Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/a20101-1c9f-44c5-8077-5190f7869a7f/1/mW-QP5GoWmDFRu4RQTSMw8gDaSc.mft
File: mW-QP5GoWmDFRu4RQTSMw8gDaSc.mft (raw, json)
Hash identifier: dlHHacdXnBn559p2i6xWNxGP9gZxtvbP1Ak6miW5Uac=
Subject key identifier: EF:02:C6:0F:E8:F2:84:C9:2C:C0:42:5F:53:73:3F:F7:67:C0:28:A0
Authority key identifier: 99:6F:90:3F:91:A8:5A:60:C5:46:EE:11:41:34:8C:C3:C8:03:69:27
Certificate issuer: /CN=996f903f91a85a60c546ee1141348cc3c8036927
Certificate serial: 0194BCE06309FE9654E742031009EA08E595
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mW-QP5GoWmDFRu4RQTSMw8gDaSc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/a20101-1c9f-44c5-8077-5190f7869a7f/1/mW-QP5GoWmDFRu4RQTSMw8gDaSc.mft
Manifest number: 10BD
Signing time: Fri 31 Jan 2025 15:00:09 +0000
Manifest this update: Fri 31 Jan 2025 15:00:09 +0000
Manifest next update: Sat 01 Feb 2025 15:00:09 +0000
Files and hashes: 1: mW-QP5GoWmDFRu4RQTSMw8gDaSc.crl (hash: AHvlT/98gvRj1mBB0FW10Mp/LwTBebYqyJIVsqohCEA=)
2: oGPLcgnT5_jMQFeXtQh3bXaXriM.roa (hash: QUvCaj08Q2TK+WnTDqsu5pyPq9XzMOcObz9WAotvcYU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:63:09:fe:96:54:e7:42:03:10:09:ea:08:e5:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=996f903f91a85a60c546ee1141348cc3c8036927
Validity
Not Before: Jan 31 15:00:09 2025 GMT
Not After : Feb 1 15:00:09 2025 GMT
Subject: CN=ef02c60fe8f284c92cc0425f53733ff767c028a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:05:d8:39:01:5e:ef:b7:d0:e3:f2:6e:60:de:
d1:b5:78:ba:f9:58:da:24:19:42:43:de:93:d7:8a:
33:a7:e3:8a:c4:61:2a:c9:69:1b:0e:d3:52:6d:66:
c8:b3:e7:bf:f1:2d:e3:49:44:ac:17:f1:8d:ed:59:
e5:90:b0:1c:77:bc:e6:cd:e4:40:95:92:c1:30:2a:
99:55:35:d3:63:5f:45:02:1a:b2:6b:13:ba:33:82:
59:d5:3b:8c:65:b3:cf:95:b2:35:bf:ae:67:7a:25:
01:3d:82:fe:60:c6:2c:e6:aa:32:87:2f:c6:3d:b2:
44:eb:70:ab:ee:4d:81:5a:28:9b:e0:94:2e:5c:6a:
ac:8a:e7:79:5c:05:ef:92:13:6c:22:ec:4d:0e:f5:
f6:f5:b4:5c:07:de:b8:b7:e3:72:c3:53:bd:c8:d4:
15:7c:ce:c5:d3:96:51:13:2f:9b:57:d2:54:dc:d3:
5e:d7:98:10:ee:43:97:ed:67:91:b6:d7:fd:16:99:
f7:64:48:ee:c1:6a:98:7e:7f:eb:88:c2:2a:11:6c:
c8:ce:27:f8:1c:f2:08:58:d0:f3:f5:b6:97:64:8a:
9c:9d:8f:9f:35:8b:b0:c2:38:5e:e7:4b:16:c7:99:
ba:8e:05:7b:27:e0:b5:bb:1a:36:c2:a8:23:4e:3c:
78:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:02:C6:0F:E8:F2:84:C9:2C:C0:42:5F:53:73:3F:F7:67:C0:28:A0
X509v3 Authority Key Identifier:
keyid:99:6F:90:3F:91:A8:5A:60:C5:46:EE:11:41:34:8C:C3:C8:03:69:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mW-QP5GoWmDFRu4RQTSMw8gDaSc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a20101-1c9f-44c5-8077-5190f7869a7f/1/mW-QP5GoWmDFRu4RQTSMw8gDaSc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a20101-1c9f-44c5-8077-5190f7869a7f/1/mW-QP5GoWmDFRu4RQTSMw8gDaSc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:0a:22:66:8d:10:88:54:c2:02:f2:fa:37:32:a1:c1:12:ef:
f7:ca:90:ce:ad:7c:18:a5:9b:7b:e5:cd:50:e2:97:48:02:c5:
16:7e:f0:cb:09:12:3f:c8:fb:14:fe:b9:2d:55:cc:22:59:16:
59:0f:4c:71:68:57:c5:72:df:9d:d3:bc:45:01:d7:88:15:89:
28:c4:3d:dc:5e:d1:6d:7a:d7:df:c5:6f:4b:68:56:00:d7:57:
05:36:0a:37:61:44:f8:21:8e:48:df:cc:cf:34:2d:a5:c0:5b:
51:1e:b2:81:da:a0:e7:72:eb:e6:94:3e:06:89:e5:3b:37:c0:
08:09:a9:52:57:63:3f:46:10:70:2a:ed:51:10:5a:fc:28:5a:
dd:f3:40:54:f5:b9:4a:12:96:42:f2:4a:26:34:60:d5:91:a4:
02:81:b4:2c:26:8b:a3:1d:61:ea:6f:1c:ee:22:ff:61:e8:0f:
be:be:d8:a9:85:ca:e1:ae:5f:70:6f:a8:e5:c2:96:c1:45:4f:
ac:be:1a:9f:76:1a:25:ec:2d:6b:ab:bc:84:7f:f2:0a:ba:43:
27:29:9e:96:81:df:55:0c:0a:3a:b7:ae:e4:a2:51:b0:72:f0:
a8:cd:67:7f:5b:12:45:9a:a6:9d:5f:5d:1f:f5:7b:77:a3:bb:
d7:93:6d:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:41 2025 by rpki-client