Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/d261c1-d7f3-4fe8-abc6-1094391669ef/1/mnF-0dxIgETl4qsAdUM1WM_ejIU.mft
File: mnF-0dxIgETl4qsAdUM1WM_ejIU.mft (raw, json)
Hash identifier: pMEKnqG9qJCPwNROvqvM3ltpBWHWtQJu2+Once5lZb8=
Subject key identifier: BA:53:07:1F:0E:AB:11:4D:37:BA:F9:F4:32:68:5B:F3:7E:17:AF:70
Authority key identifier: 9A:71:7E:D1:DC:48:80:44:E5:E2:AB:00:75:43:35:58:CF:DE:8C:85
Certificate issuer: /CN=9a717ed1dc488044e5e2ab0075433558cfde8c85
Certificate serial: 0194BC3BEF3FC32945DE6E15A84C22F9E84C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mnF-0dxIgETl4qsAdUM1WM_ejIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/d261c1-d7f3-4fe8-abc6-1094391669ef/1/mnF-0dxIgETl4qsAdUM1WM_ejIU.mft
Manifest number: 0317
Signing time: Fri 31 Jan 2025 12:00:31 +0000
Manifest this update: Fri 31 Jan 2025 12:00:31 +0000
Manifest next update: Sat 01 Feb 2025 12:00:31 +0000
Files and hashes: 1: 1-I5euRLEKsr7FF-4VskQLdu5Wm0.roa (hash: 4AXnB9gGffBa+5UGJwTlfxl3dTLBtwfWaDwofBbf+WY=)
2: MtoIhFzzjtMtI4g5kxOun27y3IM.roa (hash: DlZC6F8VIFuzmjWhSIX/LygNaAgpAHPicElZhEshqgM=)
3: mnF-0dxIgETl4qsAdUM1WM_ejIU.crl (hash: mmlqBeE8PhKM7FMkj8kKAh4a+IevcHf6BdUBwxdzV6E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:ef:3f:c3:29:45:de:6e:15:a8:4c:22:f9:e8:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a717ed1dc488044e5e2ab0075433558cfde8c85
Validity
Not Before: Jan 31 12:00:31 2025 GMT
Not After : Feb 1 12:00:31 2025 GMT
Subject: CN=ba53071f0eab114d37baf9f432685bf37e17af70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:e2:52:ab:eb:c5:fb:3d:d4:a9:e6:cf:74:bd:
54:68:5a:fa:97:e6:44:ad:26:72:6f:1e:cf:df:42:
9f:06:a4:0c:30:b1:5c:d9:e7:78:c3:9b:b9:09:71:
0c:95:e3:f5:8e:85:d8:10:f2:ef:c4:b6:12:1e:75:
de:90:8b:62:77:b5:9e:18:f6:ce:79:69:41:5e:c9:
34:04:67:45:06:73:c6:23:ea:b4:8f:e3:b3:3e:14:
ca:1c:5b:0e:96:8f:40:88:55:16:c1:f1:08:9d:90:
e6:07:c9:cc:5e:44:dc:79:22:f0:14:d2:7d:48:6b:
51:20:0e:f5:a3:c9:89:41:cc:99:b8:05:14:d3:33:
4b:ec:b5:09:39:63:bd:d8:1c:1e:6c:45:05:37:84:
80:4c:a3:07:a3:75:ff:ca:13:ef:1e:84:b4:30:8e:
3d:1c:51:91:d7:51:75:d3:5f:30:a6:7f:6f:4c:eb:
8b:70:3f:a3:4c:ed:b8:77:60:4f:dd:10:06:47:e9:
70:a5:d0:90:1b:2d:57:9b:08:b5:a1:c1:0f:4e:81:
e4:03:ea:a5:ab:7c:fd:bc:27:bb:f7:8a:82:09:04:
36:fd:eb:aa:21:93:78:67:71:17:57:12:6f:e9:8a:
3b:16:31:20:a9:f7:41:52:96:6b:9e:d7:3d:8c:3c:
e9:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:53:07:1F:0E:AB:11:4D:37:BA:F9:F4:32:68:5B:F3:7E:17:AF:70
X509v3 Authority Key Identifier:
keyid:9A:71:7E:D1:DC:48:80:44:E5:E2:AB:00:75:43:35:58:CF:DE:8C:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mnF-0dxIgETl4qsAdUM1WM_ejIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d261c1-d7f3-4fe8-abc6-1094391669ef/1/mnF-0dxIgETl4qsAdUM1WM_ejIU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d261c1-d7f3-4fe8-abc6-1094391669ef/1/mnF-0dxIgETl4qsAdUM1WM_ejIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:8c:94:61:d1:0a:17:93:9c:6b:cc:c2:a7:3a:fb:2c:f5:7b:
6b:66:ac:88:8b:92:4e:cd:59:8f:54:e3:5b:6b:4b:fe:eb:45:
88:17:bd:44:f0:a6:fd:9c:dc:11:66:0c:34:a2:20:95:a1:64:
a5:eb:71:b6:2e:94:e2:97:1b:a3:9f:6c:31:27:a6:91:28:a2:
46:0e:4f:66:21:c1:8d:7d:59:f7:75:c7:b3:cb:85:7b:07:d5:
28:18:92:e0:7a:66:6b:5c:8f:08:4c:06:ad:86:77:d8:7a:66:
3d:64:1b:25:05:ae:11:82:f5:8c:f6:e1:b1:58:a0:3f:59:4c:
95:9d:b2:22:8d:cc:0e:6c:3f:64:f2:4c:ff:74:34:63:61:84:
58:86:d4:80:b8:72:bc:bc:26:a9:ac:af:75:3d:35:00:0e:14:
33:39:a9:44:f7:9f:6f:c5:c5:dd:8f:5f:89:af:b4:b7:72:88:
01:52:88:8b:e8:a0:2d:2c:fa:c0:26:66:06:36:76:12:92:ef:
24:96:25:9e:ac:d8:a6:1f:c1:66:b9:39:54:fb:9b:5a:c5:ba:
6c:a2:fc:3c:5f:fe:bc:b1:c1:f5:9d:e5:4e:8c:49:8a:38:ce:
53:0b:cb:11:f2:e4:77:75:1e:f8:95:ae:b7:a4:a2:56:d0:91:
1f:d9:1e:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:52:21 2025 by rpki-client