Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/a7e9b9-6bac-4538-a9e6-fa8806a024c4/1/mkM22h63IW4g7ASn8DHrShtjG7M.mft
File: mkM22h63IW4g7ASn8DHrShtjG7M.mft (raw, json)
Hash identifier: dYsHSRfpcxY1VNeAX/7IrSkDA9DW5u27Ul86lGswwjA=
Subject key identifier: AC:61:DD:FA:1F:11:5C:DB:29:A7:94:1C:3B:AF:7A:67:8A:4E:B6:28
Authority key identifier: 9A:43:36:DA:1E:B7:21:6E:20:EC:04:A7:F0:31:EB:4A:1B:63:1B:B3
Certificate issuer: /CN=9a4336da1eb7216e20ec04a7f031eb4a1b631bb3
Certificate serial: 0194BBCE3AA89977DADD755682164946EC09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mkM22h63IW4g7ASn8DHrShtjG7M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/a7e9b9-6bac-4538-a9e6-fa8806a024c4/1/mkM22h63IW4g7ASn8DHrShtjG7M.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 10:00:42 +0000
Manifest this update: Fri 31 Jan 2025 10:00:42 +0000
Manifest next update: Sat 01 Feb 2025 10:00:42 +0000
Files and hashes: 1: 91oUMgCP74fspZxBBljzGiQPBlI.roa (hash: Ys2eA6I4wLf+Ld2RnHYB/UxEHZh1MaBORWqhbF+NkdI=)
2: mkM22h63IW4g7ASn8DHrShtjG7M.crl (hash: P0R/9QKawNf33lVhN/tuBZlvzPNwh4c1vhnOoov3Wco=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:3a:a8:99:77:da:dd:75:56:82:16:49:46:ec:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a4336da1eb7216e20ec04a7f031eb4a1b631bb3
Validity
Not Before: Jan 31 10:00:42 2025 GMT
Not After : Feb 1 10:00:42 2025 GMT
Subject: CN=ac61ddfa1f115cdb29a7941c3baf7a678a4eb628
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:cc:30:ec:a1:4e:77:9c:41:4d:91:6e:9a:16:
a8:37:86:7f:a7:c2:d4:92:a3:4b:17:91:17:a0:43:
c9:e6:3d:24:f0:7a:12:cb:6d:31:4b:c8:4f:c9:db:
3f:0c:25:73:f5:13:f1:d4:59:37:3d:74:83:a8:88:
bb:cf:30:96:55:d7:7b:44:7e:58:a2:5e:80:cc:1e:
67:10:bf:e3:13:9d:f2:2d:87:da:6a:61:f7:75:42:
6a:16:63:34:76:12:65:a4:13:45:e6:65:99:f9:f9:
3b:e1:f8:ac:7f:69:ee:d6:f2:01:0a:17:b1:65:18:
e0:80:fb:c0:b5:8c:ed:bc:6b:d3:d1:70:49:cf:0a:
03:d9:68:5a:f5:b2:ef:68:45:b0:61:5a:b8:7a:35:
d2:16:a7:1f:4b:14:23:b1:16:1b:89:ce:ff:e9:2e:
5b:f0:ee:67:b2:76:4c:07:3c:95:e4:a0:00:cc:0d:
5f:4f:07:75:30:56:47:86:7b:21:50:0d:5c:10:c1:
7b:d6:3f:2f:94:df:6a:f6:57:d5:68:f2:25:8e:22:
2c:35:ae:d6:cb:b4:ac:0c:b6:60:c4:4f:83:b9:eb:
fe:7a:31:18:ef:e3:de:8f:35:fe:07:2f:47:da:12:
f1:82:ba:73:60:d2:58:1f:46:29:67:cd:de:46:98:
ca:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:61:DD:FA:1F:11:5C:DB:29:A7:94:1C:3B:AF:7A:67:8A:4E:B6:28
X509v3 Authority Key Identifier:
keyid:9A:43:36:DA:1E:B7:21:6E:20:EC:04:A7:F0:31:EB:4A:1B:63:1B:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mkM22h63IW4g7ASn8DHrShtjG7M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a7e9b9-6bac-4538-a9e6-fa8806a024c4/1/mkM22h63IW4g7ASn8DHrShtjG7M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a7e9b9-6bac-4538-a9e6-fa8806a024c4/1/mkM22h63IW4g7ASn8DHrShtjG7M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:fb:ac:35:95:6f:4d:3c:c1:c3:38:55:56:32:c3:b5:7d:06:
f2:1a:56:0a:7b:4d:dc:79:a7:30:3c:95:ad:8d:e8:83:fe:e7:
61:a6:0a:fd:5f:01:e1:06:62:c0:b8:64:a3:be:64:38:09:1c:
fd:08:04:39:16:0d:53:9d:4f:4d:36:8c:b7:6a:be:3a:a1:66:
44:26:a6:cc:aa:c0:d4:23:79:97:a5:14:c8:8d:4c:2b:90:0e:
36:4b:59:68:d8:aa:3d:39:10:f7:2d:75:d4:6e:ee:42:ad:82:
94:7c:91:25:d7:da:69:03:92:50:c5:61:83:7b:9f:da:70:14:
24:c5:42:e5:9e:ff:1a:86:bb:42:56:10:a9:ea:35:48:d8:3d:
04:a0:b0:5d:cd:22:83:27:10:7e:7e:d6:43:b6:b9:b7:d0:3d:
97:97:25:30:0a:51:92:8a:4b:37:43:2e:f0:c2:f8:8b:fd:e5:
8d:ae:51:34:c0:e9:c8:89:c4:18:36:16:ea:b3:ee:23:83:31:
55:83:b0:b1:ba:78:45:82:7e:51:25:9e:23:22:88:70:8e:fd:
d1:74:c6:9b:2f:08:bb:3b:9f:be:55:e5:ee:4e:46:61:e1:aa:
9f:b8:ad:36:04:d3:6e:73:56:a8:1d:1b:18:26:cf:2a:03:20:
2e:c6:bc:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:31 2025 by rpki-client