
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.mft
File: mJAcfP_Rmk_qePebEASZkmbcwiQ.mft (raw, json)
Hash identifier: De5CgXWypZQtLtfWi8nuoTx89oUkFO6UHBN1mb1Wggw=
Subject key identifier: 6E:04:87:F4:27:B4:11:5E:D7:06:36:1D:0E:2E:07:27:0C:D0:0E:B3
Authority key identifier: 98:90:1C:7C:FF:D1:9A:4F:EA:78:F7:9B:10:04:99:92:66:DC:C2:24
Certificate issuer: /CN=98901c7cffd19a4fea78f79b1004999266dcc224
Certificate serial: 0194BCE0B5303DACAFAAD3DF82B1355328E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mJAcfP_Rmk_qePebEASZkmbcwiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 15:00:30 +0000
Manifest this update: Fri 31 Jan 2025 15:00:30 +0000
Manifest next update: Sat 01 Feb 2025 15:00:30 +0000
Files and hashes: 1: HGWBnpYX08vMWUwwLOMJq_k78S0.roa (hash: yttjunWIbX6dwAiOo7g6fUQGb+c1a+Xf5qmbeU/dnp4=)
2: XmFs6QZFMPRdJzopVIFXmV--Vrs.roa (hash: btfm0oGigPJzbc1bJybbkI9gWRtDv9TpTBsAYkeB30s=)
3: mJAcfP_Rmk_qePebEASZkmbcwiQ.crl (hash: gPfP/f6URu1fAEGwpdw4WUWuUv6LDlrW1sd+KAE2dzE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:b5:30:3d:ac:af:aa:d3:df:82:b1:35:53:28:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98901c7cffd19a4fea78f79b1004999266dcc224
Validity
Not Before: Jan 31 15:00:30 2025 GMT
Not After : Feb 1 15:00:30 2025 GMT
Subject: CN=6e0487f427b4115ed706361d0e2e07270cd00eb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:95:f3:71:60:af:9b:a1:e7:a8:ba:74:aa:e8:
71:fb:56:02:91:aa:2c:f7:bf:e0:5b:ab:1b:55:de:
3f:dc:f1:f5:67:f0:18:48:bd:3d:56:85:44:c5:49:
e4:75:5d:c3:47:6e:fe:72:9e:71:09:95:b6:38:42:
0b:59:ef:df:76:8e:3f:8a:bc:c9:9e:32:b0:a1:0e:
90:19:c2:4e:06:72:61:85:79:e5:eb:a1:71:23:53:
43:96:3f:e9:46:74:8a:87:d1:e0:73:b0:11:3b:d3:
b1:7a:43:cc:81:82:b9:c2:a4:8f:39:16:c9:72:17:
b8:7e:9e:9b:8a:2f:db:28:d0:e7:2c:21:50:f5:9d:
42:5d:f7:61:45:75:e8:d2:ae:e5:38:5d:55:28:45:
2c:38:2f:6b:5a:a9:ff:75:24:45:fa:4a:66:9f:91:
31:8b:b5:62:8a:d1:5c:35:f9:65:d3:cf:53:c4:94:
54:16:8f:a5:50:af:3d:b8:04:64:09:55:d1:5d:60:
76:b6:04:d7:a6:35:1c:50:98:c5:f1:5d:6c:c0:14:
b3:e9:44:64:06:24:97:33:32:03:29:f0:3d:8c:63:
1e:47:03:39:0e:d4:02:34:87:ec:30:b6:90:8a:51:
67:b7:6d:41:5b:16:a3:af:fc:03:9b:85:99:4f:05:
0f:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:04:87:F4:27:B4:11:5E:D7:06:36:1D:0E:2E:07:27:0C:D0:0E:B3
X509v3 Authority Key Identifier:
keyid:98:90:1C:7C:FF:D1:9A:4F:EA:78:F7:9B:10:04:99:92:66:DC:C2:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mJAcfP_Rmk_qePebEASZkmbcwiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:44:7e:07:5d:f7:a0:94:2b:e2:b7:81:fa:78:b1:d8:25:6b:
4a:5f:df:8c:74:8d:dc:39:8b:47:da:46:b5:48:e9:24:f5:99:
61:85:be:87:94:fe:0d:85:a7:6b:61:f4:d0:f6:09:df:4e:5e:
e2:09:38:0d:38:7a:f8:07:96:81:51:e0:60:f8:0a:78:89:ca:
fc:40:73:5d:5e:2a:fa:08:40:b7:37:f5:8e:96:e9:35:19:db:
5d:bd:fa:de:59:3e:77:ef:77:0f:fa:ca:12:f8:77:15:f9:7c:
78:d3:4a:90:d7:3a:2b:8f:de:a1:cd:23:7e:c5:37:18:0c:6f:
ff:1b:30:12:b5:e4:67:97:07:0b:aa:ff:eb:81:48:93:67:bc:
02:12:68:d4:78:9b:d8:1b:de:37:69:6a:42:cd:53:ba:9d:61:
91:cc:7a:9a:7a:2a:16:8c:a3:69:6e:62:cb:3e:2d:a1:72:52:
f3:6f:80:6d:ef:a3:0c:7d:3f:41:ac:f8:2f:a6:05:8f:1b:8d:
5f:1d:99:a7:93:63:33:18:7b:05:85:01:dc:bf:86:f0:39:bb:
d4:04:85:92:e1:9f:5c:b9:be:23:da:00:c0:00:6f:f4:01:f9:
8e:a1:73:9c:72:f4:46:5e:ec:65:af:16:8a:94:57:d2:2d:62:
14:f7:a3:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:59:02 2025 by rpki-client