Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/8fef7f-d011-4cdb-ac0a-31700f0e1a61/1/praJ3e9Y8KM4Pi71qjonxP5FMY4.mft
File: praJ3e9Y8KM4Pi71qjonxP5FMY4.mft (raw, json)
Hash identifier: 0VX6ifgg4vDKDupouYvcCNCylywQp5Tu6CUUKennl/E=
Subject key identifier: 6C:9B:D4:99:85:37:62:2D:F7:CC:F9:63:5E:25:17:7E:6E:23:A0:AD
Authority key identifier: A6:B6:89:DD:EF:58:F0:A3:38:3E:2E:F5:AA:3A:27:C4:FE:45:31:8E
Certificate issuer: /CN=a6b689ddef58f0a3383e2ef5aa3a27c4fe45318e
Certificate serial: 0194BD4E638F8E2FAADC0565E807FCDC81B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/praJ3e9Y8KM4Pi71qjonxP5FMY4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/8fef7f-d011-4cdb-ac0a-31700f0e1a61/1/praJ3e9Y8KM4Pi71qjonxP5FMY4.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 17:00:18 +0000
Manifest this update: Fri 31 Jan 2025 17:00:18 +0000
Manifest next update: Sat 01 Feb 2025 17:00:18 +0000
Files and hashes: 1: 1-hqyEGwonCGY9K2L38Pw7_zJV_k.roa (hash: a3BoJ3dncPr176aD5ziB0Bh5202joOPjBl2mIqn/r/0=)
2: praJ3e9Y8KM4Pi71qjonxP5FMY4.crl (hash: GOJCiCc8er8LEFJrmpD+MkD5KYbGnbuxD0ErapiPEok=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:63:8f:8e:2f:aa:dc:05:65:e8:07:fc:dc:81:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6b689ddef58f0a3383e2ef5aa3a27c4fe45318e
Validity
Not Before: Jan 31 17:00:18 2025 GMT
Not After : Feb 1 17:00:18 2025 GMT
Subject: CN=6c9bd4998537622df7ccf9635e25177e6e23a0ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:20:48:80:48:3a:9d:9d:c5:b8:4d:97:5f:14:
0a:04:fc:59:5a:f2:25:05:2d:06:c0:c1:36:7a:6f:
15:7f:79:68:7b:c8:50:89:39:ba:47:36:88:79:cd:
5e:4f:0c:01:01:fc:f2:ed:73:ce:34:d4:57:f1:29:
47:08:7f:fc:74:95:a3:54:f2:07:17:13:2a:60:57:
d5:92:79:39:91:28:f6:9a:b0:d4:f6:a7:ee:48:56:
4f:50:14:60:50:f2:bb:43:89:78:16:b2:8f:16:39:
f7:2b:18:4f:0c:c8:92:93:d8:f3:f8:6e:e0:be:31:
44:2f:d4:61:87:d0:c2:27:ff:30:c5:81:5b:c8:98:
33:29:3e:38:96:2e:7e:28:a4:62:88:62:b5:e5:48:
ce:9f:71:41:10:68:88:5a:b0:71:f7:0b:4b:5e:65:
26:6e:56:54:8f:6f:c6:8c:fd:00:1d:2e:c9:1c:64:
f8:a3:af:18:4f:90:25:f1:16:c7:dd:55:85:54:cc:
1b:3e:0b:db:17:92:c2:4b:15:cd:e9:02:45:22:a8:
d3:f0:2f:ba:93:da:39:55:03:88:87:6c:24:f2:63:
b7:8c:2f:f3:7b:45:c1:ae:03:f2:08:9a:4c:eb:8d:
12:17:37:11:77:cd:63:0b:a0:82:88:4e:41:41:dc:
aa:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:9B:D4:99:85:37:62:2D:F7:CC:F9:63:5E:25:17:7E:6E:23:A0:AD
X509v3 Authority Key Identifier:
keyid:A6:B6:89:DD:EF:58:F0:A3:38:3E:2E:F5:AA:3A:27:C4:FE:45:31:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/praJ3e9Y8KM4Pi71qjonxP5FMY4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/8fef7f-d011-4cdb-ac0a-31700f0e1a61/1/praJ3e9Y8KM4Pi71qjonxP5FMY4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/8fef7f-d011-4cdb-ac0a-31700f0e1a61/1/praJ3e9Y8KM4Pi71qjonxP5FMY4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:d3:98:ae:95:ac:0a:e4:27:31:06:da:25:8c:a8:4a:ac:82:
c2:69:e4:a4:f2:12:05:c1:b0:ad:59:04:e2:22:41:2b:49:ed:
e9:ff:3d:0f:cd:32:fa:c5:1b:8f:52:a0:27:58:d1:81:72:88:
a8:5e:c5:9c:d4:31:00:a6:3a:1b:52:d5:55:30:10:f4:66:c4:
99:8c:d1:ee:1f:6e:34:a7:ea:cd:d3:d4:cf:ba:e0:da:c9:08:
ed:f9:39:ac:f0:56:8f:03:41:83:d1:89:3e:c9:25:a3:22:ae:
e5:6b:87:ee:9a:37:3c:66:0f:dd:ba:87:f5:40:1d:c3:4f:3c:
c4:75:9a:98:1a:98:d6:9a:43:a6:1b:79:a5:ea:11:73:5d:a4:
ec:e3:d4:d8:0c:90:9a:6f:2c:4b:47:14:c2:dd:72:62:b3:af:
2c:ca:30:ec:68:4b:92:7f:4d:61:fc:19:a8:0b:c2:25:6d:3e:
33:9b:fc:d6:81:9e:6c:7a:3b:30:dc:13:3c:df:06:08:7a:52:
52:69:18:cb:28:dc:c2:b2:31:86:e2:d9:15:80:14:04:47:e0:
11:f5:23:09:96:44:d9:69:1b:db:ad:3f:60:94:e0:87:7d:05:
3d:71:0a:69:d1:f2:1c:c6:6d:ae:a9:9e:92:cf:26:7e:e5:4e:
0d:bc:40:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 12:38:27 2025 by rpki-client