Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/ccb162-949b-4837-b580-cf51d8e4c14b/1/meh9VkzLhhHhQKeyvyYMSiIrWdY.mft
File: meh9VkzLhhHhQKeyvyYMSiIrWdY.mft (raw, json)
Hash identifier: 189z+PAeK/00ySU+VzPtkuy9CoYptFyCS5BRRxZtkas=
Subject key identifier: 22:7E:A5:5C:61:2D:71:AA:BA:BC:D8:9B:AE:B7:65:83:5F:E6:FB:24
Authority key identifier: 99:E8:7D:56:4C:CB:86:11:E1:40:A7:B2:BF:26:0C:4A:22:2B:59:D6
Certificate issuer: /CN=99e87d564ccb8611e140a7b2bf260c4a222b59d6
Certificate serial: 0194BD85A69A38ED6B7F81B507E28D9D1207
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/meh9VkzLhhHhQKeyvyYMSiIrWdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/ccb162-949b-4837-b580-cf51d8e4c14b/1/meh9VkzLhhHhQKeyvyYMSiIrWdY.mft
Manifest number: 0448
Signing time: Fri 31 Jan 2025 18:00:40 +0000
Manifest this update: Fri 31 Jan 2025 18:00:40 +0000
Manifest next update: Sat 01 Feb 2025 18:00:40 +0000
Files and hashes: 1: meh9VkzLhhHhQKeyvyYMSiIrWdY.crl (hash: 3tKfsaxT7jZgFHY04BTvcOh7ZkpBV987N6yn49OqBcA=)
2: nFnXzGX9x8WjQH0WTEkYEV58ntE.roa (hash: qp697Wbqn7eonfV2epdNmLzMoHnyKSRFdJF1JaKpdqs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:a6:9a:38:ed:6b:7f:81:b5:07:e2:8d:9d:12:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99e87d564ccb8611e140a7b2bf260c4a222b59d6
Validity
Not Before: Jan 31 18:00:40 2025 GMT
Not After : Feb 1 18:00:40 2025 GMT
Subject: CN=227ea55c612d71aababcd89baeb765835fe6fb24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:44:2c:15:a2:d5:15:c5:ba:54:85:08:6a:86:
10:fb:6f:c0:a1:36:c2:e3:43:1b:c4:44:37:a2:72:
13:85:22:59:bd:f3:c8:4a:1c:96:ca:e8:8a:6a:b9:
ba:01:98:90:f9:c2:4c:5b:22:55:b8:ee:d8:68:f5:
60:be:e2:09:39:f6:c3:81:b2:e2:6d:3f:ce:a5:d2:
7f:94:6a:fb:99:5e:1b:d7:4f:1a:54:0b:f3:23:af:
c5:2f:53:0b:ab:2f:08:8c:b9:32:92:fb:9a:95:0c:
96:2f:22:6e:7f:c5:e2:e5:36:90:ad:8a:5b:0a:58:
d6:47:a8:a3:46:e7:cc:bc:ce:2a:34:38:c7:47:a4:
d9:3b:3e:50:98:a6:48:99:6f:0d:90:cc:b0:74:07:
45:bc:e7:d3:c1:a4:6a:43:bb:d8:c8:48:44:0a:92:
d6:10:fb:98:1b:17:46:4c:da:64:1f:dc:bf:13:2d:
51:c3:cc:ca:3d:89:45:a5:66:52:ca:a1:9f:42:ba:
77:29:a1:49:25:6a:2d:db:49:8a:8c:72:a7:2f:92:
c3:8c:f9:e1:bc:a5:81:d0:35:9b:76:be:01:a2:2f:
1f:0e:cb:86:4b:e4:80:13:e5:e9:b2:bc:ff:44:1e:
21:a7:c4:74:72:63:f4:74:5a:64:2b:4d:5f:a7:1c:
8d:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:7E:A5:5C:61:2D:71:AA:BA:BC:D8:9B:AE:B7:65:83:5F:E6:FB:24
X509v3 Authority Key Identifier:
keyid:99:E8:7D:56:4C:CB:86:11:E1:40:A7:B2:BF:26:0C:4A:22:2B:59:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/meh9VkzLhhHhQKeyvyYMSiIrWdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ccb162-949b-4837-b580-cf51d8e4c14b/1/meh9VkzLhhHhQKeyvyYMSiIrWdY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ccb162-949b-4837-b580-cf51d8e4c14b/1/meh9VkzLhhHhQKeyvyYMSiIrWdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:ee:95:7e:ff:d5:07:42:ca:83:10:10:bb:ff:f3:13:a5:0c:
61:b1:7f:0b:02:02:ba:ae:6e:f5:91:3d:58:d1:26:e4:51:06:
1d:8a:a9:ea:5e:83:91:2a:e0:9d:d8:19:82:7b:31:1c:90:10:
26:cf:a2:21:7f:fa:c8:37:6e:f0:f4:1a:73:43:4e:c4:47:0b:
8e:87:18:17:e6:c5:eb:10:20:88:46:f9:40:f9:20:5e:51:66:
a1:64:a6:4a:9f:12:97:1c:7e:8a:b8:38:fa:c8:8d:0a:81:c9:
cd:e2:e1:cd:b1:77:d8:cb:54:bb:71:4a:20:65:3c:e8:94:0c:
81:7d:fb:06:ff:81:7c:96:42:3c:b6:66:e3:1f:bd:b0:26:2c:
8e:35:8e:3b:b9:b5:86:4a:12:85:12:3e:90:39:40:28:ff:6e:
4e:e4:43:41:b1:d7:50:ea:da:14:1a:c9:7a:9c:c4:f6:62:b1:
ad:49:20:f4:4f:36:e5:9e:7a:f6:01:f9:e2:1d:56:61:10:5c:
1c:a4:8f:b6:34:49:e0:5d:72:75:25:c1:e8:d4:08:96:1a:cf:
fa:d5:51:95:69:90:4a:d6:d5:43:d4:27:01:5d:d2:b3:a9:77:
e3:88:10:e7:71:ae:8b:4f:02:e6:9a:91:68:f5:32:db:cb:1a:
07:8b:57:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:16:33 2025 by rpki-client