Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/9ce15f-559a-43b4-a059-cbd4b4bb6f1d/1/mpTE6sr0BAocMO0e3qjjAAcxtqo.mft
File: mpTE6sr0BAocMO0e3qjjAAcxtqo.mft (raw, json)
Hash identifier: xdwQJK3O3IekRM3s9ioVRHFSZb/lGXL5IBoJ1FgqyT4=
Subject key identifier: 84:13:A0:87:9E:2B:04:13:C0:97:1D:38:0A:46:BD:1B:96:4B:37:70
Authority key identifier: 9A:94:C4:EA:CA:F4:04:0A:1C:30:ED:1E:DE:A8:E3:00:07:31:B6:AA
Certificate issuer: /CN=9a94c4eacaf4040a1c30ed1edea8e3000731b6aa
Certificate serial: 0194BC3C0F7B093FD44A3C1DA3E3B306E0BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mpTE6sr0BAocMO0e3qjjAAcxtqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/9ce15f-559a-43b4-a059-cbd4b4bb6f1d/1/mpTE6sr0BAocMO0e3qjjAAcxtqo.mft
Manifest number: 02DF
Signing time: Fri 31 Jan 2025 12:00:40 +0000
Manifest this update: Fri 31 Jan 2025 12:00:40 +0000
Manifest next update: Sat 01 Feb 2025 12:00:40 +0000
Files and hashes: 1: WvHTHUW2Hu_mDZctFQeVwGysiHE.roa (hash: 0IRIumTzEnldnjuLK5Mty3ubumeenKJPjlLba1MpsmY=)
2: mpTE6sr0BAocMO0e3qjjAAcxtqo.crl (hash: VmuCcvepz4gY9XS6G/oK4FLGpu7co+civTRJeS5meig=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:0f:7b:09:3f:d4:4a:3c:1d:a3:e3:b3:06:e0:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a94c4eacaf4040a1c30ed1edea8e3000731b6aa
Validity
Not Before: Jan 31 12:00:40 2025 GMT
Not After : Feb 1 12:00:40 2025 GMT
Subject: CN=8413a0879e2b0413c0971d380a46bd1b964b3770
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d1:33:de:e0:1d:76:00:f2:a5:27:2c:f4:29:
71:7b:a5:80:ca:8d:91:66:54:aa:27:6c:50:7c:61:
64:34:5a:a3:87:57:85:b4:07:98:26:ce:38:54:8e:
9b:fc:ba:3a:ed:ee:4e:b1:aa:00:3b:f7:c2:51:c2:
4c:42:aa:e2:22:42:4a:c5:b8:45:5f:0c:2e:02:56:
14:09:59:07:34:f9:91:da:37:03:6f:9c:ae:3d:cf:
7c:c9:0c:81:5f:f9:ce:9f:87:2f:9c:e3:41:44:89:
f2:ee:29:81:5a:03:a4:56:1f:95:b3:38:22:98:5b:
94:a9:8a:ea:f6:f9:c3:ed:72:00:f7:d2:f5:52:3d:
d8:04:fc:e1:ab:f8:92:81:38:fa:3b:76:3d:1b:1d:
46:db:63:b0:30:4c:b0:7b:50:11:86:6d:22:00:93:
0f:b0:29:f3:fd:d3:8b:1f:93:b4:a9:4c:05:db:95:
df:a3:eb:1a:88:90:4a:ee:b8:0d:d3:83:7a:06:ac:
b0:3d:c0:85:08:46:2f:b3:44:f7:f9:e3:cd:0e:3a:
6c:12:1e:21:df:89:fd:a4:e7:c4:f2:9d:cc:39:fd:
ec:53:fb:0c:40:ce:b1:7b:4b:4e:60:c1:40:14:b6:
6c:2f:64:cd:39:25:06:1f:2e:f7:17:3a:0e:4c:3c:
37:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:13:A0:87:9E:2B:04:13:C0:97:1D:38:0A:46:BD:1B:96:4B:37:70
X509v3 Authority Key Identifier:
keyid:9A:94:C4:EA:CA:F4:04:0A:1C:30:ED:1E:DE:A8:E3:00:07:31:B6:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mpTE6sr0BAocMO0e3qjjAAcxtqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/9ce15f-559a-43b4-a059-cbd4b4bb6f1d/1/mpTE6sr0BAocMO0e3qjjAAcxtqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/9ce15f-559a-43b4-a059-cbd4b4bb6f1d/1/mpTE6sr0BAocMO0e3qjjAAcxtqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:07:60:7b:ea:9b:88:0e:b6:63:e3:ce:06:4c:d1:86:5f:3a:
42:34:c2:5c:fd:7a:89:30:34:c1:71:b6:d8:de:30:f3:51:91:
17:d4:3c:ae:10:7a:c0:ab:2f:f9:1c:7d:c2:e6:95:c8:29:00:
97:70:07:9a:53:c5:d8:1f:8d:7b:15:38:ec:5f:af:c7:14:c7:
b5:82:b1:3a:d8:4d:0f:c3:fd:ff:3a:d3:71:15:1c:30:41:94:
c4:c1:e4:65:ba:d5:06:10:fc:20:d2:45:3a:2a:cf:c9:4a:29:
a3:97:12:8c:f3:8b:c1:2f:8e:b5:8f:b9:ed:3d:84:d9:a0:61:
8e:14:27:89:f4:aa:6e:61:27:7a:63:4f:13:88:55:b6:5b:41:
41:a2:89:52:20:74:dc:3e:ed:ed:0d:ac:7d:3f:6e:ad:3a:8a:
56:b4:9b:08:b0:c5:be:5e:54:ed:2a:76:d1:c2:09:89:1a:53:
f0:22:7e:ce:da:dc:05:f4:a2:23:b3:b5:29:ad:fb:b0:9e:f1:
7a:64:f4:f6:52:7c:d6:c0:6a:98:85:3c:df:1d:37:35:de:de:
fa:72:75:a0:d2:96:32:07:76:fb:a4:7b:6c:db:18:ec:37:96:
c2:6c:b2:03:b2:31:3e:ae:f6:93:b6:5c:72:a6:8e:3f:f0:01:
f7:bb:82:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:29 2025 by rpki-client