Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/85612a-de33-434b-8471-1801b544b9fe/1/m0FaAwWfspWkuWyc5erbWP6Y-oY.mft
File: m0FaAwWfspWkuWyc5erbWP6Y-oY.mft (raw, json)
Hash identifier: R9gvS6z2BUv69JSTyOeZKivaVQEcjSXvcEmK+4WzYng=
Subject key identifier: C6:E9:F9:14:5B:D7:EB:B1:61:AF:EF:F9:4E:F5:C0:1D:48:D8:9F:FB
Authority key identifier: 9B:41:5A:03:05:9F:B2:95:A4:B9:6C:9C:E5:EA:DB:58:FE:98:FA:86
Certificate issuer: /CN=9b415a03059fb295a4b96c9ce5eadb58fe98fa86
Certificate serial: 0194BC3BC5C42484F338F316CA5A30A320DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m0FaAwWfspWkuWyc5erbWP6Y-oY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/85612a-de33-434b-8471-1801b544b9fe/1/m0FaAwWfspWkuWyc5erbWP6Y-oY.mft
Manifest number: 066D
Signing time: Fri 31 Jan 2025 12:00:21 +0000
Manifest this update: Fri 31 Jan 2025 12:00:21 +0000
Manifest next update: Sat 01 Feb 2025 12:00:21 +0000
Files and hashes: 1: 00e-JENKJtNxBi-As1sYUq5EX18.roa (hash: YsSrS2JJTX4eWuRZQoJnhVIIQfCJDpSvv/nCINRxU3I=)
2: m0FaAwWfspWkuWyc5erbWP6Y-oY.crl (hash: hD64QuwdEZxXWeQutZA8amzLWoB3vsg16iUqPxbDNzs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:c5:c4:24:84:f3:38:f3:16:ca:5a:30:a3:20:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b415a03059fb295a4b96c9ce5eadb58fe98fa86
Validity
Not Before: Jan 31 12:00:21 2025 GMT
Not After : Feb 1 12:00:21 2025 GMT
Subject: CN=c6e9f9145bd7ebb161afeff94ef5c01d48d89ffb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:4f:c8:2b:28:b5:b2:38:cc:81:72:03:9f:24:
89:28:91:31:9e:6d:c2:7b:37:95:38:61:17:37:03:
45:8e:5a:24:95:db:46:2c:53:a1:3f:75:25:e8:9d:
65:41:d1:0d:fc:20:0b:60:5e:27:bd:45:b4:9b:c3:
f7:6e:34:9d:58:30:00:bc:ba:7d:c1:d5:06:42:ea:
bb:81:aa:cd:75:2e:ec:c4:be:7c:28:96:3e:9c:d2:
1c:34:a4:14:97:11:43:6b:53:94:d0:e4:5a:9e:72:
64:48:d7:93:e1:5e:17:b5:df:68:4f:88:9d:32:ee:
fb:3c:57:c9:3f:5c:ee:88:eb:d3:76:bd:51:43:6b:
ef:ee:3f:80:9b:f0:f9:f8:b8:9e:93:db:6d:0b:7c:
5d:92:84:ed:cd:0b:43:72:70:20:5e:ed:8e:ba:f4:
08:d6:c8:36:f4:26:e4:01:b9:59:9c:83:40:53:5b:
48:97:7c:45:4e:aa:3c:36:d5:13:34:69:7e:28:0c:
0d:87:68:be:0e:3f:9f:05:a9:37:93:a6:1c:40:5c:
03:02:be:16:9e:2c:3b:0f:de:ca:f5:ab:8f:c2:00:
1c:7d:71:a5:7c:ba:cf:68:8a:32:83:3a:1c:c8:56:
65:06:1e:0d:d3:e7:0d:2d:2f:ef:2e:bc:10:a9:f3:
b7:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:E9:F9:14:5B:D7:EB:B1:61:AF:EF:F9:4E:F5:C0:1D:48:D8:9F:FB
X509v3 Authority Key Identifier:
keyid:9B:41:5A:03:05:9F:B2:95:A4:B9:6C:9C:E5:EA:DB:58:FE:98:FA:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m0FaAwWfspWkuWyc5erbWP6Y-oY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/85612a-de33-434b-8471-1801b544b9fe/1/m0FaAwWfspWkuWyc5erbWP6Y-oY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/85612a-de33-434b-8471-1801b544b9fe/1/m0FaAwWfspWkuWyc5erbWP6Y-oY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:cf:d6:e3:28:5f:db:8b:6f:a1:ce:40:ed:10:c1:49:88:28:
27:17:86:07:08:01:7e:28:7d:31:f3:1f:66:bb:c8:e6:2e:a7:
75:30:97:52:e0:5b:43:21:92:9d:49:7d:fe:2b:98:00:7b:ca:
f1:61:b9:9a:f8:a7:f1:69:52:47:2c:19:25:49:05:2b:34:d3:
e3:d6:4a:38:e3:52:58:82:d7:09:ee:5d:7a:b0:c5:a8:91:6c:
9e:ce:e8:51:74:64:d4:5d:ee:5b:c2:92:26:90:50:06:3d:98:
03:2b:cf:43:62:7a:95:49:98:8a:3b:02:2e:51:b3:a0:07:fe:
82:77:eb:c6:e3:7f:d7:d6:83:be:e3:17:6a:b2:ee:a2:60:67:
42:6b:5b:99:90:57:6a:44:8e:0f:74:12:d5:90:b4:78:c8:7a:
74:fa:0b:52:47:97:54:7f:a5:92:8e:45:5c:67:64:99:da:6c:
8d:a9:1f:6d:4f:5d:92:16:e2:0c:8c:6b:d4:1a:85:44:09:c7:
37:19:6e:c5:9b:73:f2:53:80:99:60:f2:c6:45:00:dc:8a:d4:
16:ec:9a:d5:05:28:76:1b:23:b3:80:6e:80:76:19:eb:8e:b6:
65:69:bb:d6:02:64:8f:d7:a2:96:46:23:f3:c0:16:18:0a:f5:
f2:e4:80:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:33 2025 by rpki-client