Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/f171be-9653-41d8-a344-fec15ab84135/1/Mp27RqTrdkXZlKDkuYT82sIEpIQ.mft
File: Mp27RqTrdkXZlKDkuYT82sIEpIQ.mft (raw, json)
Hash identifier: aGC/pXs5R3O2ADQH2pviOMFLsskXEDDR+Z2TbrHkpDY=
Subject key identifier: 9D:01:85:67:18:73:03:86:69:36:4A:AD:51:64:C3:24:26:81:D9:2A
Authority key identifier: 32:9D:BB:46:A4:EB:76:45:D9:94:A0:E4:B9:84:FC:DA:C2:04:A4:84
Certificate issuer: /CN=329dbb46a4eb7645d994a0e4b984fcdac204a484
Certificate serial: 0194BC051E4CB250BA64D2B7120C7B404EC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mp27RqTrdkXZlKDkuYT82sIEpIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/f171be-9653-41d8-a344-fec15ab84135/1/Mp27RqTrdkXZlKDkuYT82sIEpIQ.mft
Manifest number: 010A
Signing time: Fri 31 Jan 2025 11:00:39 +0000
Manifest this update: Fri 31 Jan 2025 11:00:39 +0000
Manifest next update: Sat 01 Feb 2025 11:00:39 +0000
Files and hashes: 1: Mp27RqTrdkXZlKDkuYT82sIEpIQ.crl (hash: sbcnnJJKIX8CeA709ubIDaiAahgliSmXOb5FjacjfZY=)
2: ZyPIESuaSWPIuQmq_le4sKOKISE.roa (hash: ZskQdIcp36rlr+2ORbgrG1PrwisAu9ueRcvHTkIY4YM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:1e:4c:b2:50:ba:64:d2:b7:12:0c:7b:40:4e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=329dbb46a4eb7645d994a0e4b984fcdac204a484
Validity
Not Before: Jan 31 11:00:39 2025 GMT
Not After : Feb 1 11:00:39 2025 GMT
Subject: CN=9d0185671873038669364aad5164c3242681d92a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:a9:51:36:a3:02:9b:1e:35:ce:8d:cd:4b:dd:
16:90:67:79:3a:de:df:1c:67:72:90:ed:e8:73:08:
c4:18:f5:77:24:4d:98:04:a2:ae:9a:9f:71:b7:48:
c7:53:73:8a:4c:27:cf:df:a4:05:44:ae:30:c2:6f:
cb:e7:ba:00:ed:80:22:e0:ed:74:15:02:9d:95:f1:
c2:d9:3f:99:3c:8f:6b:42:c7:78:a3:81:e5:92:84:
e3:1b:27:a2:c9:22:88:0e:29:fa:4b:3e:65:e2:13:
15:21:5a:93:5e:79:42:dc:62:8d:4f:70:29:8d:34:
80:69:8d:10:26:be:92:24:22:9d:e0:df:42:ec:2f:
46:f8:fb:ce:93:f3:59:58:aa:2e:6d:0e:11:41:59:
0f:de:f9:f1:42:f7:ce:94:51:e4:fb:21:a8:a8:4a:
95:7a:d9:37:b5:6c:82:cf:31:4e:f6:81:64:69:b7:
a5:fe:90:42:f4:a9:dd:b7:d5:6d:c3:cd:8b:aa:f1:
71:25:f4:41:1e:ee:94:db:d4:78:b8:ee:ee:cd:49:
6f:ee:24:de:a3:d4:c7:fc:06:a8:0c:10:96:d2:c8:
e0:df:12:56:13:f0:87:0c:68:b5:b4:4c:1c:cf:dc:
82:20:66:c6:3d:32:58:10:a7:7e:92:fb:a1:aa:20:
ad:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:01:85:67:18:73:03:86:69:36:4A:AD:51:64:C3:24:26:81:D9:2A
X509v3 Authority Key Identifier:
keyid:32:9D:BB:46:A4:EB:76:45:D9:94:A0:E4:B9:84:FC:DA:C2:04:A4:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mp27RqTrdkXZlKDkuYT82sIEpIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f171be-9653-41d8-a344-fec15ab84135/1/Mp27RqTrdkXZlKDkuYT82sIEpIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f171be-9653-41d8-a344-fec15ab84135/1/Mp27RqTrdkXZlKDkuYT82sIEpIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:1d:28:77:cc:a0:2b:82:33:c5:75:78:7f:da:57:52:6b:7d:
27:3d:83:bc:39:54:55:ec:25:9a:17:35:a8:f7:e4:be:2e:ba:
d2:1d:61:a7:8c:28:41:66:bd:b1:90:30:da:4e:af:47:1c:83:
9a:6e:de:d6:7b:6b:0a:86:07:c4:92:18:3c:3e:b0:51:29:89:
a9:52:98:c4:b9:20:b2:93:98:1e:5d:02:29:21:f0:65:33:66:
69:28:d3:d2:64:50:16:d4:e1:2e:90:8e:07:b7:90:c4:d4:b0:
4f:4c:c9:68:9f:9c:73:bd:4f:b3:95:89:7a:f4:55:e2:5d:7f:
36:61:4d:70:c3:86:6b:4b:f3:64:d6:a5:af:c8:8f:11:43:0b:
dd:42:5f:96:85:ef:39:f2:b7:9d:28:bd:7a:7f:93:97:d0:73:
8f:64:33:82:d9:86:9c:40:65:31:ed:82:1f:68:b8:b9:07:e8:
36:87:59:0a:06:3c:d7:9b:fe:c6:dd:c8:b1:76:6f:f0:e7:9e:
bb:f6:22:2b:0f:3d:f3:4d:d0:32:ae:cf:81:3c:7c:b1:5d:75:
1c:8d:01:f1:f0:ce:34:87:2b:9d:38:03:c6:2a:b5:c0:0f:cd:
14:9a:8e:b6:32:32:80:f7:b2:2b:45:47:6d:38:0a:cb:5e:ba:
87:4b:6a:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:55 2025 by rpki-client