Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/2854f2-82d7-42bd-acbc-d08a9cdec986/1/mmIOaR2Vqs6zJi29_LDKUJnuJEQ.mft
File: mmIOaR2Vqs6zJi29_LDKUJnuJEQ.mft (raw, json)
Hash identifier: G59Z+ILfXe4zzOf2ydxdO3ZP2WjEm629yam7/KjJCAE=
Subject key identifier: FE:F7:C6:80:0B:0D:27:F3:8D:26:55:A8:10:AA:38:A6:7F:30:14:E2
Authority key identifier: 9A:62:0E:69:1D:95:AA:CE:B3:26:2D:BD:FC:B0:CA:50:99:EE:24:44
Certificate issuer: /CN=9a620e691d95aaceb3262dbdfcb0ca5099ee2444
Certificate serial: 0194BBCDD036A12754710CA552BA13295DD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mmIOaR2Vqs6zJi29_LDKUJnuJEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/2854f2-82d7-42bd-acbc-d08a9cdec986/1/mmIOaR2Vqs6zJi29_LDKUJnuJEQ.mft
Manifest number: 0B8B
Signing time: Fri 31 Jan 2025 10:00:15 +0000
Manifest this update: Fri 31 Jan 2025 10:00:15 +0000
Manifest next update: Sat 01 Feb 2025 10:00:15 +0000
Files and hashes: 1: 0qrwU3AHf3uhnYK1JVGdBCRu6z8.roa (hash: /kYhLDLgGmD/nuK1uy52fNBM98m/fU6G1KeanfyrJjY=)
2: mmIOaR2Vqs6zJi29_LDKUJnuJEQ.crl (hash: X9K4TmLXRTVQrc1BlcB/4WriQEj3W0rgSrO+MgJw5SY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:d0:36:a1:27:54:71:0c:a5:52:ba:13:29:5d:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a620e691d95aaceb3262dbdfcb0ca5099ee2444
Validity
Not Before: Jan 31 10:00:15 2025 GMT
Not After : Feb 1 10:00:15 2025 GMT
Subject: CN=fef7c6800b0d27f38d2655a810aa38a67f3014e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:b9:8d:7b:4d:a9:0b:bc:67:bd:7a:0e:dc:61:
2d:f9:a9:e7:94:a9:6f:85:a9:ab:dd:d2:61:84:fc:
3b:cd:06:31:76:0f:d9:68:75:e8:ad:6c:ba:c0:08:
53:ae:4a:db:62:2f:79:5f:d2:d6:e0:2a:55:e8:ff:
43:4d:1d:f5:ab:b8:da:b3:a4:55:32:63:e8:d6:f8:
d0:96:00:0f:a3:d1:5f:60:cc:58:79:95:88:4d:65:
49:f2:25:48:ea:b3:32:9f:87:f2:8d:f6:6d:0f:94:
78:7b:6c:f6:e5:d9:c0:f1:67:32:3a:2b:18:c2:fe:
d1:de:26:78:43:ca:87:fc:f2:50:40:56:9f:5e:eb:
88:62:1e:9a:57:38:12:59:97:9a:3c:21:78:f3:5f:
a4:a4:5f:75:e5:a6:c9:c6:0b:66:16:d6:16:c2:34:
b2:a1:d2:b8:90:3a:95:37:44:fe:32:0c:1d:6a:de:
dd:76:f6:70:f4:e3:02:a5:1b:92:69:85:62:c6:fc:
fa:f4:7a:16:5c:23:c5:d2:d5:00:66:81:2f:46:0e:
cc:0f:00:a2:d3:60:cf:45:71:5d:ac:10:ce:3e:d3:
c0:8f:64:09:10:42:ba:ec:37:a5:06:20:d7:ac:78:
c3:f0:88:5a:ed:e3:24:ae:35:ff:e1:e3:45:69:ad:
cd:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:F7:C6:80:0B:0D:27:F3:8D:26:55:A8:10:AA:38:A6:7F:30:14:E2
X509v3 Authority Key Identifier:
keyid:9A:62:0E:69:1D:95:AA:CE:B3:26:2D:BD:FC:B0:CA:50:99:EE:24:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mmIOaR2Vqs6zJi29_LDKUJnuJEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/2854f2-82d7-42bd-acbc-d08a9cdec986/1/mmIOaR2Vqs6zJi29_LDKUJnuJEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/2854f2-82d7-42bd-acbc-d08a9cdec986/1/mmIOaR2Vqs6zJi29_LDKUJnuJEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:82:63:d1:87:9d:5a:30:80:5a:e0:90:4d:83:af:f1:29:9a:
61:f9:23:42:70:f0:31:8b:e0:6e:17:cc:ff:45:5d:24:3b:d2:
6f:77:c9:c4:16:8f:d0:07:b1:2d:d6:2b:c5:60:d5:ad:e1:d4:
75:a6:9a:d5:ec:7f:63:94:a1:73:34:f3:4a:0a:b8:90:b3:0e:
7f:d5:b6:48:f1:c5:62:83:4a:0e:c1:4a:12:5e:97:a0:06:1f:
9e:0a:50:9d:da:99:8b:ce:b4:43:46:9a:de:80:b6:97:e7:37:
7c:7f:ac:9a:67:20:93:3e:11:7f:9e:09:2f:fb:85:f0:7d:d9:
88:5d:e4:c4:30:4e:16:7d:eb:0a:7f:12:f9:57:3b:de:7e:cb:
cb:d7:b8:72:12:d3:82:53:30:f7:55:f3:30:d5:d9:e0:a8:61:
bf:04:cc:f0:6a:a9:ce:31:7f:5f:ca:0b:07:76:22:6c:48:57:
0c:7d:bf:d8:ec:1e:77:18:10:df:21:0a:16:dd:f9:6f:f9:27:
d8:9b:6d:77:71:32:c7:f4:cc:6e:9e:2d:45:9b:5f:07:c3:3d:
d8:9a:c1:f8:96:ac:26:0f:7e:b0:1b:14:f7:18:1a:ef:0f:b1:
3c:96:da:4f:60:68:40:90:eb:af:92:a4:4f:42:be:d0:64:1d:
75:fa:4b:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:06 2025 by rpki-client