4.roa (hash: t653pV8nTjyLsaWC3Zk3Ik5pVuX0VX8PrLjKO3PU3B4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:d4:53:ec:7b:72:05:ee:74:77:fd:14:e6:db:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b9319025733da87ed8fca2032e3f8a660495a71
Validity
Not Before: Jan 31 11:00:20 2025 GMT
Not After : Feb 1 11:00:20 2025 GMT
Subject: CN=265b16d911b5d95a00f0be9e2e0986a40a34228f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:74:a2:72:fd:da:04:70:5e:4d:27:69:57:42:
55:2e:a9:31:df:0b:2c:ee:2c:89:dd:52:0e:ca:bf:
bd:83:98:f7:12:0e:4f:00:8c:2f:1e:ca:f0:41:68:
32:56:fa:22:71:9c:75:77:06:91:c6:a7:61:a0:ab:
20:fc:08:e4:b8:a4:2b:7b:51:e5:3d:33:f5:77:ac:
e0:b5:9c:c2:dd:a9:42:de:53:16:b4:48:48:52:9d:
a9:95:78:e6:9a:bb:3a:cf:da:65:30:71:8c:e8:68:
d1:73:2a:1b:9d:0d:0d:2d:ff:bc:c2:c8:a1:6b:bf:
ef:57:86:e9:28:cf:2e:23:a9:85:fe:fb:e6:84:7c:
21:26:09:3a:0f:47:e5:3b:e5:28:ec:db:95:d0:9d:
f8:da:95:c4:96:c8:8b:8c:4c:8e:e1:02:b4:27:68:
bc:50:7f:a9:02:62:0a:dc:54:78:f8:71:b0:4d:67:
95:07:4b:1b:a4:eb:02:f0:27:29:a5:62:82:4f:89:
82:f5:26:7c:d7:41:14:55:21:ba:6e:2a:bf:7b:0d:
79:b6:1c:f4:4e:a5:0b:d9:83:c2:62:5b:9e:7a:68:
82:fa:fa:20:d0:b4:63:10:96:e6:e6:cf:31:22:35:
a7:1d:6d:e2:6b:6e:54:6b:99:4f:63:fa:9b:15:cb:
84:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:5B:16:D9:11:B5:D9:5A:00:F0:BE:9E:2E:09:86:A4:0A:34:22:8F
X509v3 Authority Key Identifier:
keyid:9B:93:19:02:57:33:DA:87:ED:8F:CA:20:32:E3:F8:A6:60:49:5A:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m5MZAlcz2oftj8ogMuP4pmBJWnE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/e06713-d6da-401c-bae5-65d33f1b58c8/1/m5MZAlcz2oftj8ogMuP4pmBJWnE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/e06713-d6da-401c-bae5-65d33f1b58c8/1/m5MZAlcz2oftj8ogMuP4pmBJWnE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:f8:ec:2e:de:b3:6f:7b:8c:c4:68:2f:46:7d:3b:c4:fc:df:
dc:8c:c0:3d:20:60:0c:64:fe:d8:29:b9:08:80:1d:de:ef:b1:
e4:02:83:ee:64:4e:3f:4e:41:89:9c:2d:f8:27:3c:09:82:5e:
ff:5f:f1:24:d5:ba:ae:75:75:e5:f4:92:a9:94:95:9c:21:59:
72:04:2b:1e:e5:a6:f8:cb:69:3e:b0:9a:7a:98:81:5e:df:ff:
9c:0a:2f:be:07:10:1c:77:78:53:17:e0:7e:5a:13:b3:24:15:
36:07:35:b6:e7:f2:af:b1:02:25:86:0a:29:e2:44:86:76:ea:
6b:09:33:04:86:0c:b4:a3:6e:ca:b1:e5:ff:6e:d6:19:e4:96:
44:91:48:8e:30:2e:ff:2a:35:3d:39:f4:e6:84:d2:27:44:fe:
ed:41:5d:15:32:7a:cb:3d:72:2b:e6:86:f3:c0:1a:f5:db:b0:
65:aa:d7:1c:ce:2e:61:57:10:23:8a:f9:d8:da:55:06:e9:01:
57:aa:d6:28:b7:a7:c1:e9:7e:fe:b4:f1:50:bc:5b:1d:c0:37:
1e:c3:2e:e9:b5:f1:39:33:aa:e9:e7:c3:95:d3:d6:c4:e6:f2:
de:9e:be:41:36:64:14:86:1c:8a:86:7b:ab:eb:c2:27:1f:d2:
93:d8:6d:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:44:45 2025 by rpki-client