Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/0a3827-b6c5-4c3a-96e6-e8db018b36dd/1/m4Nem003buarbK0nXiQ89ATBKvQ.mft
File: m4Nem003buarbK0nXiQ89ATBKvQ.mft (raw, json)
Hash identifier: GDd/dKbq6I+YpmMAGNo4JH8GIbUkUQKkYPH2mwGuMio=
Subject key identifier: 25:7E:00:81:05:BC:90:C5:A4:14:A8:98:29:A4:78:94:67:7B:49:48
Authority key identifier: 9B:83:5E:9B:4D:37:6E:E6:AB:6C:AD:27:5E:24:3C:F4:04:C1:2A:F4
Certificate issuer: /CN=9b835e9b4d376ee6ab6cad275e243cf404c12af4
Certificate serial: 0194BC3C024C1F2FE096613A4B83E31B108F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m4Nem003buarbK0nXiQ89ATBKvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/0a3827-b6c5-4c3a-96e6-e8db018b36dd/1/m4Nem003buarbK0nXiQ89ATBKvQ.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 12:00:36 +0000
Manifest this update: Fri 31 Jan 2025 12:00:36 +0000
Manifest next update: Sat 01 Feb 2025 12:00:36 +0000
Files and hashes: 1: FKxAf9kPwHzYJS2FpdjUyN6RbkQ.roa (hash: 7JYQFVBAJu7wUnu+Gsv5BhX/IXxKlL87JHFuhVHrKK0=)
2: m4Nem003buarbK0nXiQ89ATBKvQ.crl (hash: m6ItSdiiD+r3Cqc+iI1VB32D94GceTKCfmSkq7hOY40=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:02:4c:1f:2f:e0:96:61:3a:4b:83:e3:1b:10:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b835e9b4d376ee6ab6cad275e243cf404c12af4
Validity
Not Before: Jan 31 12:00:36 2025 GMT
Not After : Feb 1 12:00:36 2025 GMT
Subject: CN=257e008105bc90c5a414a89829a47894677b4948
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:0f:f5:71:85:5c:57:80:f2:0e:33:37:e5:dd:
40:e8:67:3c:24:73:b5:c7:d8:49:ab:f7:59:49:f9:
c0:2a:0f:58:0e:e8:a0:1a:f3:5a:aa:61:86:08:1b:
70:a2:0b:9d:9a:19:5d:6c:c1:af:7b:1c:c0:92:62:
24:8c:b8:c2:77:ac:90:4a:e4:62:2e:19:0c:81:5a:
c4:fb:9c:99:77:86:98:27:26:53:e7:fd:d0:3b:55:
78:07:84:39:9f:c0:8b:df:b3:70:e4:f2:9c:b3:9a:
78:b4:85:ab:bc:aa:1d:75:58:41:5f:c8:86:34:eb:
cd:86:78:1d:ae:cc:43:cc:a0:4f:f6:36:3e:ba:49:
6a:e1:58:c8:93:c2:81:ed:01:1c:fa:bc:37:c1:c9:
9e:bd:f9:ba:3b:e8:19:53:db:98:a1:48:88:14:34:
02:20:76:e1:be:15:16:a5:49:6e:82:2f:87:13:50:
03:24:bc:e3:91:58:de:e9:47:5a:c8:c2:e7:b7:81:
fd:57:fc:6e:f9:93:21:3c:d7:8c:38:42:93:a5:11:
d6:9c:e8:d8:3f:f8:b1:a5:c0:f0:42:7b:c9:2a:4d:
07:59:92:25:17:c0:8c:44:4a:e8:7e:cc:3c:ab:84:
8e:33:3f:fd:18:fa:f6:48:e2:99:ed:04:ab:6d:c8:
c4:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:7E:00:81:05:BC:90:C5:A4:14:A8:98:29:A4:78:94:67:7B:49:48
X509v3 Authority Key Identifier:
keyid:9B:83:5E:9B:4D:37:6E:E6:AB:6C:AD:27:5E:24:3C:F4:04:C1:2A:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m4Nem003buarbK0nXiQ89ATBKvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/0a3827-b6c5-4c3a-96e6-e8db018b36dd/1/m4Nem003buarbK0nXiQ89ATBKvQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/0a3827-b6c5-4c3a-96e6-e8db018b36dd/1/m4Nem003buarbK0nXiQ89ATBKvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:93:00:5f:6e:06:44:43:a4:a5:92:16:52:3d:94:e2:16:8e:
8b:60:d3:26:40:42:92:87:26:0e:f5:42:4d:dc:f1:f0:d1:1d:
10:ac:40:a1:9c:78:31:02:31:3a:bd:33:3c:e9:75:15:32:8a:
a8:d2:65:33:64:5a:91:40:ae:13:4e:76:a7:4d:5d:c0:c8:6e:
bd:ff:61:39:e4:c5:0b:63:78:ea:09:9f:bd:95:82:89:d9:93:
77:aa:7f:7d:df:40:13:34:bf:ef:76:29:ff:71:38:a5:22:cc:
55:1f:d8:7a:8b:de:13:9a:95:fd:9b:30:40:dd:20:97:a9:58:
99:e1:77:f2:3f:f5:47:3e:41:20:15:5d:b2:8b:b4:be:8b:91:
d5:73:21:90:56:b2:c2:d2:c1:7c:d6:af:94:3e:65:ee:b9:ef:
b1:75:5c:b4:d4:1c:13:d2:49:22:61:b6:44:9a:02:41:9a:27:
cf:02:28:94:f6:91:fe:b4:07:ca:f5:8e:a6:e5:93:45:7e:4d:
d4:be:25:75:0f:25:5c:1d:16:c2:4c:04:80:86:df:bf:b0:3c:
cc:76:37:8a:d2:87:3c:55:7e:12:4c:b3:8d:93:cc:7d:8f:db:
e4:71:00:8e:9e:c2:e3:dd:34:98:95:c0:64:fc:a9:40:0d:07:
19:04:bf:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:39:57 2025 by rpki-client