Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/6b6d1f-5421-48b9-b7eb-da1fe9ebee8e/1/m4FRrhZKW3grED3n98iolIkyrr8.mft
File: m4FRrhZKW3grED3n98iolIkyrr8.mft (raw, json)
Hash identifier: Axszrn1AmHpce5MdQePy1ST/KkCzXZpFP6dNhoZMtR4=
Subject key identifier: E1:E9:60:83:20:FB:A2:1E:F9:0E:3B:CF:65:AC:44:BE:95:70:E7:CE
Authority key identifier: 9B:81:51:AE:16:4A:5B:78:2B:10:3D:E7:F7:C8:A8:94:89:32:AE:BF
Certificate issuer: /CN=9b8151ae164a5b782b103de7f7c8a8948932aebf
Certificate serial: 0194BC72D566B7EC7A7EA055D755C44F0849
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m4FRrhZKW3grED3n98iolIkyrr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/6b6d1f-5421-48b9-b7eb-da1fe9ebee8e/1/m4FRrhZKW3grED3n98iolIkyrr8.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 13:00:29 +0000
Manifest this update: Fri 31 Jan 2025 13:00:29 +0000
Manifest next update: Sat 01 Feb 2025 13:00:29 +0000
Files and hashes: 1: PCeyRcCnkd2jcpnfX_81z2NuiQU.roa (hash: qmuti4n5B4J7jLSHkHP5UysCAPRSd8cLYAhdX4sBlkA=)
2: c483fv6CCn7GnQMtAIF35ot4fxg.roa (hash: FWbPpQL/jtT7J1p5u5ozd8W0n2+YVhQ7GpqajXnuKcE=)
3: m4FRrhZKW3grED3n98iolIkyrr8.crl (hash: BdvDSDbp17BZMrvubsWoevJXCj3knc1Zz86JW+JBbEE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:d5:66:b7:ec:7a:7e:a0:55:d7:55:c4:4f:08:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b8151ae164a5b782b103de7f7c8a8948932aebf
Validity
Not Before: Jan 31 13:00:29 2025 GMT
Not After : Feb 1 13:00:29 2025 GMT
Subject: CN=e1e9608320fba21ef90e3bcf65ac44be9570e7ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e5:a8:25:19:1c:d6:1a:8d:4a:75:70:86:5b:
0b:85:c2:15:ab:6f:58:e3:51:24:c4:be:c3:4c:ec:
b2:dd:dc:dc:65:4a:33:17:9a:33:cd:e9:a7:b0:a0:
28:12:b6:14:03:96:ea:c5:22:ac:58:fa:0f:f0:c9:
8e:39:03:9e:12:bb:b2:6c:93:34:5e:d6:ca:45:4c:
81:5d:dc:2e:01:8a:22:27:c4:a4:3a:35:ee:ae:f9:
28:56:c2:94:b1:6c:bd:1c:44:64:5f:a8:0e:f1:bc:
cd:38:75:b9:7b:33:1f:35:65:04:ca:90:76:a4:da:
d6:df:dd:22:e6:f5:f9:06:a7:61:43:35:6a:cc:79:
50:3b:70:6f:1b:50:55:26:da:ac:26:56:5b:a5:cc:
65:3a:6e:2f:b3:ee:0e:ec:ca:41:ed:3f:f0:e6:1a:
83:7e:4c:1f:ea:70:eb:87:67:97:c7:65:26:ba:71:
e6:e2:3d:30:f1:8a:dd:07:a5:35:da:c4:45:9e:c6:
9f:c1:51:06:ef:89:5a:dd:ee:41:76:f7:d2:1d:23:
f9:a8:9f:49:83:4b:5a:4b:ad:51:a7:41:ac:aa:14:
a2:f6:64:e7:3b:76:f2:e2:3c:da:1b:b1:31:07:61:
0a:df:b6:15:79:dd:57:4f:66:2c:98:9a:dc:7f:e1:
71:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:E9:60:83:20:FB:A2:1E:F9:0E:3B:CF:65:AC:44:BE:95:70:E7:CE
X509v3 Authority Key Identifier:
keyid:9B:81:51:AE:16:4A:5B:78:2B:10:3D:E7:F7:C8:A8:94:89:32:AE:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m4FRrhZKW3grED3n98iolIkyrr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/6b6d1f-5421-48b9-b7eb-da1fe9ebee8e/1/m4FRrhZKW3grED3n98iolIkyrr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/6b6d1f-5421-48b9-b7eb-da1fe9ebee8e/1/m4FRrhZKW3grED3n98iolIkyrr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d3:39:68:f6:57:ce:2b:39:76:a1:00:c4:34:d8:cb:69:c8:da:
9b:d2:ad:d8:11:ff:8a:bc:5f:a0:29:26:27:1a:9f:da:71:e3:
24:ad:43:50:e0:e3:a5:1e:ac:ce:4b:ea:05:37:d4:29:3f:4a:
45:b2:76:64:a5:81:00:f8:65:db:0d:43:4a:97:77:be:a2:f3:
d3:43:18:c2:7e:87:0a:02:71:43:a0:4b:66:a3:84:53:0e:51:
b9:05:bd:9d:2e:88:b4:55:3c:38:92:bd:e9:fe:2f:24:ff:95:
cf:da:88:de:d4:cf:da:7b:c4:c9:d4:b6:97:ce:ca:99:6d:ca:
cb:1c:aa:f9:36:4e:71:67:83:39:c6:9b:57:a0:f6:be:6b:78:
50:f7:a8:52:b5:e8:97:6a:a9:78:3b:c6:d5:22:f3:68:90:3b:
e2:ff:51:85:fb:fa:90:46:0b:22:ec:f4:b4:d1:c9:69:ec:19:
e5:44:e3:4d:45:8e:6e:f0:93:c9:76:13:be:70:d8:da:d9:60:
2f:dd:80:3a:b8:89:60:f5:5c:76:aa:c3:e2:38:fc:e8:8f:54:
a8:2f:8a:2a:0b:16:22:72:56:4f:41:09:2d:78:69:80:89:61:
52:ac:5e:f4:43:bb:97:88:de:3b:66:bd:1d:e8:94:90:50:13:
d2:f7:62:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 21:25:47 2025 by rpki-client