Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/0cd949-f4b7-48d9-a0c6-fda8a13ca1d7/1/mowynYdjwp8pkxq7uBlfl1A4KYs.mft
File: mowynYdjwp8pkxq7uBlfl1A4KYs.mft (raw, json)
Hash identifier: QzPgJPL9Cf3jKDqGwM8FAeTdyUoV9D6BWNj7F2yOOlI=
Subject key identifier: 28:F8:4E:AC:DE:06:08:E3:65:ED:48:72:B1:2E:BD:DD:99:94:40:05
Authority key identifier: 9A:8C:32:9D:87:63:C2:9F:29:93:1A:BB:B8:19:5F:97:50:38:29:8B
Certificate issuer: /CN=9a8c329d8763c29f29931abbb8195f975038298b
Certificate serial: 0194BCE05929A6A7FA342F5C70B8EE687B5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mowynYdjwp8pkxq7uBlfl1A4KYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/0cd949-f4b7-48d9-a0c6-fda8a13ca1d7/1/mowynYdjwp8pkxq7uBlfl1A4KYs.mft
Manifest number: 0122
Signing time: Fri 31 Jan 2025 15:00:06 +0000
Manifest this update: Fri 31 Jan 2025 15:00:06 +0000
Manifest next update: Sat 01 Feb 2025 15:00:06 +0000
Files and hashes: 1: FDxX9SBwi6ZE3MJeOvg7kb7kK38.roa (hash: bwymb63cONmt/c+6ZDVkw7Ek8DpIFx336RD8V0Gt1oQ=)
2: mowynYdjwp8pkxq7uBlfl1A4KYs.crl (hash: euu9fbayQBBn2V1Ys7FlhNXsA78y4LEa0Z/J2ZV/S6M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:59:29:a6:a7:fa:34:2f:5c:70:b8:ee:68:7b:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a8c329d8763c29f29931abbb8195f975038298b
Validity
Not Before: Jan 31 15:00:06 2025 GMT
Not After : Feb 1 15:00:06 2025 GMT
Subject: CN=28f84eacde0608e365ed4872b12ebddd99944005
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:11:7d:b2:20:87:80:35:5c:10:8b:05:b1:f9:
6f:fa:dc:f4:78:6d:72:d7:8f:8e:c5:45:3c:58:45:
97:cf:27:38:61:ee:e6:10:07:73:4b:7a:b9:d8:bf:
d6:96:82:91:33:f3:f3:d9:96:c7:08:9d:c6:00:c0:
6c:cc:1d:02:42:85:b8:77:59:28:3f:9e:b6:7e:4e:
68:a7:eb:17:3c:d7:bc:e8:47:98:1f:51:fb:17:6d:
f9:4f:38:6e:0f:82:30:5c:24:68:5e:77:db:f7:5c:
51:a8:87:52:d8:99:da:b3:26:d0:2f:c6:ab:b3:51:
82:aa:2c:b1:7d:b6:27:c9:23:22:34:f5:34:fe:5e:
c2:20:b6:ca:d4:34:c9:d9:0a:41:42:81:7d:96:2b:
6b:40:40:15:fd:14:01:11:e0:42:3d:bf:7e:44:b0:
27:d4:a3:00:f8:fa:e9:38:ca:af:a3:08:7a:77:bb:
15:7f:ae:c3:6d:a7:fa:75:c8:85:1a:7d:d1:b1:bb:
e8:0e:05:c4:49:0e:aa:46:d5:4f:b3:97:59:e2:8d:
a4:ab:a0:d6:e6:a0:07:43:2b:38:65:18:ee:e8:f1:
85:c0:58:87:d3:16:9c:03:6d:8c:64:23:c1:7b:af:
de:c4:e8:16:69:05:ee:85:66:bc:a3:c0:f7:b8:2e:
df:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:F8:4E:AC:DE:06:08:E3:65:ED:48:72:B1:2E:BD:DD:99:94:40:05
X509v3 Authority Key Identifier:
keyid:9A:8C:32:9D:87:63:C2:9F:29:93:1A:BB:B8:19:5F:97:50:38:29:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mowynYdjwp8pkxq7uBlfl1A4KYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/0cd949-f4b7-48d9-a0c6-fda8a13ca1d7/1/mowynYdjwp8pkxq7uBlfl1A4KYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/0cd949-f4b7-48d9-a0c6-fda8a13ca1d7/1/mowynYdjwp8pkxq7uBlfl1A4KYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:71:cb:41:4f:0c:e3:94:91:a0:aa:37:5e:b1:cb:6d:67:78:
91:d3:9d:b5:80:3c:70:85:8a:76:c5:40:17:36:b5:d2:67:67:
43:ad:b8:0b:ad:2c:4c:34:4e:b8:45:b1:17:54:a5:fb:56:ef:
5b:4d:d8:7c:c3:c7:07:95:6b:99:7c:ed:da:ad:a4:6c:79:0a:
45:ba:0d:7f:7b:bf:04:de:31:1c:0a:0d:70:dd:ac:7c:88:a3:
00:4c:26:ba:21:9b:58:83:e4:52:29:4f:9f:aa:67:d3:1a:26:
24:a6:55:8c:51:7b:57:af:73:8e:67:0a:b4:c4:8e:d0:bf:10:
e9:c8:06:4a:d2:82:bc:aa:83:ef:22:42:23:b5:d7:90:05:5d:
4d:39:f3:a4:50:34:ca:92:0a:8c:71:da:89:89:b6:f7:b8:52:
2b:b9:a8:dc:b0:9d:7a:ce:08:55:6f:52:65:b8:7d:33:c0:22:
25:80:fa:5b:dc:2f:56:d4:ad:d8:31:76:a9:8d:00:38:5a:96:
08:a2:d3:58:56:54:76:8a:a2:7e:98:b3:b5:a3:e9:aa:07:c1:
a1:a2:00:1d:55:26:48:e5:72:e5:dd:da:5c:f4:91:60:bb:f6:
9e:40:f4:b8:e0:8d:34:8f:70:bd:50:36:40:68:64:df:c2:7a:
31:0a:09:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:39:37 2025 by rpki-client