Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/aabc6c-0456-4935-a469-d547185512de/1/M7Zai666T_YhSS6-5vweiK2yGwM.mft
File: M7Zai666T_YhSS6-5vweiK2yGwM.mft (raw, json)
Hash identifier: 7JfPUVoEgIJWrfnQhEYU2XS03mBeYrp70Z3S4OhO3rU=
Subject key identifier: 07:AF:74:7C:AD:A9:D1:86:ED:F8:7F:BC:0C:23:09:9D:CF:A1:16:71
Authority key identifier: 33:B6:5A:8B:AE:BA:4F:F6:21:49:2E:BE:E6:FC:1E:88:AD:B2:1B:03
Certificate issuer: /CN=33b65a8baeba4ff621492ebee6fc1e88adb21b03
Certificate serial: 0194BC3CACBBA6FD4D8518F460D6661F4818
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M7Zai666T_YhSS6-5vweiK2yGwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/aabc6c-0456-4935-a469-d547185512de/1/M7Zai666T_YhSS6-5vweiK2yGwM.mft
Manifest number: 41
Signing time: Fri 31 Jan 2025 12:01:20 +0000
Manifest this update: Fri 31 Jan 2025 12:01:20 +0000
Manifest next update: Sat 01 Feb 2025 12:01:20 +0000
Files and hashes: 1: KOqyp8DhhZD3JH6K0j1zl6aQKBk.roa (hash: CehIyyDTNH2XPwU/dxmXRsBi9Cc/OKe00kUQqRs/maU=)
2: M7Zai666T_YhSS6-5vweiK2yGwM.crl (hash: +Rnq1ojK5SGuFLBEyba+1OwX8MH+UIgFYq+Cxne8bCM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:ac:bb:a6:fd:4d:85:18:f4:60:d6:66:1f:48:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33b65a8baeba4ff621492ebee6fc1e88adb21b03
Validity
Not Before: Jan 31 12:01:20 2025 GMT
Not After : Feb 1 12:01:20 2025 GMT
Subject: CN=07af747cada9d186edf87fbc0c23099dcfa11671
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f4:f7:7b:14:d3:f0:03:7e:d4:cb:61:27:85:
e8:16:25:ee:1e:79:51:e9:d7:ff:d4:33:21:13:38:
67:22:32:f7:ef:0a:f4:d3:ae:8a:5c:da:f7:0a:e2:
1e:1d:d7:29:31:fc:b3:87:08:eb:ba:1c:40:6c:29:
f7:a3:48:0f:be:02:c8:f5:57:09:90:5c:c5:21:34:
d3:46:c8:9a:89:c5:8d:60:55:35:55:82:8e:47:4e:
19:33:a2:8f:e6:d2:4c:0f:f1:d6:d8:60:ec:47:21:
c0:b8:42:ef:2e:45:fb:69:12:0d:2d:cd:05:41:c6:
0c:da:10:ba:b9:89:fc:2b:8e:36:82:7e:d2:ea:d8:
96:66:20:fc:60:da:34:c4:8f:e3:db:50:23:2c:23:
fe:c3:31:d2:46:8a:25:86:99:5a:97:95:90:dc:55:
75:16:a7:3d:ce:3f:80:48:65:35:48:1d:a6:b5:89:
bb:4e:3c:ca:4c:36:07:b9:35:0d:85:59:30:45:de:
77:97:8e:90:3e:06:41:15:ff:f9:35:8c:92:b6:47:
94:05:12:59:93:89:d6:de:e0:21:82:c5:55:64:58:
bf:73:03:c1:93:92:50:dc:55:e6:0b:9e:44:99:f4:
c8:6a:8e:7d:78:a9:a8:2e:31:92:7f:c0:50:72:08:
99:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:AF:74:7C:AD:A9:D1:86:ED:F8:7F:BC:0C:23:09:9D:CF:A1:16:71
X509v3 Authority Key Identifier:
keyid:33:B6:5A:8B:AE:BA:4F:F6:21:49:2E:BE:E6:FC:1E:88:AD:B2:1B:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M7Zai666T_YhSS6-5vweiK2yGwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/aabc6c-0456-4935-a469-d547185512de/1/M7Zai666T_YhSS6-5vweiK2yGwM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/aabc6c-0456-4935-a469-d547185512de/1/M7Zai666T_YhSS6-5vweiK2yGwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:33:4f:8d:6c:06:88:69:4f:88:68:85:35:d0:00:72:9c:51:
7d:b7:7f:89:69:a9:8a:5a:52:81:35:3d:41:d3:45:12:83:64:
f6:cc:23:8a:91:28:75:73:28:01:0d:ec:3d:b1:b2:d3:9f:40:
98:3c:1c:eb:a0:f9:62:37:08:b3:50:22:c5:04:9f:c4:ba:2b:
82:39:a2:0b:f9:d8:d7:07:20:08:cd:9c:77:cf:4e:e5:f8:51:
6f:bc:84:a3:cc:f0:d6:36:6f:6a:4a:d5:e2:b2:2a:d8:b2:88:
a6:4e:bb:dc:be:54:09:87:82:65:67:15:ac:8d:3a:9a:22:80:
f0:27:a1:e0:7d:8a:1c:49:be:1c:bd:11:2e:8f:4c:9f:30:13:
65:22:cf:af:79:7b:61:de:37:ec:68:b8:aa:f2:4e:88:80:f2:
26:06:c9:3f:5a:58:dc:23:ba:81:46:e7:95:a9:19:0d:e8:36:
6b:18:13:0e:aa:45:16:19:4b:27:9e:46:6f:2c:71:72:91:a1:
37:84:6b:49:3f:19:2f:20:4e:0c:68:a7:f2:17:9f:4b:58:8e:
c4:8d:b7:5c:16:7d:ee:79:03:2d:55:2c:8f:ce:2e:bb:b5:9c:
53:53:9b:9c:93:72:65:6e:98:f9:22:82:79:27:9d:ea:40:ed:
4a:ac:77:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:10:56 2025 by rpki-client