Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/9616ee-381d-4afe-890c-6ee514b29115/1/pNMiaTAuHLzLqsDg5a-KhkSYoTU.mft
File: pNMiaTAuHLzLqsDg5a-KhkSYoTU.mft (raw, json)
Hash identifier: QAKrDwX1l84/3+thYWzWxobCJ3x5YnPS7IpDKMpVBRw=
Subject key identifier: 84:F1:F1:72:6F:C2:7C:AA:C3:B5:B7:63:F1:E5:ED:5C:89:BB:FA:77
Authority key identifier: A4:D3:22:69:30:2E:1C:BC:CB:AA:C0:E0:E5:AF:8A:86:44:98:A1:35
Certificate issuer: /CN=a4d32269302e1cbccbaac0e0e5af8a864498a135
Certificate serial: 0194BCA984E5EE4285159814E275C9C7E976
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pNMiaTAuHLzLqsDg5a-KhkSYoTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/9616ee-381d-4afe-890c-6ee514b29115/1/pNMiaTAuHLzLqsDg5a-KhkSYoTU.mft
Manifest number: 0D10
Signing time: Fri 31 Jan 2025 14:00:13 +0000
Manifest this update: Fri 31 Jan 2025 14:00:13 +0000
Manifest next update: Sat 01 Feb 2025 14:00:13 +0000
Files and hashes: 1: WhtcuJJ0NSWsio8f8rQNMbqqeD8.roa (hash: uBIazeW9ZJrIEfawzpjRmH4sNuGdOT1AiFSbiZsPXDU=)
2: pNMiaTAuHLzLqsDg5a-KhkSYoTU.crl (hash: 2eqydSWgQ4/8Tb7UGyUBPjK103C9ybW2T3iPvl84t1A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:84:e5:ee:42:85:15:98:14:e2:75:c9:c7:e9:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4d32269302e1cbccbaac0e0e5af8a864498a135
Validity
Not Before: Jan 31 14:00:13 2025 GMT
Not After : Feb 1 14:00:13 2025 GMT
Subject: CN=84f1f1726fc27caac3b5b763f1e5ed5c89bbfa77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:7c:3e:a4:49:de:62:9b:5a:a7:47:10:b4:ec:
da:04:ad:c2:0e:84:ec:f2:81:8c:01:b8:65:6c:c6:
91:2d:05:5a:1c:bb:1d:92:61:48:74:7f:a8:4a:49:
98:37:ce:55:ff:67:84:b8:ba:7f:69:ab:d3:33:81:
1e:0e:1b:d5:e7:9f:7e:19:a8:56:12:b2:1a:08:66:
03:3c:05:f5:8d:8a:c3:40:19:a9:fa:71:55:18:d3:
a0:0d:18:1a:57:7e:f5:73:bb:4c:06:dd:96:30:db:
51:d5:51:a1:de:6b:ab:be:47:ff:18:00:1a:33:03:
2c:cb:ae:c4:0e:38:3d:89:bf:5d:77:5e:21:7a:4c:
52:22:2c:f8:4c:94:35:f2:e3:7b:e9:c0:ca:90:4d:
a5:17:95:1d:86:b1:b5:3d:6f:b4:5b:ad:13:04:27:
3a:2b:67:b0:a7:b9:aa:d9:5f:e2:30:5b:67:97:6f:
43:21:0c:c7:78:4a:99:80:49:73:c1:3f:09:a6:e4:
a4:b5:18:f6:1d:55:e7:1e:40:6c:ca:25:7c:8d:39:
2b:01:a3:f2:8e:e5:27:3c:b3:3c:d1:1e:d3:0c:3a:
60:74:b1:1f:d2:e7:8b:56:78:ba:5e:bc:10:a3:aa:
50:44:93:fa:87:f5:52:05:93:d9:49:c0:1a:28:54:
0b:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:F1:F1:72:6F:C2:7C:AA:C3:B5:B7:63:F1:E5:ED:5C:89:BB:FA:77
X509v3 Authority Key Identifier:
keyid:A4:D3:22:69:30:2E:1C:BC:CB:AA:C0:E0:E5:AF:8A:86:44:98:A1:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pNMiaTAuHLzLqsDg5a-KhkSYoTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/9616ee-381d-4afe-890c-6ee514b29115/1/pNMiaTAuHLzLqsDg5a-KhkSYoTU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/9616ee-381d-4afe-890c-6ee514b29115/1/pNMiaTAuHLzLqsDg5a-KhkSYoTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:0f:e0:bd:23:ae:12:92:fb:13:50:c9:8c:0d:67:8f:0b:2a:
b9:a7:5e:4e:22:ea:1e:16:dd:d6:3b:5a:98:e5:49:c8:c8:5b:
4f:bd:18:83:8b:2c:5b:14:c8:23:18:6a:a0:24:09:e2:8c:fe:
79:fc:81:f7:d3:a8:ee:0c:ec:8a:84:54:68:fc:6b:65:16:49:
19:07:eb:b1:2d:8e:5e:5c:bb:c7:06:20:b3:49:0d:e4:9e:31:
b7:76:2f:a1:7d:2b:ea:d2:fb:2f:d3:c4:a5:8b:bb:cd:a8:cf:
04:8e:79:a7:97:6c:dd:e3:bd:0d:71:72:d6:e4:32:20:92:a6:
61:12:d7:9c:a8:46:d3:25:0f:1a:dd:af:0e:64:f2:3a:9d:23:
f8:42:24:fc:58:57:a7:27:85:b2:7d:4b:3c:b4:a8:78:d1:42:
83:f6:9d:3c:e2:68:d1:de:2d:97:16:d3:ea:37:ec:79:95:1b:
90:ec:04:a7:d2:42:64:8b:ae:b0:e0:a2:db:35:cc:98:9b:48:
fd:ca:b3:6a:04:53:89:e5:71:70:ad:28:5b:9d:0d:bc:a5:51:
33:48:d5:33:0f:8b:6b:1e:cf:40:ec:f1:ca:d4:86:21:8f:6a:
87:82:27:89:55:09:1e:a3:58:96:b3:96:cd:6e:03:f3:b4:e7:
36:c0:c6:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:33 2025 by rpki-client