Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/34ffe7-9bf4-452b-9199-1255da04d986/1/mEtpDW3TsPrs4DvyCPADDjOMIhY.mft
File: mEtpDW3TsPrs4DvyCPADDjOMIhY.mft (raw, json)
Hash identifier: uGbGazd6ZBbT14BpuCNturuJ6mmBST3XBSNZgzWoIBY=
Subject key identifier: EF:55:75:72:C7:FB:D3:F9:D6:AB:59:1D:66:B6:71:DB:7B:80:3E:59
Authority key identifier: 98:4B:69:0D:6D:D3:B0:FA:EC:E0:3B:F2:08:F0:03:0E:33:8C:22:16
Certificate issuer: /CN=984b690d6dd3b0faece03bf208f0030e338c2216
Certificate serial: 0194BC730CE477D8FA4576F98A8B575AC221
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mEtpDW3TsPrs4DvyCPADDjOMIhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/34ffe7-9bf4-452b-9199-1255da04d986/1/mEtpDW3TsPrs4DvyCPADDjOMIhY.mft
Manifest number: 0BAC
Signing time: Fri 31 Jan 2025 13:00:43 +0000
Manifest this update: Fri 31 Jan 2025 13:00:43 +0000
Manifest next update: Sat 01 Feb 2025 13:00:43 +0000
Files and hashes: 1: iCdHueFJzoeCEXGqlVVm5ScVPLc.roa (hash: WO+D1FK6ZZiW8oMD1xh3ZGMyihQtIz38YWI4KrXD8lM=)
2: mEtpDW3TsPrs4DvyCPADDjOMIhY.crl (hash: lC6pEfwasKEm9iuOCyGmkMbIU+HF6T+qbEfYMIzBpGw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:0c:e4:77:d8:fa:45:76:f9:8a:8b:57:5a:c2:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=984b690d6dd3b0faece03bf208f0030e338c2216
Validity
Not Before: Jan 31 13:00:43 2025 GMT
Not After : Feb 1 13:00:43 2025 GMT
Subject: CN=ef557572c7fbd3f9d6ab591d66b671db7b803e59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:97:14:af:7c:64:cf:6d:10:e2:5c:cc:fc:4c:
66:f8:59:0e:23:21:f7:b2:dc:c8:93:cc:46:3d:c7:
15:49:87:64:a4:fe:54:21:83:40:a4:52:5e:2d:3b:
38:7a:28:5a:5e:07:1a:05:2d:77:2d:b0:66:f0:16:
47:7f:14:56:5c:08:2b:9c:a1:78:1d:ea:72:9e:13:
0d:45:92:3b:74:4d:af:1f:c9:c4:95:8b:93:43:7b:
b8:0a:6d:b6:78:40:ac:70:64:5f:1e:7a:17:ca:6a:
51:f1:23:ac:9e:5d:c0:1b:0f:78:e4:70:f0:ec:1e:
07:d9:5c:8a:70:18:f8:5a:fb:c2:54:bb:6d:ef:81:
d8:2b:03:62:f0:0b:ca:43:e5:4d:bc:ca:64:c9:38:
41:94:fa:55:57:74:2e:f7:fb:36:28:81:fa:63:21:
a5:62:b4:66:ad:60:5f:98:11:79:0e:c4:77:a9:64:
1e:a1:2c:5b:7a:e9:13:72:5e:82:91:19:f0:2b:94:
df:29:f8:ca:9b:47:f5:99:02:ae:eb:68:a6:ff:c5:
1e:a9:0e:8f:73:56:a6:d2:53:98:1d:c4:bd:65:db:
c6:d8:37:7c:db:9b:d8:4d:f5:49:87:8f:90:b4:e1:
92:38:03:67:cc:86:40:92:9d:58:e0:83:fd:0b:95:
fe:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:55:75:72:C7:FB:D3:F9:D6:AB:59:1D:66:B6:71:DB:7B:80:3E:59
X509v3 Authority Key Identifier:
keyid:98:4B:69:0D:6D:D3:B0:FA:EC:E0:3B:F2:08:F0:03:0E:33:8C:22:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mEtpDW3TsPrs4DvyCPADDjOMIhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/34ffe7-9bf4-452b-9199-1255da04d986/1/mEtpDW3TsPrs4DvyCPADDjOMIhY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/34ffe7-9bf4-452b-9199-1255da04d986/1/mEtpDW3TsPrs4DvyCPADDjOMIhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:40:ec:8a:89:6c:6e:01:4f:08:22:5f:bd:be:1d:49:51:f4:
3c:98:70:3a:c3:3d:44:57:59:5f:76:86:2e:5b:79:e3:ca:db:
5e:28:d5:a7:16:e8:8e:ac:32:98:c4:b4:55:88:4a:58:68:13:
7c:d2:77:92:8e:fa:76:96:c7:fc:f8:e3:76:7d:7c:f8:06:45:
b8:56:df:03:52:6c:4a:db:97:2e:66:0d:0d:7c:e4:10:df:14:
c0:90:b8:0a:91:4d:07:6c:8b:f6:0b:a2:1c:f7:bc:f0:57:63:
63:dc:e1:85:7f:e0:37:63:aa:34:7d:8c:8c:bb:0c:19:a1:94:
34:a2:9a:3b:b4:3e:f5:d8:a8:5e:58:9b:4d:9d:ce:9c:dd:78:
f8:f2:a2:0f:32:8b:30:6f:a0:b4:b8:49:16:8e:d3:ca:8f:f1:
92:59:67:bf:f3:c9:6c:e5:ed:2e:ae:e5:99:ab:37:9f:aa:1a:
51:57:b6:cd:43:46:89:9c:29:67:2f:e7:70:de:a4:9d:41:b3:
e6:4b:b4:28:70:86:21:86:2a:9c:78:aa:1b:63:81:9e:71:99:
3d:37:97:f7:fc:ab:4b:76:7a:49:7e:4d:02:5c:2e:fc:7f:ef:
b2:68:7e:5f:54:3f:af:79:d4:f6:1e:7b:be:a1:88:46:7c:b0:
24:88:ae:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:40:18 2025 by rpki-client