Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/2f6595-d3d1-43ea-a4a3-ab3b7c3e8215/1/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.mft
File: M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.mft (raw, json)
Hash identifier: 4pXspqZzP513dDsV0UYy95oM45IRFsQ0ZJXLw8GMUWE=
Subject key identifier: 2A:5F:7B:CA:86:6F:48:9F:B2:F6:7E:B1:18:7D:CB:8D:70:A8:DB:B2
Authority key identifier: 33:A9:C7:BD:F2:B8:2E:34:3E:C4:26:67:D6:EE:DE:4B:80:61:0C:84
Certificate issuer: /CN=33a9c7bdf2b82e343ec42667d6eede4b80610c84
Certificate serial: 0194BC04C4FF28313554F7541DEF06A4B810
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/2f6595-d3d1-43ea-a4a3-ab3b7c3e8215/1/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.mft
Manifest number: 044C
Signing time: Fri 31 Jan 2025 11:00:16 +0000
Manifest this update: Fri 31 Jan 2025 11:00:16 +0000
Manifest next update: Sat 01 Feb 2025 11:00:16 +0000
Files and hashes: 1: 8g9bg-pK2coR2xc2D_a9PJVKJeQ.roa (hash: Sri7SGO6ABpjeLfhkWLnHnFF2H4nTIC/JPupEaw1pKE=)
2: M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.crl (hash: dn1HB3P86L2vs3CGyj+lsUwzEzVwPf2x5vRZP7bslGo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:c4:ff:28:31:35:54:f7:54:1d:ef:06:a4:b8:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33a9c7bdf2b82e343ec42667d6eede4b80610c84
Validity
Not Before: Jan 31 11:00:16 2025 GMT
Not After : Feb 1 11:00:16 2025 GMT
Subject: CN=2a5f7bca866f489fb2f67eb1187dcb8d70a8dbb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:64:ea:2a:b7:02:00:07:4a:e5:74:b7:ec:7b:
a8:f6:3e:3d:ba:c3:9b:b4:1a:de:31:f8:75:69:2f:
03:2e:9e:d9:ca:48:11:62:f2:c3:1d:80:0e:4d:43:
4e:b4:74:d8:51:d8:56:0d:1e:e2:ab:1b:7b:a9:fe:
21:b6:2e:92:87:bb:bd:87:6b:13:cc:ec:f1:04:20:
69:5e:4c:84:2e:06:44:f0:38:f4:14:c6:b6:c5:92:
5e:a5:9d:64:df:8c:71:37:23:6b:ba:f8:09:07:7c:
df:f1:c5:e3:0c:93:3d:fe:e9:71:2d:1c:d4:53:61:
3d:ac:da:67:9d:a8:32:82:c0:e9:0c:0a:07:f8:d5:
27:f0:f0:45:30:37:0a:b7:e4:53:3b:c8:f8:2d:c0:
b8:15:82:a5:43:54:c4:59:a4:fe:de:2b:f9:a6:b2:
4b:41:66:ea:76:1f:29:71:7f:7d:b5:af:f9:4b:a7:
11:39:4a:7b:b6:83:cf:af:f4:b2:11:02:79:0a:8f:
08:84:89:1f:89:7a:7b:96:0a:62:dc:32:7d:7d:6a:
d0:30:ee:9c:89:3b:a4:be:86:23:69:8a:dc:b1:02:
7b:01:14:c7:83:ca:3a:fb:96:28:49:e5:f1:62:56:
13:90:58:4b:c3:fc:ee:4a:70:12:56:a2:a6:b8:0c:
86:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:5F:7B:CA:86:6F:48:9F:B2:F6:7E:B1:18:7D:CB:8D:70:A8:DB:B2
X509v3 Authority Key Identifier:
keyid:33:A9:C7:BD:F2:B8:2E:34:3E:C4:26:67:D6:EE:DE:4B:80:61:0C:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/2f6595-d3d1-43ea-a4a3-ab3b7c3e8215/1/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/2f6595-d3d1-43ea-a4a3-ab3b7c3e8215/1/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:38:96:9b:76:19:12:90:be:b9:56:35:f6:27:cd:d3:b1:c7:
f4:c1:17:16:3b:59:56:20:57:bc:8b:1c:54:9f:fe:9c:57:35:
a7:51:44:45:4f:bb:e6:c1:ec:93:65:2d:b2:d6:78:1f:fd:03:
89:e9:94:3e:1f:bf:7f:5d:a7:21:39:ee:c0:16:e4:93:0e:38:
59:5b:e7:34:15:32:78:6d:9e:38:51:47:55:e4:5f:0c:34:33:
b3:c5:69:ca:a6:4f:42:18:65:7a:55:8d:2f:fd:3b:76:15:29:
a4:a8:6a:d8:80:ab:7d:ec:6d:8d:24:16:bc:2e:d7:a6:90:eb:
71:fb:48:f4:37:0b:97:d6:a5:4f:ea:99:b0:61:41:0c:33:0d:
6b:cf:52:f4:9a:fe:63:de:bc:32:72:7b:3b:d1:d0:38:43:cf:
32:4e:6f:ad:ec:0f:36:f2:36:36:c0:7a:2f:52:06:bb:e6:87:
cd:2e:de:a4:80:9d:40:11:01:d5:24:46:bc:09:bc:a7:ba:42:
4f:d6:fc:da:98:4c:80:9c:7e:63:6a:42:4e:fc:b3:ba:7d:2c:
dc:10:27:eb:24:e8:73:67:62:f4:3d:58:ae:e7:8e:d9:c2:82:
b7:0f:86:66:33:85:33:6e:03:76:6d:2e:6b:87:f5:3c:01:f1:
c6:7b:fe:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:13:18 2025 by rpki-client