Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/4f8c2d-ec40-4d3c-8426-b75ef563720c/1/mTfH9VuM8OdKXeCQMprZtyjGrXc.mft
File: mTfH9VuM8OdKXeCQMprZtyjGrXc.mft (raw, json)
Hash identifier: hArJCNxQdBtvAU0TRnu8DyRB2ZN+9lmjbu0+NHmcVVI=
Subject key identifier: DD:48:D6:1A:61:C7:69:89:51:44:2C:F1:79:16:2A:4B:36:41:F1:FF
Authority key identifier: 99:37:C7:F5:5B:8C:F0:E7:4A:5D:E0:90:32:9A:D9:B7:28:C6:AD:77
Certificate issuer: /CN=9937c7f55b8cf0e74a5de090329ad9b728c6ad77
Certificate serial: 0194BBCF05DCA558CFA098CF7E76E0C60C06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mTfH9VuM8OdKXeCQMprZtyjGrXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/4f8c2d-ec40-4d3c-8426-b75ef563720c/1/mTfH9VuM8OdKXeCQMprZtyjGrXc.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 10:01:34 +0000
Manifest this update: Fri 31 Jan 2025 10:01:34 +0000
Manifest next update: Sat 01 Feb 2025 10:01:34 +0000
Files and hashes: 1: QDRodL1Ij0kvPV6RatQCpAs4M7Q.roa (hash: 8yQMKLh2R6BvydYUR3v0EXrX6Bu8MKleBRx4SEEyIAM=)
2: mTfH9VuM8OdKXeCQMprZtyjGrXc.crl (hash: 2qhNEZbSvHIlIHZkZgO+jhZF0QTReP1CA+4TXIbU/9g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cf:05:dc:a5:58:cf:a0:98:cf:7e:76:e0:c6:0c:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9937c7f55b8cf0e74a5de090329ad9b728c6ad77
Validity
Not Before: Jan 31 10:01:34 2025 GMT
Not After : Feb 1 10:01:34 2025 GMT
Subject: CN=dd48d61a61c7698951442cf179162a4b3641f1ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:4b:ad:e8:ec:ea:06:3c:71:ab:05:e8:8c:2b:
11:fe:3e:47:22:c3:6c:9c:bf:45:d6:bf:d2:5d:29:
79:d2:81:e5:d1:d3:dc:78:3c:01:89:00:f0:55:ea:
57:53:4b:90:2c:91:3b:45:bb:a8:68:41:03:38:b3:
56:e6:9f:2e:c0:36:b1:e7:bb:b8:9e:69:3c:f1:02:
5d:01:cd:91:2b:3e:2f:74:2b:0a:bb:c1:9b:24:5e:
4f:46:51:04:f0:99:e1:2f:63:63:3f:0b:ec:f7:4b:
4a:2f:14:3a:e9:93:dd:25:3f:b9:80:2c:a1:8b:8c:
96:72:97:7d:8b:79:75:6c:fc:05:db:57:28:cf:b8:
7f:78:d2:8b:36:47:86:47:7b:14:3d:87:74:13:e8:
88:54:aa:f1:be:da:64:b0:3d:3d:3e:a4:d5:76:38:
3f:f8:14:cd:b0:07:92:32:13:f6:cb:f6:24:38:94:
f5:c7:51:74:0c:7e:1e:c0:f8:45:f4:66:3b:c5:17:
9e:43:10:49:cd:cc:0d:83:70:57:5e:7a:d6:aa:79:
e0:ca:a7:76:97:f3:2b:78:11:3f:01:52:55:90:db:
ab:51:3c:35:d3:27:70:d7:2f:ed:dc:d9:9a:e3:a3:
ea:e0:31:ae:c3:bd:a1:13:42:5a:aa:ab:e4:5c:fb:
c2:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:48:D6:1A:61:C7:69:89:51:44:2C:F1:79:16:2A:4B:36:41:F1:FF
X509v3 Authority Key Identifier:
keyid:99:37:C7:F5:5B:8C:F0:E7:4A:5D:E0:90:32:9A:D9:B7:28:C6:AD:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mTfH9VuM8OdKXeCQMprZtyjGrXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4f8c2d-ec40-4d3c-8426-b75ef563720c/1/mTfH9VuM8OdKXeCQMprZtyjGrXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4f8c2d-ec40-4d3c-8426-b75ef563720c/1/mTfH9VuM8OdKXeCQMprZtyjGrXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:f2:3e:ec:2f:e6:0f:3c:31:48:88:e2:2c:35:9d:1d:f4:28:
52:1e:82:fa:2c:5f:ae:0b:da:f5:56:a4:4b:e3:d0:c9:49:30:
63:61:1f:ba:68:36:5b:32:7c:00:48:2a:ca:7e:0b:13:f5:88:
d0:3c:81:64:07:9d:ea:4b:f7:1d:36:ee:54:04:0d:c6:fd:ab:
76:9b:6d:b5:06:ef:06:22:07:95:03:92:2b:92:14:18:14:dc:
0e:f5:c4:f4:2e:b8:2d:d0:e8:76:c5:c3:72:d1:f2:32:1c:f0:
57:98:be:15:d0:b7:14:0f:f0:4b:81:bf:2d:c5:32:fb:f4:28:
17:a0:c7:e2:c1:72:6d:4d:2a:37:57:5e:3b:05:f3:9c:db:cd:
da:ca:37:b7:85:0b:b4:81:0f:47:65:8e:33:89:cb:f4:bc:99:
75:69:d6:20:25:eb:4d:5d:90:2f:dd:ca:37:21:e1:98:52:6c:
f5:0b:c5:b3:a4:2e:99:5b:d6:6e:35:9a:85:3d:f9:49:f8:b8:
41:b7:c1:d3:5a:66:2a:18:15:64:a9:fd:c9:59:2f:45:4b:c5:
df:69:81:c2:17:62:1b:4c:6a:22:70:5c:e1:e2:fa:f5:6a:2c:
d5:81:be:26:07:0e:94:9b:be:33:d3:6f:40:51:af:ad:c7:0e:
50:9e:96:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 22:01:34 2025 by rpki-client