Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/72bd07-3cf1-45b1-9eef-b847eb77afc8/1/mK_pac8OqToOjlfulYjK9VcrOyI.mft
File: mK_pac8OqToOjlfulYjK9VcrOyI.mft (raw, json)
Hash identifier: MbSk7+SMDr7fYHv10LlT7zavR+xKY5VZuK2tHtYs6D8=
Subject key identifier: E4:C9:59:45:64:21:62:FF:4F:33:FB:35:84:89:7E:99:42:B3:65:77
Authority key identifier: 98:AF:E9:69:CF:0E:A9:3A:0E:8E:57:EE:95:88:CA:F5:57:2B:3B:22
Certificate issuer: /CN=98afe969cf0ea93a0e8e57ee9588caf5572b3b22
Certificate serial: 0194BC3BE44A6709EAA6F7164A294CF44C1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mK_pac8OqToOjlfulYjK9VcrOyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/72bd07-3cf1-45b1-9eef-b847eb77afc8/1/mK_pac8OqToOjlfulYjK9VcrOyI.mft
Manifest number: 024F
Signing time: Fri 31 Jan 2025 12:00:29 +0000
Manifest this update: Fri 31 Jan 2025 12:00:29 +0000
Manifest next update: Sat 01 Feb 2025 12:00:29 +0000
Files and hashes: 1: 022L9fV8F1ZZ2EE1EuaAsn4eywo.roa (hash: XmLPJO8dC104vud5SObyJBz1K1qN+7X4uqFqIhLIBZ4=)
2: mK_pac8OqToOjlfulYjK9VcrOyI.crl (hash: xAQ4t+shGGjI+06iIZthmbtH9T/i1JzA0ZGuEh6pK0s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:e4:4a:67:09:ea:a6:f7:16:4a:29:4c:f4:4c:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98afe969cf0ea93a0e8e57ee9588caf5572b3b22
Validity
Not Before: Jan 31 12:00:29 2025 GMT
Not After : Feb 1 12:00:29 2025 GMT
Subject: CN=e4c95945642162ff4f33fb3584897e9942b36577
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:dc:16:aa:6b:54:5e:a5:1c:0b:fb:ec:0a:a9:
39:5c:c2:b5:ff:2d:e7:fd:f1:ba:d6:f4:7b:74:5e:
37:2f:47:73:4d:d6:3f:ff:46:1c:eb:fd:85:85:2e:
b2:fc:ae:34:8c:61:95:50:ab:d2:a7:ea:58:cb:ba:
8e:85:2a:ab:85:8a:80:91:75:2e:6b:4f:e6:34:43:
89:b4:a6:ed:01:78:14:27:b7:da:95:77:fd:65:aa:
ea:a0:d2:e8:e6:df:f4:9a:68:b8:05:9e:e8:e4:40:
a7:df:20:5d:1a:8d:e6:d2:6b:56:05:69:da:38:27:
2a:69:ba:16:fa:eb:34:ea:8e:96:ef:7b:8c:ac:0c:
c5:bc:66:5b:f3:e2:60:a0:d0:33:94:49:b4:e7:6d:
0f:bc:bb:cd:66:db:36:81:ed:39:44:9e:3b:cc:c3:
ed:73:e4:36:e2:61:ff:cd:46:b4:42:b8:11:c7:30:
a8:0c:7e:7c:84:1d:07:4b:c0:a1:a5:6e:2d:8a:5f:
ac:25:a9:b2:02:50:f1:12:23:23:6c:de:c3:74:74:
cd:ed:77:ce:84:2b:9e:4b:e2:cb:15:bc:df:14:22:
e3:c6:79:0d:b8:b8:4e:49:28:d0:2f:08:d5:d1:c0:
9f:9e:0c:cb:a1:56:76:83:37:4b:0b:a4:d5:d3:d3:
9b:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:C9:59:45:64:21:62:FF:4F:33:FB:35:84:89:7E:99:42:B3:65:77
X509v3 Authority Key Identifier:
keyid:98:AF:E9:69:CF:0E:A9:3A:0E:8E:57:EE:95:88:CA:F5:57:2B:3B:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mK_pac8OqToOjlfulYjK9VcrOyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/72bd07-3cf1-45b1-9eef-b847eb77afc8/1/mK_pac8OqToOjlfulYjK9VcrOyI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/72bd07-3cf1-45b1-9eef-b847eb77afc8/1/mK_pac8OqToOjlfulYjK9VcrOyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:ec:12:9d:59:47:31:3c:c5:1d:0f:48:3e:31:0d:c5:c4:a4:
d0:cc:69:6c:f7:67:60:66:4b:9c:77:09:2b:cf:4b:6c:2f:15:
bc:dc:20:77:cb:26:32:f3:a2:63:21:51:2d:07:b8:56:52:83:
e5:a8:a6:1c:7b:92:9d:ac:84:b4:b8:54:cf:c0:82:13:b9:8d:
6e:09:b1:40:13:f7:ae:e7:8c:78:17:a3:17:be:7f:58:60:29:
52:4b:4c:e1:79:d6:75:a7:f9:9f:3c:bd:5e:5e:45:35:a9:bd:
24:f4:f0:e7:3f:b6:bd:1e:18:9d:7c:38:56:67:0e:cb:04:aa:
5a:ad:81:f4:35:56:1e:3c:d3:9e:79:61:c8:e6:ca:64:a4:2f:
33:16:4d:d2:8f:a8:2d:43:c9:0f:12:47:0e:be:54:bb:32:fa:
52:ed:f4:d9:f9:d7:63:04:7f:e2:ac:5a:47:19:df:52:c0:1c:
4f:d4:b2:cd:ff:89:0e:a5:28:e0:43:0d:be:f1:08:44:25:c6:
24:78:70:31:16:4a:f8:24:1b:3c:d8:1d:03:4d:89:38:7b:05:
ef:b9:f6:ed:85:03:e5:08:1c:e9:5e:fd:74:a8:61:9a:c8:a6:
5d:ff:6a:cc:f2:28:50:c1:b2:cd:9c:20:7c:dc:39:2e:57:9f:
a5:58:eb:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:40:18 2025 by rpki-client