Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/497b78-b546-4630-9348-739c85c200b9/1/m2CmodoPEXgE8H_hJTh6KtyZiWU.mft
File: m2CmodoPEXgE8H_hJTh6KtyZiWU.mft (raw, json)
Hash identifier: c1yezq/XWBSqEQstsZMMEkvA0APZJIuCz2ztTuxNGGo=
Subject key identifier: 18:C5:F4:25:58:52:DE:6D:17:9B:85:58:C5:AD:23:45:1D:7B:60:01
Authority key identifier: 9B:60:A6:A1:DA:0F:11:78:04:F0:7F:E1:25:38:7A:2A:DC:99:89:65
Certificate issuer: /CN=9b60a6a1da0f117804f07fe125387a2adc998965
Certificate serial: 0194BBCDE80EC08F1D3E2AAF881B5EA34773
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m2CmodoPEXgE8H_hJTh6KtyZiWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/497b78-b546-4630-9348-739c85c200b9/1/m2CmodoPEXgE8H_hJTh6KtyZiWU.mft
Manifest number: 081C
Signing time: Fri 31 Jan 2025 10:00:21 +0000
Manifest this update: Fri 31 Jan 2025 10:00:21 +0000
Manifest next update: Sat 01 Feb 2025 10:00:21 +0000
Files and hashes: 1: m2CmodoPEXgE8H_hJTh6KtyZiWU.crl (hash: 9aUu8d/x2wlVK2AS7xn/I2DzkHSRSB94xjXmzdJ75H0=)
2: rhJcJSm_PMi8Ty8JJNNm9gt0gCs.roa (hash: 35jRPVs6JG51YgnZYUHY+bKhkmjaLSvQRKcI4y/GRMA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:e8:0e:c0:8f:1d:3e:2a:af:88:1b:5e:a3:47:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b60a6a1da0f117804f07fe125387a2adc998965
Validity
Not Before: Jan 31 10:00:21 2025 GMT
Not After : Feb 1 10:00:21 2025 GMT
Subject: CN=18c5f4255852de6d179b8558c5ad23451d7b6001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:42:4c:92:24:75:82:34:26:6d:55:39:e3:55:
97:b1:7e:05:39:e0:af:e3:db:de:34:76:4c:12:10:
17:56:21:c9:29:89:e6:50:d5:2e:a0:d4:2e:dd:91:
dd:01:80:b6:15:80:f7:f9:0b:43:a1:99:fb:18:1d:
cb:0e:a4:84:71:0a:da:b7:19:11:64:ec:9b:b0:f0:
32:dc:e0:bb:16:dc:43:14:09:08:65:99:ac:5c:2c:
8c:82:2d:6a:ff:33:74:ba:1f:ed:9b:0b:5c:9b:82:
ef:40:7a:95:92:93:b8:05:3f:62:f8:b2:04:1a:72:
23:ce:b6:b7:f0:2d:a0:91:2e:92:d5:9b:26:f6:fc:
ac:82:c2:57:a2:b5:e7:fe:f4:12:7c:a8:60:af:82:
cd:54:39:a6:18:e3:4b:86:90:34:75:98:38:ec:0b:
b1:dc:71:40:08:0e:0f:8c:e9:f0:00:d2:c7:f7:2b:
ef:b9:0d:0d:60:7a:1d:54:68:4f:57:9d:46:3b:c1:
23:96:87:ca:e7:62:6d:22:4a:65:9f:39:f7:ca:4a:
d8:bb:50:db:ec:33:64:e2:28:a7:6b:14:27:e4:46:
cf:6d:a5:37:d9:19:c1:5f:dd:58:f7:36:ac:13:74:
02:d2:fa:08:0c:b0:6d:60:21:02:19:42:9b:db:66:
0b:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:C5:F4:25:58:52:DE:6D:17:9B:85:58:C5:AD:23:45:1D:7B:60:01
X509v3 Authority Key Identifier:
keyid:9B:60:A6:A1:DA:0F:11:78:04:F0:7F:E1:25:38:7A:2A:DC:99:89:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m2CmodoPEXgE8H_hJTh6KtyZiWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/497b78-b546-4630-9348-739c85c200b9/1/m2CmodoPEXgE8H_hJTh6KtyZiWU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/497b78-b546-4630-9348-739c85c200b9/1/m2CmodoPEXgE8H_hJTh6KtyZiWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:1a:9f:77:77:97:cd:59:2c:d0:c8:d5:dc:eb:32:e0:23:ce:
3f:ba:54:17:ff:70:85:dd:56:92:78:6d:f5:99:a1:9a:47:12:
84:b8:d7:ff:a4:67:5e:03:ca:f3:80:fb:a0:43:98:cb:17:0a:
68:b9:3b:b1:79:60:8f:4a:0a:ff:10:91:f7:88:b9:d6:61:02:
31:1e:9f:10:06:49:c9:98:07:fa:ab:84:2a:de:09:32:75:88:
4b:78:a9:72:f9:5f:d3:18:04:81:37:25:6d:28:b8:c8:e7:c5:
5a:d7:1d:0c:2e:45:40:60:57:58:d5:6c:d3:4a:21:f7:a5:20:
ed:4d:37:ed:61:d7:bf:61:9a:ee:30:0d:2f:4b:41:52:bc:3d:
d3:78:eb:4c:46:a4:ae:9c:bb:bf:71:0d:54:82:ef:c4:2b:30:
27:1b:53:ed:32:58:03:b2:ec:00:5e:de:2e:8a:61:b2:d8:5d:
b9:80:d4:d4:9d:2e:25:db:88:9e:63:58:06:fd:f6:ba:d4:9d:
a8:2f:8e:3d:22:fd:5c:29:30:c8:d0:d5:98:83:f8:dc:92:c3:
fe:48:81:cf:76:8a:e6:79:e7:fb:22:60:2e:20:4e:ec:52:ea:
a6:d8:c9:ca:25:38:67:1f:1a:09:35:c7:19:59:3c:42:24:3f:
3f:2a:cf:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:47 2025 by rpki-client