Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/faabbc-81ba-4977-8923-cc93b1050de7/1/my6AoUHJdPbaj0AnQzj9rO5Cp3A.mft
File: my6AoUHJdPbaj0AnQzj9rO5Cp3A.mft (raw, json)
Hash identifier: bzhhPoqYHEy17bY1Mke1vr/K47uVFYlz3vfA8MWaPYo=
Subject key identifier: 05:AC:64:7E:B2:1C:73:28:BC:40:52:80:27:8F:D1:4F:8C:AF:15:1E
Authority key identifier: 9B:2E:80:A1:41:C9:74:F6:DA:8F:40:27:43:38:FD:AC:EE:42:A7:70
Certificate issuer: /CN=9b2e80a141c974f6da8f40274338fdacee42a770
Certificate serial: 0194BBCEFE6F6C0B6906E1E904BCC2B9F7B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/my6AoUHJdPbaj0AnQzj9rO5Cp3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/faabbc-81ba-4977-8923-cc93b1050de7/1/my6AoUHJdPbaj0AnQzj9rO5Cp3A.mft
Manifest number: 0BDB
Signing time: Fri 31 Jan 2025 10:01:32 +0000
Manifest this update: Fri 31 Jan 2025 10:01:32 +0000
Manifest next update: Sat 01 Feb 2025 10:01:32 +0000
Files and hashes: 1: my6AoUHJdPbaj0AnQzj9rO5Cp3A.crl (hash: 4fPfekCAgFtpiYCcmC4n/fuwbrDKyz4T2slGfrLV0ig=)
2: qDQj2i79pZYtwis1stkVmdhu_cA.roa (hash: OPq9BdTsvn5TcHmuSl2ovdvwcrawOIn1d+BihcQt66M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:fe:6f:6c:0b:69:06:e1:e9:04:bc:c2:b9:f7:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b2e80a141c974f6da8f40274338fdacee42a770
Validity
Not Before: Jan 31 10:01:32 2025 GMT
Not After : Feb 1 10:01:32 2025 GMT
Subject: CN=05ac647eb21c7328bc405280278fd14f8caf151e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:4b:3e:c7:29:ef:9e:13:28:ff:49:df:df:dc:
e7:50:db:05:41:ee:79:d2:1d:4e:ea:21:62:a7:e1:
a6:f7:b0:94:c7:75:c0:ca:f3:a0:56:f5:d6:f5:f7:
90:5c:49:15:c2:39:f8:03:26:10:c1:fc:68:da:95:
e3:17:68:5d:3e:45:92:e3:f8:01:47:01:4e:74:03:
f3:e2:1d:88:92:c0:8d:0d:1f:9c:62:e7:1c:e2:30:
f5:40:ff:6f:89:89:5d:20:39:52:71:19:82:85:6e:
23:8a:7e:9f:84:6a:96:65:9e:be:fb:7e:0e:d3:81:
cd:57:d8:a7:b5:ce:23:86:70:e8:fa:b5:b6:62:5b:
b4:92:aa:e0:38:99:a7:5d:24:5b:2b:30:b6:20:92:
5c:cb:a5:03:b9:41:b5:f9:bb:07:75:b8:80:a9:c2:
c3:3a:d6:f3:c5:ed:ed:f3:82:0d:7f:74:1b:ef:7f:
c2:14:0d:3e:69:0e:b9:c1:42:3c:c0:7a:66:50:2b:
23:eb:c0:27:8c:0e:e7:5f:32:9a:72:a5:66:63:aa:
82:59:7f:a6:fe:91:a4:6c:1c:ef:20:ef:41:9a:de:
51:90:be:0b:4f:d4:cb:6a:6a:c2:90:13:1e:4e:c7:
99:c6:b7:fa:90:6a:98:52:aa:f2:c8:5b:64:f7:cd:
e6:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:AC:64:7E:B2:1C:73:28:BC:40:52:80:27:8F:D1:4F:8C:AF:15:1E
X509v3 Authority Key Identifier:
keyid:9B:2E:80:A1:41:C9:74:F6:DA:8F:40:27:43:38:FD:AC:EE:42:A7:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/my6AoUHJdPbaj0AnQzj9rO5Cp3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/faabbc-81ba-4977-8923-cc93b1050de7/1/my6AoUHJdPbaj0AnQzj9rO5Cp3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/faabbc-81ba-4977-8923-cc93b1050de7/1/my6AoUHJdPbaj0AnQzj9rO5Cp3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:11:f0:24:a7:13:6c:b8:d0:be:be:8c:b3:ee:cd:36:e9:af:
f6:51:46:c9:50:db:5b:3e:b0:59:da:d7:5a:3e:fd:de:d0:1c:
95:57:be:e3:e5:61:5f:02:eb:51:1f:6f:a7:bd:4a:89:b2:f4:
9a:83:0f:bc:4b:b2:f0:af:65:a6:62:71:42:1b:33:9a:bb:1b:
27:e8:40:f1:51:3f:b8:e9:c4:b0:52:79:79:bc:a4:83:ac:c1:
c8:1d:f9:2f:07:94:a1:2a:be:90:bc:8c:7a:40:e2:7f:7f:e3:
cc:f3:bd:4d:5c:57:0b:5f:23:68:ed:7f:16:ab:30:df:d7:51:
ee:97:9a:d7:74:48:6d:ce:e8:c0:48:28:f8:b4:04:4b:fa:bc:
4c:4f:18:97:aa:8c:de:28:52:11:91:ec:56:da:c6:72:55:87:
18:d2:f2:c7:bd:33:da:9c:c5:6d:cc:86:bf:fd:8e:51:f2:b8:
32:38:f2:c9:14:cf:19:ce:b5:e3:aa:f3:89:c7:76:5e:69:00:
05:eb:36:65:7b:0e:7c:b0:83:17:df:1f:6f:55:f5:50:c4:02:
b2:23:24:72:13:46:f9:2f:38:fc:6f:0e:6d:85:d3:fe:15:e0:
d8:6e:62:c9:98:ab:40:31:12:de:00:d9:12:e5:df:eb:51:bd:
16:15:2c:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:24 2025 by rpki-client