Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/43d301-f81a-492e-922c-c971dc713b1f/1/mPArXPtBclCOBze_Jc1dIqAdxFo.mft
File: mPArXPtBclCOBze_Jc1dIqAdxFo.mft (raw, json)
Hash identifier: ZfB6f5hWNe+EIOc41XNo0j3Gzfs08bcu5Sq9UFjmuLU=
Subject key identifier: 32:3E:3A:D7:33:16:D7:C1:B3:F3:F2:A1:C8:0B:B3:89:E7:8C:94:ED
Authority key identifier: 98:F0:2B:5C:FB:41:72:50:8E:07:37:BF:25:CD:5D:22:A0:1D:C4:5A
Certificate issuer: /CN=98f02b5cfb4172508e0737bf25cd5d22a01dc45a
Certificate serial: 0194BBCEE9D4250B9FF1676D1B4EF129C37E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mPArXPtBclCOBze_Jc1dIqAdxFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/43d301-f81a-492e-922c-c971dc713b1f/1/mPArXPtBclCOBze_Jc1dIqAdxFo.mft
Manifest number: 055A
Signing time: Fri 31 Jan 2025 10:01:27 +0000
Manifest this update: Fri 31 Jan 2025 10:01:27 +0000
Manifest next update: Sat 01 Feb 2025 10:01:27 +0000
Files and hashes: 1: Keu4ORQGNbpvqRyHyCkLTUO_lOA.roa (hash: 8AaJ0cxF0N1CmP6IwiLLt/ItfrvG5f97UQsDx1F7lhM=)
2: mPArXPtBclCOBze_Jc1dIqAdxFo.crl (hash: B4O3SCQZiKg94akhSPnC5vLvYPwwhMw8x33gCN5g9vA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:e9:d4:25:0b:9f:f1:67:6d:1b:4e:f1:29:c3:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98f02b5cfb4172508e0737bf25cd5d22a01dc45a
Validity
Not Before: Jan 31 10:01:27 2025 GMT
Not After : Feb 1 10:01:27 2025 GMT
Subject: CN=323e3ad73316d7c1b3f3f2a1c80bb389e78c94ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:cd:58:29:46:d4:55:49:6d:dc:e5:5d:f1:d6:
a5:1f:42:a4:a9:f1:dc:3e:2e:8e:37:90:e9:c6:97:
6c:e9:6e:f7:ef:a4:58:5b:29:f3:52:9c:f5:87:0b:
43:c8:1d:f2:6b:e4:bf:18:15:18:55:15:99:4b:41:
ab:86:8d:dd:8d:b8:ce:17:f7:66:1b:63:51:ce:a2:
c2:20:65:91:b5:fd:f7:f7:0f:34:78:a0:d8:6c:1e:
bf:13:25:87:d1:4f:a3:c8:8b:f4:c9:6c:2e:4a:f4:
19:76:e6:2a:f2:42:a7:7e:04:7a:c6:56:0d:9f:3c:
0b:5e:62:d3:a9:0a:ab:96:fd:da:b9:e7:7c:fa:f1:
14:78:15:99:af:25:b9:47:28:92:5a:44:d2:61:58:
44:2f:aa:9a:29:0a:dd:10:c6:19:62:83:ae:6d:c7:
51:09:7b:f8:8c:ca:be:83:ce:d1:28:62:30:af:f9:
43:c5:27:a4:2c:97:c0:8d:d0:cd:8d:f2:9e:15:d5:
1d:36:92:6c:64:e9:9a:3d:9d:fd:77:eb:46:1d:42:
84:da:b9:3f:61:1c:ab:2a:80:7d:53:94:6d:68:7b:
92:39:85:bd:b1:53:50:3e:b0:41:76:f0:82:83:62:
83:6a:03:b7:6b:93:43:44:c2:87:f1:e7:c2:69:0c:
a0:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:3E:3A:D7:33:16:D7:C1:B3:F3:F2:A1:C8:0B:B3:89:E7:8C:94:ED
X509v3 Authority Key Identifier:
keyid:98:F0:2B:5C:FB:41:72:50:8E:07:37:BF:25:CD:5D:22:A0:1D:C4:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mPArXPtBclCOBze_Jc1dIqAdxFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/43d301-f81a-492e-922c-c971dc713b1f/1/mPArXPtBclCOBze_Jc1dIqAdxFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/43d301-f81a-492e-922c-c971dc713b1f/1/mPArXPtBclCOBze_Jc1dIqAdxFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:78:37:68:f3:3f:16:0f:df:1d:3d:1d:c6:fe:40:c5:8c:09:
1f:eb:cf:66:7f:36:18:c4:94:cf:a1:3a:c8:33:6a:5a:ba:55:
ac:70:10:80:71:c0:12:23:a5:d8:2b:2b:01:41:cd:b1:93:ae:
6d:88:c2:14:36:49:95:85:0e:f4:db:1b:4e:44:72:7a:21:d7:
eb:46:e3:b8:b0:46:30:92:76:54:ff:4d:51:86:10:3a:79:ba:
65:33:3d:2b:37:9b:0b:f2:d8:fa:86:45:f8:2f:be:6b:98:4a:
6f:2c:6e:e7:a8:89:3b:29:52:6a:92:01:89:c8:52:1c:ba:83:
18:f6:95:3a:ec:e4:c1:73:7e:53:af:ea:68:fb:87:0d:25:c7:
46:f4:ee:22:96:59:18:b7:85:00:8e:d5:8b:e1:78:72:36:d9:
aa:f9:ed:1e:fc:b6:4e:33:d7:97:fd:09:a4:eb:62:a2:96:6a:
df:96:ba:9b:b0:42:dc:ee:a0:f6:b5:7d:cd:dd:7f:d1:65:a4:
ec:fa:28:db:05:23:be:15:5c:1d:a6:82:0d:6e:22:c8:0c:16:
ce:4b:a7:08:5c:58:8b:40:76:8a:65:dd:b1:ee:21:d5:66:36:
23:86:9a:9d:eb:5a:86:3c:64:f4:cc:b1:10:73:4e:21:5f:8f:
93:6c:77:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:31:56 2025 by rpki-client