Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/3ba2d9-74ce-4881-b23f-7cb0723da0bd/1/my5v1Q3cgXq7rFpk98ahJUaFnOI.mft
File: my5v1Q3cgXq7rFpk98ahJUaFnOI.mft (raw, json)
Hash identifier: pNs6j8Vw6K7ySozMW4DUz5d4V0NXx+3AYx3lEKrcunk=
Subject key identifier: 09:65:95:80:46:16:03:C8:4E:6F:6A:AF:E5:EC:EB:40:A1:91:23:BA
Authority key identifier: 9B:2E:6F:D5:0D:DC:81:7A:BB:AC:5A:64:F7:C6:A1:25:46:85:9C:E2
Certificate issuer: /CN=9b2e6fd50ddc817abbac5a64f7c6a12546859ce2
Certificate serial: 0194BC7296C36F23A7443F7CEC9DD0741CFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/my5v1Q3cgXq7rFpk98ahJUaFnOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/3ba2d9-74ce-4881-b23f-7cb0723da0bd/1/my5v1Q3cgXq7rFpk98ahJUaFnOI.mft
Manifest number: 1221
Signing time: Fri 31 Jan 2025 13:00:13 +0000
Manifest this update: Fri 31 Jan 2025 13:00:13 +0000
Manifest next update: Sat 01 Feb 2025 13:00:13 +0000
Files and hashes: 1: jyUtfXExJkIeWPFE-JODMPcR0NE.roa (hash: IvazoNxGfM9C2jqRgwqUMFSQjgy5bfUJvRSuAgaM680=)
2: my5v1Q3cgXq7rFpk98ahJUaFnOI.crl (hash: Cu0oQIwORxOprGGDd9toFmysdDeR4lCmzTG41rAbY4Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:96:c3:6f:23:a7:44:3f:7c:ec:9d:d0:74:1c:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b2e6fd50ddc817abbac5a64f7c6a12546859ce2
Validity
Not Before: Jan 31 13:00:13 2025 GMT
Not After : Feb 1 13:00:13 2025 GMT
Subject: CN=09659580461603c84e6f6aafe5eceb40a19123ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c3:d0:01:b3:81:ad:95:c2:0e:a2:da:ee:d1:
76:05:70:c4:e3:fe:3f:5f:bf:28:02:ea:fc:a2:56:
f5:ae:f1:29:fd:aa:47:33:70:fc:80:51:dc:ae:aa:
5c:1a:5c:6d:18:5a:4f:92:66:eb:36:f9:ad:f9:c7:
14:04:77:6b:5a:10:28:d7:38:68:42:b8:02:4c:6b:
ce:4e:78:7e:f3:0e:25:9a:ea:94:89:1c:2b:e1:31:
6e:1e:b4:38:ed:75:a0:6c:e3:fc:2f:d9:9f:92:e6:
51:e5:bd:c6:90:a1:f7:ff:97:9c:b2:8b:e6:bd:6b:
02:9e:34:91:0b:11:2d:80:99:c0:56:25:05:7e:3f:
aa:f0:60:40:0d:7a:e4:fb:87:82:a0:ed:77:34:54:
0c:83:bb:11:55:7e:31:b6:da:6f:d9:a0:ad:fa:d9:
37:3c:04:02:6a:01:88:88:df:c4:7a:c0:1a:6a:be:
d0:30:1e:87:40:e0:fc:e6:89:1f:8d:bd:8c:5c:e4:
de:8c:81:d3:4a:16:22:4c:6d:0a:55:3b:05:fe:75:
86:7d:fb:b9:a2:d1:8a:d0:d6:81:b5:a6:84:dc:70:
09:b2:32:04:74:91:28:b8:4b:52:b8:f2:5d:ae:70:
1c:e3:16:f4:32:68:fd:ea:ba:a6:32:36:b5:9e:ec:
3d:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:65:95:80:46:16:03:C8:4E:6F:6A:AF:E5:EC:EB:40:A1:91:23:BA
X509v3 Authority Key Identifier:
keyid:9B:2E:6F:D5:0D:DC:81:7A:BB:AC:5A:64:F7:C6:A1:25:46:85:9C:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/my5v1Q3cgXq7rFpk98ahJUaFnOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/3ba2d9-74ce-4881-b23f-7cb0723da0bd/1/my5v1Q3cgXq7rFpk98ahJUaFnOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/3ba2d9-74ce-4881-b23f-7cb0723da0bd/1/my5v1Q3cgXq7rFpk98ahJUaFnOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:1d:86:91:2b:95:2b:44:b7:2f:0b:32:a8:af:e0:3c:53:74:
61:b2:a7:7f:ee:b8:49:6a:42:b3:f1:78:00:3d:a4:b0:d1:02:
59:c8:59:aa:67:f4:d8:c4:88:3c:e5:21:44:50:e7:e7:20:9f:
3a:df:fe:b2:97:a7:86:fa:27:66:4d:45:f8:e1:c0:e4:0f:a2:
51:23:c0:1a:a1:b7:ec:ac:db:c3:f8:0d:f0:7e:22:29:d0:3e:
e7:79:6c:90:d7:83:c5:db:11:3b:c5:de:e8:c2:1c:26:59:98:
bd:72:18:4d:8b:a4:54:87:5a:51:c9:e2:dc:c9:fb:e7:73:cf:
36:fb:6b:41:8d:ca:99:f4:2c:21:f4:49:d3:fa:aa:ab:15:53:
13:e2:04:fc:4d:36:19:48:77:4c:83:77:5a:32:60:c7:21:78:
1b:86:1c:14:4b:73:2a:79:1c:b8:20:89:52:f5:62:60:4a:d3:
24:78:b8:02:20:55:8c:28:c0:2c:45:5d:9f:f2:a1:cd:d1:e5:
fa:92:39:b9:c2:ca:a0:bb:c7:a1:2e:fc:53:dc:28:cf:8d:b1:
71:98:39:24:00:cf:d0:8c:67:bd:ca:bc:94:0e:02:ed:ac:16:
da:03:42:4a:9a:a7:ea:96:39:bc:b9:40:a0:2d:4f:a4:15:54:
3e:7f:eb:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:25 2025 by rpki-client