Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/8450a1-66db-48c6-93b8-947859c0ecc4/1/mmLiahyv_1UwpwGQyNAAwQ8kuWY.mft
File: mmLiahyv_1UwpwGQyNAAwQ8kuWY.mft (raw, json)
Hash identifier: N8IvowxhGqHLizbpC6REc147J/fQ0u+FmfWt0DI1mUQ=
Subject key identifier: DA:67:9C:4F:E7:EC:49:27:BE:64:B4:08:2D:6F:12:B9:85:85:FC:15
Authority key identifier: 9A:62:E2:6A:1C:AF:FF:55:30:A7:01:90:C8:D0:00:C1:0F:24:B9:66
Certificate issuer: /CN=9a62e26a1cafff5530a70190c8d000c10f24b966
Certificate serial: 0194BD8535D4B93D76A8BFACF09C785594F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mmLiahyv_1UwpwGQyNAAwQ8kuWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/8450a1-66db-48c6-93b8-947859c0ecc4/1/mmLiahyv_1UwpwGQyNAAwQ8kuWY.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 18:00:11 +0000
Manifest this update: Fri 31 Jan 2025 18:00:11 +0000
Manifest next update: Sat 01 Feb 2025 18:00:11 +0000
Files and hashes: 1: dxplGkGd26kxQwEZC2H1JLcUelQ.roa (hash: hG64YrjrDAuq/4PStZsOFKbG0lLEJS6HhJTFQZMO3jk=)
2: mmLiahyv_1UwpwGQyNAAwQ8kuWY.crl (hash: 6JwVbbadE/pzUbRqoJNHbWcmfLYLWzFPcN7FXF1hsAE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:35:d4:b9:3d:76:a8:bf:ac:f0:9c:78:55:94:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a62e26a1cafff5530a70190c8d000c10f24b966
Validity
Not Before: Jan 31 18:00:11 2025 GMT
Not After : Feb 1 18:00:11 2025 GMT
Subject: CN=da679c4fe7ec4927be64b4082d6f12b98585fc15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:32:b0:d3:7a:67:db:29:6a:54:d0:fb:df:b9:
72:4c:27:9f:0e:3e:91:49:ff:af:a0:d2:2a:5d:17:
79:15:9e:08:10:20:82:e6:9c:f5:41:f6:01:c5:57:
d5:6d:8d:79:3a:a1:d7:d9:91:a0:3e:e4:fe:83:38:
ec:b3:25:ad:ad:66:60:d6:cc:70:3b:52:dd:bf:87:
ee:48:2c:0a:08:1a:39:0c:31:3f:9d:61:67:0c:3d:
0c:e0:13:4f:7f:41:b5:31:3f:25:6f:9b:ff:fd:84:
1a:8a:21:9d:b7:88:4e:f3:d7:13:d7:90:93:3a:55:
95:ec:05:4f:3f:89:50:ea:fa:61:99:6c:e1:fe:80:
2f:38:1b:13:c9:26:10:26:a4:4d:f7:cb:43:cd:3a:
27:a8:44:87:db:23:44:a2:8b:51:cc:32:59:ed:96:
6f:6f:a5:96:b0:bc:d0:29:06:df:28:13:b0:14:64:
1c:b0:ff:58:16:9e:d6:d1:5b:2a:49:85:c2:5d:81:
53:ca:f1:ad:e1:78:96:e6:c6:26:35:86:60:86:42:
04:c3:7a:65:f9:ac:e6:9e:8d:e6:6d:ac:59:4f:de:
9b:01:83:8a:d8:e6:b2:b6:fa:f7:93:1c:dd:17:90:
ef:ee:37:bf:5f:9e:03:8a:6a:f4:c2:1e:82:37:dd:
64:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:67:9C:4F:E7:EC:49:27:BE:64:B4:08:2D:6F:12:B9:85:85:FC:15
X509v3 Authority Key Identifier:
keyid:9A:62:E2:6A:1C:AF:FF:55:30:A7:01:90:C8:D0:00:C1:0F:24:B9:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mmLiahyv_1UwpwGQyNAAwQ8kuWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8450a1-66db-48c6-93b8-947859c0ecc4/1/mmLiahyv_1UwpwGQyNAAwQ8kuWY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8450a1-66db-48c6-93b8-947859c0ecc4/1/mmLiahyv_1UwpwGQyNAAwQ8kuWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:63:11:ef:b9:ca:35:db:83:5f:c8:63:da:db:19:70:a2:85:
b1:08:69:67:0e:13:67:ed:a4:75:df:cb:c3:44:79:54:c8:a7:
92:95:98:37:e0:6a:e0:eb:2d:a8:a8:3c:29:ff:41:b8:a0:a0:
c7:9b:b6:0a:d1:b6:af:3d:c8:a3:e3:5b:b0:8f:67:c8:c2:1f:
83:f1:98:0d:c6:e9:92:12:84:d6:dd:d0:64:af:ef:b2:6d:5f:
48:54:43:9d:24:5a:c4:b0:fe:00:83:03:4e:f7:66:21:49:b1:
dd:35:ef:7a:6c:0b:06:12:c1:d8:c4:06:93:a3:c0:39:70:76:
c5:54:b3:a3:55:95:b8:1d:8f:8c:77:a1:0e:94:31:d0:18:d1:
36:e3:fb:9f:b5:05:58:8c:fd:28:e9:5d:10:ff:00:a6:4b:84:
a1:d6:5a:ce:c7:2a:30:c2:09:65:62:0f:61:f6:8e:8d:a3:a3:
6d:c1:15:53:7d:b2:05:04:ae:86:32:cf:b9:bc:3e:d5:c6:56:
83:af:35:42:6a:3f:d4:51:7d:ed:22:1d:8b:82:77:bb:57:99:
9e:f3:09:ae:08:08:b8:06:0f:b1:b2:83:14:cd:5b:dc:b5:ec:
01:00:5f:b9:54:d8:72:dd:c6:4d:79:8d:3c:4a:ca:63:c7:c3:
ad:a3:ff:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 10:43:33 2025 by rpki-client