Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/731c7c-9a17-4bca-984c-c7fbfc4dc9dc/1/E6-mzmVC4btSPh0DvQCk0it_2u0.mft
File: E6-mzmVC4btSPh0DvQCk0it_2u0.mft (raw, json)
Hash identifier: MQQFxouAXHys65wFaT2uwSRgc4j0PfrUKg5hwiUF6uY=
Subject key identifier: B0:4F:06:EB:AC:75:9F:12:62:E6:8D:F6:71:7E:F8:FA:32:35:32:78
Authority key identifier: 13:AF:A6:CE:65:42:E1:BB:52:3E:1D:03:BD:00:A4:D2:2B:7F:DA:ED
Certificate issuer: /CN=13afa6ce6542e1bb523e1d03bd00a4d22b7fdaed
Certificate serial: 0194BBCDF4F4B9B42CA8A5CFA8B90D0A4513
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E6-mzmVC4btSPh0DvQCk0it_2u0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/731c7c-9a17-4bca-984c-c7fbfc4dc9dc/1/E6-mzmVC4btSPh0DvQCk0it_2u0.mft
Manifest number: 0F3C
Signing time: Fri 31 Jan 2025 10:00:24 +0000
Manifest this update: Fri 31 Jan 2025 10:00:24 +0000
Manifest next update: Sat 01 Feb 2025 10:00:24 +0000
Files and hashes: 1: 3RGBqUK3Xv0JP7ez0P-m3VNiDHY.roa (hash: yrCq7iHuvCP3ZZOy9TgGhkh7qYKM+uZzphtzhnPZGC4=)
2: E6-mzmVC4btSPh0DvQCk0it_2u0.crl (hash: MQRdPARondwvJuKiDHMxMOLwMvHJ9TsYIsSVgyNl5Hw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:f4:f4:b9:b4:2c:a8:a5:cf:a8:b9:0d:0a:45:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13afa6ce6542e1bb523e1d03bd00a4d22b7fdaed
Validity
Not Before: Jan 31 10:00:24 2025 GMT
Not After : Feb 1 10:00:24 2025 GMT
Subject: CN=b04f06ebac759f1262e68df6717ef8fa32353278
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:67:bd:5c:72:23:2c:73:4f:4b:b4:03:5d:34:
d1:57:94:b3:06:7c:71:0f:e8:41:a7:2f:8a:50:4f:
29:7b:64:cf:fb:69:5d:20:69:a9:1c:b3:b0:8f:81:
66:ec:9a:36:b8:b0:24:3c:cf:5a:b2:0b:bc:50:11:
04:1f:be:ed:32:d7:de:39:57:cf:b0:c2:c3:3d:a7:
d6:07:4d:62:f0:ae:fc:7b:54:2f:15:0d:ba:fd:64:
b0:2e:60:cc:eb:fc:d9:e7:dd:94:c1:3e:c9:35:d6:
70:32:83:99:4b:f4:16:af:89:df:0c:01:d8:1d:68:
0c:e2:04:5c:f9:02:dd:c6:b7:6b:6c:1e:20:db:98:
b4:fc:e3:00:b5:b9:38:6e:2a:6a:6a:66:fc:f9:2f:
b9:9a:ac:b5:f7:ac:88:c8:a2:c8:2e:11:5a:6c:ae:
62:95:27:7d:0d:82:4f:53:2b:15:f8:10:7c:b7:c6:
ca:8d:19:ec:ba:92:44:c4:d8:db:cd:9a:7a:d3:18:
cd:9f:3e:94:cf:05:c8:00:41:6d:69:78:b4:7f:29:
be:c9:18:bf:a9:5e:09:0e:1b:94:09:e8:f3:cd:b7:
39:cb:22:b7:71:5c:76:f2:bd:d6:2f:d0:e4:64:65:
b1:bf:57:42:79:52:47:27:da:0d:f7:48:eb:b1:d5:
78:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:4F:06:EB:AC:75:9F:12:62:E6:8D:F6:71:7E:F8:FA:32:35:32:78
X509v3 Authority Key Identifier:
keyid:13:AF:A6:CE:65:42:E1:BB:52:3E:1D:03:BD:00:A4:D2:2B:7F:DA:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E6-mzmVC4btSPh0DvQCk0it_2u0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/731c7c-9a17-4bca-984c-c7fbfc4dc9dc/1/E6-mzmVC4btSPh0DvQCk0it_2u0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/731c7c-9a17-4bca-984c-c7fbfc4dc9dc/1/E6-mzmVC4btSPh0DvQCk0it_2u0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:52:a6:99:5e:53:12:4b:f4:cf:d6:be:4c:1e:42:58:95:b9:
2f:b4:d4:57:a8:d7:86:b2:0f:dd:07:46:d4:0a:be:ff:ab:b4:
e5:fc:d9:90:30:29:eb:9c:03:94:6f:82:f9:53:3b:6d:c8:fd:
c4:92:34:6b:04:78:ab:af:5d:78:34:f9:5f:95:f3:69:4c:a3:
bb:cd:69:6e:30:d9:1c:df:55:49:dc:74:7f:23:c1:af:e6:16:
02:85:6e:06:8c:33:4c:6b:57:6e:b0:9e:e1:99:5a:cf:27:81:
5a:97:88:ea:f5:c9:47:2b:cb:e0:c8:f9:d0:f8:61:ad:5d:e4:
83:cc:ea:26:f8:74:bd:b6:fc:bd:42:14:0a:9f:fb:6d:81:b0:
9c:21:7b:ac:12:f7:6b:d2:ec:67:3c:b2:64:c7:04:2b:b9:f9:
bf:21:c9:1e:b8:40:d3:80:bb:03:61:76:da:b3:a1:8f:2e:c2:
8d:ef:15:e0:7f:e5:f0:57:e5:14:e2:f4:91:5b:f9:6a:0e:a2:
49:ae:33:35:13:93:27:f6:35:85:40:31:8d:bd:17:8c:8f:6e:
39:80:26:27:7b:3c:9d:d5:80:d1:69:46:21:8c:b9:6e:da:18:
1a:ef:d3:42:52:4f:b6:00:4d:8d:70:d4:ae:43:43:73:22:0b:
30:10:86:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:23 2025 by rpki-client