Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/fa110d-e6e5-4bf9-84fe-bf26a7faa603/1/mRXw1qlhquvGsLUInaApObMQpRw.mft
File: mRXw1qlhquvGsLUInaApObMQpRw.mft (raw, json)
Hash identifier: PLOgTkf14G6rskKTVocFwVxPnA0VkRzX+yr6Tvy2WCo=
Subject key identifier: 06:07:D9:79:33:0C:F5:95:44:99:F7:B3:B2:C6:E2:42:FA:2E:9D:09
Authority key identifier: 99:15:F0:D6:A9:61:AA:EB:C6:B0:B5:08:9D:A0:29:39:B3:10:A5:1C
Certificate issuer: /CN=9915f0d6a961aaebc6b0b5089da02939b310a51c
Certificate serial: 0194BC3BEAA238B466BCBFA4A8DD5B85BC0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mRXw1qlhquvGsLUInaApObMQpRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/fa110d-e6e5-4bf9-84fe-bf26a7faa603/1/mRXw1qlhquvGsLUInaApObMQpRw.mft
Manifest number: 13BC
Signing time: Fri 31 Jan 2025 12:00:30 +0000
Manifest this update: Fri 31 Jan 2025 12:00:30 +0000
Manifest next update: Sat 01 Feb 2025 12:00:30 +0000
Files and hashes: 1: 3EoDXcpFiHwKQL3NphGsn39OCs8.roa (hash: ComC0hDOhJ69SVTLkm+pHNkS7oN++Uq45Amm8PB7U5o=)
2: mRXw1qlhquvGsLUInaApObMQpRw.crl (hash: Cbb2U5NshxJQjEyHvQcvDqI8sRZ/Tl1ELsp8FsnJ8xg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:ea:a2:38:b4:66:bc:bf:a4:a8:dd:5b:85:bc:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9915f0d6a961aaebc6b0b5089da02939b310a51c
Validity
Not Before: Jan 31 12:00:30 2025 GMT
Not After : Feb 1 12:00:30 2025 GMT
Subject: CN=0607d979330cf5954499f7b3b2c6e242fa2e9d09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:03:f4:8b:d7:ed:bf:6f:b9:86:3f:cc:4e:3a:
0a:a8:b9:b9:d9:15:fd:c7:c4:a2:11:e7:ce:48:b5:
c7:5e:b2:b8:e7:2f:79:d1:c7:eb:c2:d8:52:50:e4:
4c:7b:c2:57:7c:64:e1:c8:a9:dd:14:38:c2:57:cf:
b5:10:ca:d8:4c:eb:a6:21:ba:b2:de:59:d0:07:9c:
32:21:21:1f:8f:b5:42:c8:f5:6f:18:eb:db:aa:ac:
b6:4f:2c:86:d2:08:36:f8:ca:07:98:c0:92:1e:fd:
9e:b2:ad:58:db:4a:20:d0:9b:e9:40:1f:84:80:c0:
c0:8f:9c:70:26:b5:d1:17:9f:29:c2:4a:d9:6b:09:
08:17:70:b9:07:7b:7a:5e:9d:6f:cd:c8:90:3c:57:
f8:81:3d:62:9e:c9:ad:e9:40:5c:6b:76:2f:2b:12:
54:4d:2e:e9:ed:e8:b1:a9:46:a8:9e:5a:44:6f:b4:
c6:9d:9d:15:5a:30:c5:fb:27:95:3f:dc:24:a6:16:
e0:84:00:c2:27:ae:ad:74:be:a3:8c:25:54:92:fe:
e9:41:38:89:4f:7d:14:68:6c:7a:fb:cd:43:9d:40:
96:ab:19:dc:55:80:fa:88:bb:61:e4:92:34:37:ae:
59:73:79:6b:80:35:d2:a8:8b:d4:35:50:c9:9e:02:
59:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:07:D9:79:33:0C:F5:95:44:99:F7:B3:B2:C6:E2:42:FA:2E:9D:09
X509v3 Authority Key Identifier:
keyid:99:15:F0:D6:A9:61:AA:EB:C6:B0:B5:08:9D:A0:29:39:B3:10:A5:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mRXw1qlhquvGsLUInaApObMQpRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fa110d-e6e5-4bf9-84fe-bf26a7faa603/1/mRXw1qlhquvGsLUInaApObMQpRw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fa110d-e6e5-4bf9-84fe-bf26a7faa603/1/mRXw1qlhquvGsLUInaApObMQpRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:d4:f3:02:c5:d7:03:ae:91:c2:90:14:87:7e:e1:67:d7:9b:
07:e8:22:9a:6b:a7:71:e5:66:6c:66:54:68:18:e5:2b:18:d6:
fb:41:f6:ec:6f:cc:2a:71:db:39:6f:70:76:7e:16:38:8e:85:
3a:ce:aa:57:15:c6:f2:34:a0:83:a7:14:6a:23:31:0e:84:6e:
2e:58:38:ac:dd:0f:84:21:50:d0:7b:1f:61:7e:4f:a6:c9:9d:
5e:86:a8:00:2f:bb:bf:c8:ec:90:cd:a2:4d:6e:19:f9:8b:b0:
0b:f9:da:9a:5b:db:ac:ed:2c:33:70:08:8a:cf:6d:5d:fa:97:
98:14:56:62:00:33:53:45:aa:78:2d:53:29:df:8b:c2:13:b7:
9c:b1:af:d5:1a:32:a4:e4:de:dd:bc:83:5d:1c:ee:10:fd:f1:
3e:f0:25:ee:62:79:43:3e:6c:19:5e:cd:a9:75:77:de:c4:15:
38:2e:52:0c:65:44:19:7f:52:25:15:60:1c:27:26:c7:41:28:
2c:62:3c:20:b6:ae:af:fd:5a:2a:86:02:71:ed:e8:22:b4:db:
c5:45:ce:ee:f9:7d:f3:46:2d:1c:f3:29:fd:c7:30:b1:80:14:
b3:5a:d5:60:40:4c:b8:96:de:66:f5:7c:44:bb:78:34:67:69:
2b:36:d7:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:28 2025 by rpki-client