Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/8233f2-d3c0-4501-a9c7-138c8417ae93/1/cmMziKelz-mnyhn9dMki3LEladM.mft
File: cmMziKelz-mnyhn9dMki3LEladM.mft (raw, json)
Hash identifier: HzQ53fccmZOAej5uhHWEyBnKqG9CCVowN/ZRX5h2hxc=
Subject key identifier: 46:0F:C3:52:4C:FC:82:A4:04:B3:FF:96:B8:EB:2C:9A:CB:07:42:3B
Authority key identifier: 72:63:33:88:A7:A5:CF:E9:A7:CA:19:FD:74:C9:22:DC:B1:25:69:D3
Certificate issuer: /CN=72633388a7a5cfe9a7ca19fd74c922dcb12569d3
Certificate serial: 0194BC04F33C38B41C9623354E2157A40702
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cmMziKelz-mnyhn9dMki3LEladM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/8233f2-d3c0-4501-a9c7-138c8417ae93/1/cmMziKelz-mnyhn9dMki3LEladM.mft
Manifest number: 0FD6
Signing time: Fri 31 Jan 2025 11:00:28 +0000
Manifest this update: Fri 31 Jan 2025 11:00:28 +0000
Manifest next update: Sat 01 Feb 2025 11:00:28 +0000
Files and hashes: 1: MkZrEXKyhFwVvNuGV9aT6iA9e-E.roa (hash: P+ppmdHA85AavE4SuC0r26COz1iZwYG4tMktUYoh6TQ=)
2: bvvZErx8yb4YddobsQuNGqwzPUw.roa (hash: qLe1f2hJ1WmPgxP8UHTFIQszxs7kYJ5N6PdJJshRMio=)
3: cmMziKelz-mnyhn9dMki3LEladM.crl (hash: KiIVcBpqMLKWlgwoEBXBa3k6/PtxINivdpxv+hGrpZI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:f3:3c:38:b4:1c:96:23:35:4e:21:57:a4:07:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72633388a7a5cfe9a7ca19fd74c922dcb12569d3
Validity
Not Before: Jan 31 11:00:28 2025 GMT
Not After : Feb 1 11:00:28 2025 GMT
Subject: CN=460fc3524cfc82a404b3ff96b8eb2c9acb07423b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c7:95:fa:09:8f:63:74:6b:db:8d:52:c8:92:
71:42:50:98:87:5a:a3:3f:4a:27:a7:bc:85:36:5f:
75:04:48:26:23:f7:1a:85:09:86:f0:00:a8:f7:62:
68:f9:da:f6:c2:7a:2a:1d:08:87:94:31:d1:39:71:
7e:bd:a2:9f:55:e9:59:e4:54:80:0b:a6:df:1c:64:
76:71:5a:a1:cf:eb:db:e8:27:8e:c5:14:8d:c9:3f:
87:ee:c7:d8:e4:ef:60:30:e0:22:fe:93:ed:53:3f:
66:6f:fb:3c:84:90:3d:21:09:11:c1:26:39:ee:a7:
6f:ec:81:0f:62:b4:52:67:12:3e:ec:89:3d:9c:aa:
82:fa:e9:b0:49:27:e1:7a:31:ca:1c:3f:5f:08:30:
4c:b3:e0:59:86:08:5c:f8:05:a2:3b:0d:75:29:d3:
e0:65:94:ce:c5:45:c1:a3:6f:15:88:90:5a:52:33:
76:a9:01:fb:15:f1:e8:c6:8d:5d:d5:cd:0f:d2:3a:
0a:00:98:8b:98:f5:54:bc:39:97:78:1a:63:e5:2d:
42:54:bd:1b:39:57:82:35:93:db:7a:46:53:b1:33:
ae:88:a8:3f:99:5b:2e:69:77:a3:8c:22:dd:04:bb:
a0:71:69:a9:7e:1f:7b:87:f4:e3:61:f1:95:9a:a9:
df:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:0F:C3:52:4C:FC:82:A4:04:B3:FF:96:B8:EB:2C:9A:CB:07:42:3B
X509v3 Authority Key Identifier:
keyid:72:63:33:88:A7:A5:CF:E9:A7:CA:19:FD:74:C9:22:DC:B1:25:69:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cmMziKelz-mnyhn9dMki3LEladM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/8233f2-d3c0-4501-a9c7-138c8417ae93/1/cmMziKelz-mnyhn9dMki3LEladM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/8233f2-d3c0-4501-a9c7-138c8417ae93/1/cmMziKelz-mnyhn9dMki3LEladM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:9a:bd:50:4b:e1:d0:4a:56:ff:1a:27:31:8f:99:49:d6:4f:
2c:84:7b:e9:f5:f2:fe:aa:50:b0:b8:83:cc:ed:76:97:0b:92:
2f:ed:3a:c3:3e:f0:a2:b0:80:dd:56:7b:0e:80:45:10:2f:f5:
bc:e1:33:b6:ca:90:cb:1f:5c:b5:4d:72:bd:9e:4b:20:4e:af:
ae:a0:5b:f8:6a:65:5c:3c:41:fd:a0:47:8a:61:f6:74:7d:93:
35:65:08:d4:10:17:b7:f0:7f:e3:15:58:4e:73:7c:de:61:aa:
06:6e:53:17:8b:ed:07:af:b5:2c:42:3c:75:df:1e:21:51:c2:
67:b7:40:e0:5a:bf:57:d2:ac:e8:ab:88:2c:bc:09:b2:c3:6c:
35:c5:71:05:cb:ea:59:95:26:f6:dd:93:79:0c:27:ba:b8:5e:
25:1a:80:f3:24:a4:28:a7:79:70:a3:c8:c3:75:02:77:ef:04:
ac:b6:85:0d:5c:ba:5e:9b:cf:fb:f8:a4:94:fb:95:1d:63:44:
f3:cf:71:cb:40:d6:cd:32:88:27:fd:84:fe:3c:1e:b7:c2:7a:
58:a7:89:e2:89:11:e6:2a:f6:4b:14:a3:1a:2f:c5:d6:e7:8b:
4f:b5:d2:cc:7e:c6:a0:08:7a:25:dd:ed:55:fe:c4:2b:70:f7:
e9:21:f1:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:27 2025 by rpki-client