Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/3c6cb5-a72c-4701-ae6c-306c5651343e/1/mUT4EqDgAsOOhOR2KL26A4WYCQs.mft
File: mUT4EqDgAsOOhOR2KL26A4WYCQs.mft (raw, json)
Hash identifier: DEXUbwyf0DiY7YQuJTgcw5l89VhIEad5nzM7EdLmjGw=
Subject key identifier: 6A:4B:13:A7:67:5C:7D:5E:D0:ED:D3:68:62:6C:A9:C9:04:F9:48:FB
Authority key identifier: 99:44:F8:12:A0:E0:02:C3:8E:84:E4:76:28:BD:BA:03:85:98:09:0B
Certificate issuer: /CN=9944f812a0e002c38e84e47628bdba038598090b
Certificate serial: 0194BC3C16AC922468E90E43D0914FEB8D77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mUT4EqDgAsOOhOR2KL26A4WYCQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/3c6cb5-a72c-4701-ae6c-306c5651343e/1/mUT4EqDgAsOOhOR2KL26A4WYCQs.mft
Manifest number: 09B7
Signing time: Fri 31 Jan 2025 12:00:41 +0000
Manifest this update: Fri 31 Jan 2025 12:00:41 +0000
Manifest next update: Sat 01 Feb 2025 12:00:41 +0000
Files and hashes: 1: 8bKL0IbQOSgAyNHMsOTwdqXxmBA.roa (hash: SiMZDaqzDjVBWVjWC+CfQKEVMp/aAzgNg3WOueNrYnY=)
2: TOZ32S2cTtEqOAugUTe4Diokmjc.roa (hash: ZfLvnSZb+3P/Lwkuj8mzNGrvWl0G71GHwv4eE3pKqaY=)
3: aWPrtGmH1Yyr9JygOmf8I8XXZSE.roa (hash: rxPNfyseh9mYpYa5sMESZMtb8GzaNyszUYWBRocITXE=)
4: mUT4EqDgAsOOhOR2KL26A4WYCQs.crl (hash: wZg9nWuh2IzYmAFc4TRnPzrHRoqcYyJpv+JJBYOQ5cQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:16:ac:92:24:68:e9:0e:43:d0:91:4f:eb:8d:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9944f812a0e002c38e84e47628bdba038598090b
Validity
Not Before: Jan 31 12:00:41 2025 GMT
Not After : Feb 1 12:00:41 2025 GMT
Subject: CN=6a4b13a7675c7d5ed0edd368626ca9c904f948fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:b8:99:ea:a6:f7:26:ae:7d:4d:57:73:03:4f:
ee:21:03:35:26:24:1e:d8:67:bd:57:92:e8:2d:6e:
77:0a:0c:06:a7:51:49:e6:68:ba:14:58:4b:3a:96:
ba:b4:f3:ae:2d:4e:66:6d:e8:f9:55:5b:46:95:6b:
75:48:7a:29:ca:a8:32:9c:54:c9:4e:06:f0:72:0b:
3c:1f:25:94:9f:75:df:e5:a8:2a:e3:18:28:f8:32:
99:87:32:06:81:07:fc:20:00:17:6f:52:69:bd:0b:
9a:5a:76:3d:4f:be:0a:cc:1a:e9:d0:12:6e:ec:19:
d8:91:24:b1:85:89:47:af:bd:fd:be:2a:ca:74:4c:
93:91:64:13:ef:d1:a2:ba:71:82:c0:83:a8:ad:d9:
f9:65:d7:4c:1e:f6:f5:ac:3b:45:9c:83:43:db:6c:
81:89:b5:b2:84:f8:20:f7:4d:79:6d:c1:fe:81:56:
c1:7d:f5:0e:19:74:80:f7:89:e3:82:44:03:d4:0e:
d0:a0:09:e4:79:c8:d4:53:42:19:1c:f0:78:fe:07:
8e:22:e0:d5:20:67:21:c1:3b:63:44:19:85:e8:a4:
5e:08:24:58:f2:e3:1f:2e:7c:7d:65:ca:f1:f8:9e:
8e:29:ec:82:d7:ba:20:70:34:5d:fe:55:20:50:7a:
de:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:4B:13:A7:67:5C:7D:5E:D0:ED:D3:68:62:6C:A9:C9:04:F9:48:FB
X509v3 Authority Key Identifier:
keyid:99:44:F8:12:A0:E0:02:C3:8E:84:E4:76:28:BD:BA:03:85:98:09:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mUT4EqDgAsOOhOR2KL26A4WYCQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/3c6cb5-a72c-4701-ae6c-306c5651343e/1/mUT4EqDgAsOOhOR2KL26A4WYCQs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/3c6cb5-a72c-4701-ae6c-306c5651343e/1/mUT4EqDgAsOOhOR2KL26A4WYCQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:a4:1f:cc:c5:29:d9:52:51:59:c5:9c:f4:de:8f:05:3c:dc:
ea:25:7a:c7:d3:c9:22:64:b3:46:9c:1f:5d:14:e6:d4:ce:b3:
c7:0c:7b:73:c6:7a:36:96:28:2b:2e:37:53:a0:36:70:31:d7:
70:d4:ff:b4:91:e2:1c:de:25:59:26:2c:44:e1:66:48:a5:c9:
f1:e0:e5:20:fe:f1:e8:03:25:4a:60:d9:61:fc:3c:ee:ec:b8:
a6:2d:0e:7f:a8:83:c1:81:a6:6b:36:9d:b7:35:11:39:6b:69:
b4:84:98:ce:84:27:9a:fc:33:4f:2c:61:9e:44:bf:93:6c:89:
3f:c4:16:8c:0f:8e:82:5e:f3:51:f5:ee:f6:1e:bc:90:26:88:
d4:34:f4:96:6e:e7:74:ef:df:e6:da:ad:a4:10:37:26:4d:aa:
10:34:e2:53:80:7f:7d:19:0c:0b:ef:a9:55:fa:21:d4:34:ae:
b9:14:4e:ce:e1:15:9e:9b:fd:98:48:12:cf:c4:b8:60:58:12:
f5:f1:48:df:33:b2:0d:a4:86:01:26:c0:e9:8d:a1:dc:37:e8:
96:71:1e:aa:fc:e5:0e:cc:8c:64:cd:8b:b4:4b:12:f8:ae:67:
b8:f1:86:14:b0:79:a5:b4:e2:12:b0:3d:22:8c:0c:d5:69:ab:
92:9b:d5:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 09:14:36 2025 by rpki-client