Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/deac8a-8013-4c8c-b471-9e573e710958/1/p-9my3zDUDRYUr6b3XVFV4Kv5N0.mft
File: p-9my3zDUDRYUr6b3XVFV4Kv5N0.mft (raw, json)
Hash identifier: mrSOZzD+RZmUfvGn/HsHyD6WPHhUyyc+XPlQxIyGTuc=
Subject key identifier: 01:9C:59:E7:EA:0F:E0:E7:52:28:D7:B7:E5:48:07:50:E8:0E:3F:43
Authority key identifier: A7:EF:66:CB:7C:C3:50:34:58:52:BE:9B:DD:75:45:57:82:AF:E4:DD
Certificate issuer: /CN=a7ef66cb7cc350345852be9bdd75455782afe4dd
Certificate serial: 0194BC72B54BA173915B1B7D1165EA57AF8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p-9my3zDUDRYUr6b3XVFV4Kv5N0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/deac8a-8013-4c8c-b471-9e573e710958/1/p-9my3zDUDRYUr6b3XVFV4Kv5N0.mft
Manifest number: 0545
Signing time: Fri 31 Jan 2025 13:00:21 +0000
Manifest this update: Fri 31 Jan 2025 13:00:21 +0000
Manifest next update: Sat 01 Feb 2025 13:00:21 +0000
Files and hashes: 1: a05D2as5w-ZphYSOJlRsKKwpve8.roa (hash: xvnLmK5XjCaYTBnLCkguyMd5kItynb1Iv2CauMJIpxU=)
2: p-9my3zDUDRYUr6b3XVFV4Kv5N0.crl (hash: rWU5ut7V3s785EG0HWz3Odf8xrhb5hphbxW7WdK51nE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:b5:4b:a1:73:91:5b:1b:7d:11:65:ea:57:af:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7ef66cb7cc350345852be9bdd75455782afe4dd
Validity
Not Before: Jan 31 13:00:21 2025 GMT
Not After : Feb 1 13:00:21 2025 GMT
Subject: CN=019c59e7ea0fe0e75228d7b7e5480750e80e3f43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:54:ae:b1:00:73:8e:d9:ea:ab:8f:ca:f4:a4:
25:b6:e1:91:3b:47:67:31:f2:3c:91:32:e2:9b:62:
f9:9f:61:31:a7:ea:5f:a7:a0:35:ea:e9:76:cd:bd:
44:58:e8:91:3d:16:8f:f8:7c:1e:5a:44:93:f7:8b:
f0:44:fb:43:aa:e4:22:fb:34:31:25:e8:1a:f4:bf:
aa:6c:32:08:6c:32:15:ab:95:4c:db:d6:27:49:c5:
7f:ec:8f:d6:97:f6:8b:bd:89:82:e0:c1:27:35:45:
35:7b:8f:e0:ab:bb:30:85:ee:ac:e3:f2:82:fb:fa:
3a:02:c1:fb:51:15:eb:78:c9:0c:eb:c9:13:68:d9:
b0:ea:6e:2c:15:a3:f1:d9:1a:a8:24:f8:39:30:97:
7a:11:f9:fc:d1:a2:b9:88:ac:47:b2:5e:65:cf:53:
f8:85:ee:48:81:94:e0:2e:b8:eb:73:7e:15:e3:e1:
45:c2:81:96:45:b0:72:8d:f5:71:6c:a0:47:f4:4e:
e9:2f:e2:4b:66:8d:53:02:b9:18:ef:c3:04:96:37:
b7:10:ed:62:09:12:6f:c0:fc:cc:8a:aa:cb:18:10:
3a:ca:ac:f5:d1:4b:95:2b:94:9f:89:21:19:b5:3b:
6f:85:9c:1e:f0:e4:a4:b5:2d:eb:d8:52:7d:54:f1:
0d:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:9C:59:E7:EA:0F:E0:E7:52:28:D7:B7:E5:48:07:50:E8:0E:3F:43
X509v3 Authority Key Identifier:
keyid:A7:EF:66:CB:7C:C3:50:34:58:52:BE:9B:DD:75:45:57:82:AF:E4:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p-9my3zDUDRYUr6b3XVFV4Kv5N0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/deac8a-8013-4c8c-b471-9e573e710958/1/p-9my3zDUDRYUr6b3XVFV4Kv5N0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/deac8a-8013-4c8c-b471-9e573e710958/1/p-9my3zDUDRYUr6b3XVFV4Kv5N0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:59:97:14:ba:e1:a0:c0:b1:af:be:78:02:6c:99:64:8d:b7:
50:03:66:68:40:eb:c0:2a:3f:43:68:1e:99:78:b0:95:22:90:
f7:1c:64:92:e2:35:46:a9:e0:8c:7f:2b:2a:db:60:26:04:a2:
47:3a:5e:05:37:50:68:76:6a:08:d7:2f:30:1d:38:dc:39:0b:
9d:19:18:77:0d:ac:50:fa:8d:78:d5:2f:e5:e7:53:da:ed:5e:
e8:43:85:5a:ce:c2:37:cf:0c:9b:7b:61:cc:fb:b4:44:1d:5e:
fb:a5:6a:e2:64:cc:0b:ac:eb:d5:42:44:13:b8:c2:94:17:98:
81:7c:cf:01:3f:2d:67:80:a8:d9:dd:26:26:1c:84:a1:4d:64:
e5:d0:fe:68:88:64:18:51:d6:32:4e:3e:fd:01:d5:98:01:6f:
9e:ef:fa:64:fd:f0:3a:32:d4:26:11:75:ea:83:9f:fb:af:b4:
23:dd:09:76:77:74:71:5c:54:e9:ea:bb:f6:c1:54:26:cc:d7:
8d:fd:3e:59:a6:2e:9c:20:4a:14:31:91:27:ff:6e:63:b4:7c:
0d:43:f0:76:82:0a:16:8d:57:bd:02:31:41:28:a6:b1:98:6a:
80:d1:c9:53:6e:ab:e2:a7:d9:af:65:e4:bc:b6:3c:72:98:c2:
30:cc:93:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 14:43:14 2025 by rpki-client