Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/3e3b17-84c9-4472-bd33-12674e661e13/1/mJB4Bt2stIQwvdAlSJgBnkE6K94.mft
File: mJB4Bt2stIQwvdAlSJgBnkE6K94.mft (raw, json)
Hash identifier: ONIropgP7ok0FRcwTYaded1/XfhY+tY8IdlxfEG+z2Y=
Subject key identifier: B5:4C:0B:35:76:6B:63:AB:D9:00:EF:7F:E0:2B:92:80:96:48:B3:DA
Authority key identifier: 98:90:78:06:DD:AC:B4:84:30:BD:D0:25:48:98:01:9E:41:3A:2B:DE
Certificate issuer: /CN=98907806ddacb48430bdd0254898019e413a2bde
Certificate serial: 0194BD857C8A790238F53995B3E0BDCE1523
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mJB4Bt2stIQwvdAlSJgBnkE6K94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/3e3b17-84c9-4472-bd33-12674e661e13/1/mJB4Bt2stIQwvdAlSJgBnkE6K94.mft
Manifest number: 0B11
Signing time: Fri 31 Jan 2025 18:00:29 +0000
Manifest this update: Fri 31 Jan 2025 18:00:29 +0000
Manifest next update: Sat 01 Feb 2025 18:00:29 +0000
Files and hashes: 1: acpHH_CaNcRdqw7JD1HuBSlb_jE.roa (hash: Wxjj/iVVVmCvZCfA0I7IDXleX19TKp07yCUTpeGLxQk=)
2: mJB4Bt2stIQwvdAlSJgBnkE6K94.crl (hash: 31j828w2LZpf8dwNttutroHqYjw5JBb6qXPFlPR+ItQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:7c:8a:79:02:38:f5:39:95:b3:e0:bd:ce:15:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98907806ddacb48430bdd0254898019e413a2bde
Validity
Not Before: Jan 31 18:00:29 2025 GMT
Not After : Feb 1 18:00:29 2025 GMT
Subject: CN=b54c0b35766b63abd900ef7fe02b92809648b3da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:27:da:67:60:91:03:81:58:26:10:a5:55:10:
1b:8c:99:6a:73:9a:0d:ba:13:59:58:6a:e9:a5:58:
0e:87:3d:1e:aa:85:0c:34:ec:9b:ad:52:cb:20:62:
8d:21:e4:b2:2b:52:97:f7:26:39:cb:7a:a3:e1:60:
61:55:e2:41:af:6a:d6:a2:65:eb:c5:8b:a2:08:12:
9c:7d:52:bb:01:61:a7:e0:5b:1f:d6:f5:4e:23:88:
f8:61:53:ff:c3:f2:99:1b:9c:a0:03:72:f1:37:92:
5f:c2:28:11:6b:48:9a:7a:ce:52:ed:f8:89:dc:25:
47:da:06:59:10:fc:4f:d5:56:98:e0:d6:3b:50:ba:
46:d8:af:82:57:5c:ac:17:0e:38:8b:75:c3:5e:5e:
c1:c0:a8:ea:fd:ec:37:97:0e:94:94:61:a0:5e:1c:
49:b3:aa:2a:7a:60:e2:48:fb:0a:bc:77:cc:75:65:
30:99:ad:ff:94:b0:c6:92:f3:37:10:d6:28:09:ca:
f6:35:02:cb:46:5b:fd:05:40:b1:91:08:29:f8:d5:
4e:b3:6c:b2:b0:59:e3:75:a8:f5:f6:a2:0c:35:66:
d9:c5:12:78:0a:25:b8:27:52:f4:53:df:c4:82:46:
05:28:32:9c:74:c8:56:eb:2c:12:be:97:19:ba:77:
01:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:4C:0B:35:76:6B:63:AB:D9:00:EF:7F:E0:2B:92:80:96:48:B3:DA
X509v3 Authority Key Identifier:
keyid:98:90:78:06:DD:AC:B4:84:30:BD:D0:25:48:98:01:9E:41:3A:2B:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mJB4Bt2stIQwvdAlSJgBnkE6K94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3e3b17-84c9-4472-bd33-12674e661e13/1/mJB4Bt2stIQwvdAlSJgBnkE6K94.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3e3b17-84c9-4472-bd33-12674e661e13/1/mJB4Bt2stIQwvdAlSJgBnkE6K94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:2a:4a:46:d4:87:e9:61:68:29:b3:63:e2:fe:a3:1e:b6:81:
c3:1b:d4:b6:db:b3:76:a9:54:0b:07:c9:e3:2a:fd:9c:de:20:
bd:74:63:5d:15:3d:9f:6c:00:6f:91:98:4a:46:73:8d:4d:8c:
32:15:bf:50:1f:05:79:5d:0a:c8:88:f8:3a:56:f5:a7:4d:09:
59:5f:fa:e6:bb:af:43:86:8c:08:ed:c2:4a:2b:f3:5b:10:02:
35:a2:a5:1d:43:62:6e:ff:f3:58:72:5d:8b:ce:76:03:0c:af:
49:b3:ff:37:1d:db:74:52:60:02:0b:6a:7b:af:32:a9:5a:96:
25:a9:a3:00:c9:aa:d8:de:89:02:ec:a9:18:5a:3c:d4:62:5b:
8a:85:7f:50:ae:81:53:f2:cc:19:f3:9d:64:ed:9b:82:82:5c:
dd:cd:6b:1d:13:c2:2d:07:15:2d:f9:ff:d8:0b:61:1e:35:9c:
1a:c8:bc:f9:34:2a:47:8d:b2:5f:42:30:79:4c:a3:df:e8:49:
72:2e:66:de:4f:77:e6:f8:4b:b6:0b:8e:54:20:b4:2d:af:de:
2c:fb:64:19:f3:aa:9a:f2:21:05:ac:24:1b:b7:16:57:42:fb:
b4:31:e3:03:1b:57:ba:5d:4f:85:f9:60:a2:d9:3c:31:d4:72:
c4:e6:cb:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:20:29 2025 by rpki-client