Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/7290d5-1ed5-4ca1-96fd-bfc73dd0bbb6/1/m4a9iC5HbkaYMY83BxL3HCv1Dfw.mft
File: m4a9iC5HbkaYMY83BxL3HCv1Dfw.mft (raw, json)
Hash identifier: 1XILSZC2AuQe6ir4sJJsdR+451eYSH0mwk/45xRWJB8=
Subject key identifier: 25:B5:2E:6C:E5:95:25:B6:C6:FB:B7:DE:78:51:6C:35:B8:08:82:ED
Authority key identifier: 9B:86:BD:88:2E:47:6E:46:98:31:8F:37:07:12:F7:1C:2B:F5:0D:FC
Certificate issuer: /CN=9b86bd882e476e4698318f370712f71c2bf50dfc
Certificate serial: 0194BBCEE6D8FF6A5C066AC9FE7EDAC00969
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m4a9iC5HbkaYMY83BxL3HCv1Dfw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/7290d5-1ed5-4ca1-96fd-bfc73dd0bbb6/1/m4a9iC5HbkaYMY83BxL3HCv1Dfw.mft
Manifest number: 086E
Signing time: Fri 31 Jan 2025 10:01:26 +0000
Manifest this update: Fri 31 Jan 2025 10:01:26 +0000
Manifest next update: Sat 01 Feb 2025 10:01:26 +0000
Files and hashes: 1: aOM8GgaoW1G7QCNU_L_vXRvAMEM.roa (hash: tukb95Gwd6x2BRzhLsZA0PSUEck+o+zvt8A2/7nuQh4=)
2: aeMnlDwxWIXe9I15QP1ZQEW4dL8.roa (hash: o539XDvH7v6Q1Bwgk0cJJENARzLE2fligJ+8v8cr/cU=)
3: m4a9iC5HbkaYMY83BxL3HCv1Dfw.crl (hash: PjCJBBfI0DfSrWteQyiWID1+vygZrQDmWnu0T2tI94g=)
4: tI9ka3nY65XI0hS6cPovdv7yr60.roa (hash: +06LGDfkS/BJNhqCcOcJbY1vvOjfeeWWAoEc0fhS6DY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:e6:d8:ff:6a:5c:06:6a:c9:fe:7e:da:c0:09:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b86bd882e476e4698318f370712f71c2bf50dfc
Validity
Not Before: Jan 31 10:01:26 2025 GMT
Not After : Feb 1 10:01:26 2025 GMT
Subject: CN=25b52e6ce59525b6c6fbb7de78516c35b80882ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ee:af:01:3e:f5:32:c5:6c:1b:1c:01:3e:56:
99:8a:fb:a6:70:b2:a9:3d:44:08:79:cd:7b:a8:fe:
a7:d4:a8:f6:8e:4f:27:fd:88:11:7c:bd:8f:96:e2:
6c:7a:63:e6:23:02:67:d8:89:d3:3a:4a:79:67:9c:
37:59:d2:4e:2f:61:c4:4c:b2:5d:01:37:b7:b6:63:
17:cc:4a:67:6a:77:ce:0b:49:c2:f5:96:ac:91:88:
c4:03:2d:10:4e:b9:14:23:48:0b:02:55:d0:a3:18:
2a:61:55:9b:61:c5:6a:03:53:69:fb:87:45:03:9e:
1e:f9:15:f4:79:4b:ef:27:d2:75:cf:10:77:7d:6c:
cb:8f:c4:c9:f6:69:a6:4a:1f:6e:fd:92:7f:c7:31:
a1:64:83:5e:c1:48:d9:19:20:68:79:6a:62:dd:db:
8b:71:fc:35:18:04:ad:c6:89:63:de:12:c4:37:35:
31:52:ca:74:92:c0:4f:ca:7a:ce:d3:b2:11:c2:fa:
af:fa:86:4b:6d:1a:6e:68:68:e7:e4:2f:f0:a9:d2:
61:ea:cb:e5:73:75:c4:e7:79:62:eb:79:8f:1c:f8:
ac:11:b2:59:ab:1a:6e:17:8d:8e:1b:64:13:f2:76:
b8:c2:82:b1:60:6f:e4:6d:94:27:48:07:36:25:76:
5d:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:B5:2E:6C:E5:95:25:B6:C6:FB:B7:DE:78:51:6C:35:B8:08:82:ED
X509v3 Authority Key Identifier:
keyid:9B:86:BD:88:2E:47:6E:46:98:31:8F:37:07:12:F7:1C:2B:F5:0D:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m4a9iC5HbkaYMY83BxL3HCv1Dfw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/7290d5-1ed5-4ca1-96fd-bfc73dd0bbb6/1/m4a9iC5HbkaYMY83BxL3HCv1Dfw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/7290d5-1ed5-4ca1-96fd-bfc73dd0bbb6/1/m4a9iC5HbkaYMY83BxL3HCv1Dfw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:b6:cc:98:28:77:5b:9b:8d:cf:e1:d5:2b:21:9d:2c:7b:62:
da:83:cc:49:c6:2a:a7:52:73:15:4e:3f:80:42:f9:9c:e7:f8:
c1:5b:a4:01:d8:56:3a:31:b3:15:bb:84:fb:08:6a:2e:8d:a8:
51:29:a7:6d:86:70:bd:22:f4:af:41:86:8b:4c:2d:00:b2:39:
a3:80:83:9a:a0:67:ad:03:14:b1:3c:db:9a:b1:f2:d2:6c:87:
d5:b5:e3:c7:7a:c0:4a:14:7d:0b:26:8a:a8:c3:ef:ec:bf:58:
6d:5f:db:6a:94:22:11:34:d1:47:51:5e:85:69:bc:69:f8:2f:
7e:5c:4f:66:2f:dd:f4:5d:53:db:c3:f0:f2:54:ee:19:7f:e4:
ef:b2:39:19:48:74:95:23:27:64:84:03:df:9f:20:d4:a0:a2:
5b:b7:98:f6:4b:d8:2e:23:4e:ba:79:c4:55:f5:e7:d9:65:07:
14:4f:53:f8:b6:6f:c3:d0:2a:0f:26:8e:d9:c8:86:bb:e4:13:
97:1a:29:ce:8d:23:58:0d:70:31:f6:1b:cb:f9:b5:ba:c9:35:
e3:e7:06:07:e5:c5:ca:74:76:a4:68:32:68:8f:c9:93:29:d8:
2a:30:ce:06:88:e8:b6:42:fa:47:f9:bb:16:11:d4:c3:6a:7f:
98:3c:bb:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:39:30 2025 by rpki-client