Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/2a69bc-05a0-46f0-b423-222b03114193/1/mInX-DdYfC8jMrsJs-GtmZPXlyw.mft
File: mInX-DdYfC8jMrsJs-GtmZPXlyw.mft (raw, json)
Hash identifier: W93uC0YLHfzPU/MgMzKjbZTsLTytxVZeiRui7Sb8C+8=
Subject key identifier: DD:0E:C9:00:90:66:3D:19:B2:87:9F:AF:8D:06:76:CB:72:C6:70:3A
Authority key identifier: 98:89:D7:F8:37:58:7C:2F:23:32:BB:09:B3:E1:AD:99:93:D7:97:2C
Certificate issuer: /CN=9889d7f837587c2f2332bb09b3e1ad9993d7972c
Certificate serial: 0194BD4E7525E5E3A3A3D6DBB45684AD3AFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mInX-DdYfC8jMrsJs-GtmZPXlyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/2a69bc-05a0-46f0-b423-222b03114193/1/mInX-DdYfC8jMrsJs-GtmZPXlyw.mft
Manifest number: 13BC
Signing time: Fri 31 Jan 2025 17:00:23 +0000
Manifest this update: Fri 31 Jan 2025 17:00:23 +0000
Manifest next update: Sat 01 Feb 2025 17:00:23 +0000
Files and hashes: 1: mInX-DdYfC8jMrsJs-GtmZPXlyw.crl (hash: YiRI8o1C3FloJf+vbWUxobE8Mm/wA27gJaEFqNdplaQ=)
2: zpGvhyYRAmjs5EUuaL_qNrktFtE.roa (hash: 24VotJmvmJDfDZLcY9ERb5W8a78zlapyR9WGVJQ5ABc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:75:25:e5:e3:a3:a3:d6:db:b4:56:84:ad:3a:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9889d7f837587c2f2332bb09b3e1ad9993d7972c
Validity
Not Before: Jan 31 17:00:23 2025 GMT
Not After : Feb 1 17:00:23 2025 GMT
Subject: CN=dd0ec90090663d19b2879faf8d0676cb72c6703a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c8:31:b2:5a:38:4c:3c:54:a2:7a:d1:dc:1d:
91:0f:d3:0d:4f:9b:f7:24:52:2e:95:38:06:66:31:
89:4d:7d:97:c8:5d:01:be:d9:9a:fb:5a:56:b1:3f:
71:dd:b1:07:12:26:e9:e3:72:08:f1:71:40:65:8f:
1a:67:32:88:be:92:ef:a6:90:95:d2:4e:a0:e1:cd:
02:11:85:34:88:02:35:fc:91:84:69:9c:97:56:b6:
86:dd:e6:3f:11:04:f1:df:47:0e:6b:8b:58:25:0a:
a1:58:6d:70:92:07:5f:c8:05:ba:20:a2:9e:56:90:
b0:18:ae:fd:b7:f4:61:8d:ce:c7:8b:22:5e:a9:3e:
97:9f:10:4c:f8:73:b2:7d:0b:62:14:00:e1:24:6d:
49:4c:a0:29:37:1d:d9:4a:69:ff:6f:51:df:3c:51:
13:b3:8d:12:3a:15:04:27:e1:35:09:66:f3:15:da:
09:3e:b2:2c:f6:cd:94:dc:38:80:e0:e2:f0:0d:da:
cb:15:3a:1b:85:c3:b7:e3:2d:72:60:c8:b0:12:1e:
13:4e:c3:4e:c9:53:f7:a8:35:10:69:c5:c1:22:52:
4a:cb:81:f4:48:8e:b6:65:79:00:7f:86:8c:a8:42:
1a:84:ec:8f:47:23:20:1f:dc:50:95:b8:15:e9:92:
8d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:0E:C9:00:90:66:3D:19:B2:87:9F:AF:8D:06:76:CB:72:C6:70:3A
X509v3 Authority Key Identifier:
keyid:98:89:D7:F8:37:58:7C:2F:23:32:BB:09:B3:E1:AD:99:93:D7:97:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mInX-DdYfC8jMrsJs-GtmZPXlyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/2a69bc-05a0-46f0-b423-222b03114193/1/mInX-DdYfC8jMrsJs-GtmZPXlyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/2a69bc-05a0-46f0-b423-222b03114193/1/mInX-DdYfC8jMrsJs-GtmZPXlyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:c7:e2:fd:96:61:42:ca:e3:13:1e:f4:d8:6a:bc:bb:b5:32:
28:f4:84:5a:6e:0d:11:86:b8:81:d6:95:19:46:a9:95:2b:ae:
07:a4:e7:5b:78:04:6b:54:a9:03:aa:6c:a1:e0:35:a6:b2:ea:
d8:8b:39:3e:26:dc:2c:aa:08:41:c5:48:66:3c:9e:e6:9a:8e:
55:3d:f9:35:61:db:46:17:18:a6:82:34:c1:46:37:b9:27:38:
4c:f3:92:8f:ca:e8:b5:c7:81:97:c1:ea:ec:6d:9d:d4:10:cd:
2c:40:38:7a:29:44:aa:92:35:b1:c2:98:d3:22:72:9c:db:c7:
a2:fb:79:02:f8:1d:9b:93:fc:ac:7a:06:2d:1b:79:71:c9:6c:
47:ba:ba:16:06:72:ea:54:7b:3f:4f:a8:aa:55:c7:f8:3e:8d:
bc:6e:05:4d:0f:95:73:77:d2:6d:0a:a6:42:d4:4c:fe:4b:3c:
bf:6d:02:b4:4c:b9:78:48:18:c6:cb:dc:0f:9b:79:9c:ab:0d:
05:c4:36:13:0c:5b:07:49:fe:97:1c:6d:99:94:cc:f9:29:fd:
90:19:28:fb:c3:a7:83:56:b4:96:a9:fa:01:e0:29:40:b5:e1:
87:f5:6e:11:c6:c1:43:ba:8c:bc:9d:85:f9:37:2f:ad:37:4b:
ec:02:7a:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:23:27 2025 by rpki-client