Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/15863b-787f-4084-b7f6-5944960e31cf/1/mu7LNT8c3F_TqdVKiHNTHv0oXEY.mft
File: mu7LNT8c3F_TqdVKiHNTHv0oXEY.mft (raw, json)
Hash identifier: FkFspIDFTRjUM/qXt/uApih3iw2urlWy1z0y6ECvaOA=
Subject key identifier: 76:3F:2C:32:42:7E:CA:CD:37:35:B0:84:21:B8:D1:40:2D:41:80:5A
Authority key identifier: 9A:EE:CB:35:3F:1C:DC:5F:D3:A9:D5:4A:88:73:53:1E:FD:28:5C:46
Certificate issuer: /CN=9aeecb353f1cdc5fd3a9d54a8873531efd285c46
Certificate serial: 0194BC3C3A9BD990138451EC75CCCEB7B96A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mu7LNT8c3F_TqdVKiHNTHv0oXEY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/15863b-787f-4084-b7f6-5944960e31cf/1/mu7LNT8c3F_TqdVKiHNTHv0oXEY.mft
Manifest number: 0D18
Signing time: Fri 31 Jan 2025 12:00:51 +0000
Manifest this update: Fri 31 Jan 2025 12:00:51 +0000
Manifest next update: Sat 01 Feb 2025 12:00:51 +0000
Files and hashes: 1: mu7LNT8c3F_TqdVKiHNTHv0oXEY.crl (hash: 1zajywyd9V+6zUmZH4TKnTdJj3sWhT/3HOKEY97+wKA=)
2: zAfXaaTLSsRoB5kUrFVM41jmKKM.roa (hash: Qyk65ct/H4EE3CmFVP3i+QvaSpxHvWaeOqI7968YDoo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:3a:9b:d9:90:13:84:51:ec:75:cc:ce:b7:b9:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9aeecb353f1cdc5fd3a9d54a8873531efd285c46
Validity
Not Before: Jan 31 12:00:51 2025 GMT
Not After : Feb 1 12:00:51 2025 GMT
Subject: CN=763f2c32427ecacd3735b08421b8d1402d41805a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a8:57:64:c5:26:0c:ec:d0:d4:54:85:1f:5f:
0a:9e:4f:ed:3e:c0:54:99:52:e1:b0:c2:9e:cc:d1:
1e:a6:f8:31:88:35:d2:ac:98:fd:4b:d4:05:1b:e6:
b3:b8:87:7b:0f:c7:5f:1a:89:7c:2e:b2:7b:f4:06:
74:93:61:94:e9:5d:66:fd:1b:5b:c2:8b:c7:d0:43:
cc:c9:e3:50:2a:ba:6e:1f:cf:0a:2d:01:ce:60:bf:
55:64:a1:77:4f:cc:71:c6:a7:11:2c:fd:87:23:3f:
58:93:1d:4d:2a:88:d5:fc:94:05:e6:84:85:bb:3b:
61:c3:fa:b5:92:78:54:a4:34:2b:f3:0a:60:1b:13:
69:dd:a8:4b:eb:cc:b9:fc:2c:1c:bc:30:8e:0b:28:
2f:6e:ee:73:da:4e:18:0f:ec:84:43:a4:25:b4:f2:
59:5a:23:8b:db:03:50:cc:17:08:0a:90:66:5b:27:
69:56:b0:0b:78:d7:c5:0f:da:93:f9:10:eb:9f:f5:
62:0e:c0:dd:6c:09:bd:9a:1e:90:a4:07:ba:66:c7:
94:68:6d:e9:e4:97:bb:5e:bf:11:a9:30:93:32:c2:
2f:d6:ad:52:a1:23:cb:66:f5:6e:ea:66:bf:b0:8c:
20:b7:73:b5:58:69:9a:0f:d0:ce:b9:2e:77:4d:78:
10:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:3F:2C:32:42:7E:CA:CD:37:35:B0:84:21:B8:D1:40:2D:41:80:5A
X509v3 Authority Key Identifier:
keyid:9A:EE:CB:35:3F:1C:DC:5F:D3:A9:D5:4A:88:73:53:1E:FD:28:5C:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu7LNT8c3F_TqdVKiHNTHv0oXEY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/15863b-787f-4084-b7f6-5944960e31cf/1/mu7LNT8c3F_TqdVKiHNTHv0oXEY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/15863b-787f-4084-b7f6-5944960e31cf/1/mu7LNT8c3F_TqdVKiHNTHv0oXEY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:1c:f0:a5:e4:16:e9:e5:49:43:a4:73:36:9e:e6:f4:32:8b:
f1:56:81:54:9c:c6:27:f0:bd:63:52:24:38:35:07:3e:26:52:
5b:fe:f6:74:79:49:b9:7e:78:8e:f4:c9:a2:9b:f0:13:1b:fc:
eb:3b:de:22:24:d4:b6:b2:c8:e9:65:12:26:69:69:bf:79:d5:
6c:60:e5:c4:a2:6d:33:bc:eb:5d:59:26:d2:cb:b2:e3:04:e7:
82:ff:f6:bf:5d:2a:f0:ff:04:90:35:ea:a1:c4:bb:cc:ff:3d:
d2:b3:de:c6:d3:c8:8b:37:3f:58:02:6c:2e:7f:c6:5f:28:5d:
ab:7b:a8:22:9a:5d:02:e1:d0:f8:97:f5:51:9b:ed:34:f1:0e:
f0:55:25:7f:62:7f:45:83:bf:8d:f8:b7:ac:86:fa:39:dc:15:
05:ca:a4:c0:73:45:5f:44:ff:82:31:c3:6c:a1:46:27:7a:c6:
12:45:1b:19:4c:83:5b:bf:22:f5:7b:79:59:88:f3:1c:e9:f9:
cd:88:33:12:af:69:f3:5a:4e:1f:d4:c2:f9:1e:ee:f9:a3:ee:
cd:f0:13:26:57:2d:cc:00:93:c7:b0:04:26:c8:b0:21:fa:f5:
7d:7a:6d:18:e9:18:78:b3:4d:bf:38:d3:a0:a8:40:b4:84:9b:
8a:da:43:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:19:14 2025 by rpki-client