Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/0616e0-9cbb-430a-8244-edcc52e17a94/1/mmCuS92dbvum6hHGBzfLoC3PHmA.mft
File: mmCuS92dbvum6hHGBzfLoC3PHmA.mft (raw, json)
Hash identifier: 5IJoqYTD9r7juVmLtgitA51BCjd78mecYPNyYmJQqc4=
Subject key identifier: 30:54:D1:08:E2:33:73:3C:AA:3F:24:A2:2D:F2:4B:EF:82:AB:1E:13
Authority key identifier: 9A:60:AE:4B:DD:9D:6E:FB:A6:EA:11:C6:07:37:CB:A0:2D:CF:1E:60
Certificate issuer: /CN=9a60ae4bdd9d6efba6ea11c60737cba02dcf1e60
Certificate serial: 0194BC050340AFB516B83534B4BAD88FE075
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mmCuS92dbvum6hHGBzfLoC3PHmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/0616e0-9cbb-430a-8244-edcc52e17a94/1/mmCuS92dbvum6hHGBzfLoC3PHmA.mft
Manifest number: 06EE
Signing time: Fri 31 Jan 2025 11:00:32 +0000
Manifest this update: Fri 31 Jan 2025 11:00:32 +0000
Manifest next update: Sat 01 Feb 2025 11:00:32 +0000
Files and hashes: 1: mmCuS92dbvum6hHGBzfLoC3PHmA.crl (hash: pLoL+Me7C4KVA6JiusiXR2LPwaHDo1EAnQL060b4tNU=)
2: u1q93eogqq8ewSFI28D24ujX7vQ.roa (hash: pvm3GrE3J/VbhZBCkLiKY82QF1T8mhNfTTlLlGr7usY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:03:40:af:b5:16:b8:35:34:b4:ba:d8:8f:e0:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a60ae4bdd9d6efba6ea11c60737cba02dcf1e60
Validity
Not Before: Jan 31 11:00:32 2025 GMT
Not After : Feb 1 11:00:32 2025 GMT
Subject: CN=3054d108e233733caa3f24a22df24bef82ab1e13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:4f:ae:2e:d7:18:16:4a:f5:e8:2e:27:c1:50:
ac:41:fd:74:c3:97:ed:d7:3b:28:f5:b1:77:33:5f:
68:48:0e:6e:e0:50:b2:d5:9a:9c:88:c0:4c:08:49:
70:19:71:47:98:e2:08:8b:fa:15:39:f0:7b:9c:7a:
b4:2f:34:ef:fa:f4:c5:25:af:fe:af:f9:10:df:83:
6b:b7:d0:62:07:31:5b:6a:dc:66:db:24:1a:4c:7c:
d2:d1:4f:f3:0e:84:d8:03:89:8f:ff:5a:84:fd:f3:
5f:08:69:46:fb:ed:c9:bf:db:0d:7a:58:9b:62:92:
fe:de:46:1d:14:17:00:1b:24:3b:b2:d4:ab:2a:1d:
59:1a:d4:4a:80:4c:82:cb:54:ce:43:f7:05:d9:4e:
10:65:33:9c:81:11:4c:05:9c:1b:58:f4:c4:e5:15:
f5:8f:4f:44:25:92:b5:f3:40:bc:18:ac:5e:b1:b5:
c6:63:43:82:22:06:ef:49:59:92:15:9e:7d:d6:da:
a1:63:25:8f:9e:87:2a:de:17:1c:7a:48:7e:62:fc:
cd:ba:3f:b1:22:7e:bf:bc:c9:f9:b2:5e:41:b0:90:
5c:a2:6c:a3:8f:99:c6:e5:bf:71:41:de:3f:d2:01:
33:45:e8:8b:40:b2:23:2e:4c:89:06:d2:8f:48:29:
0e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:54:D1:08:E2:33:73:3C:AA:3F:24:A2:2D:F2:4B:EF:82:AB:1E:13
X509v3 Authority Key Identifier:
keyid:9A:60:AE:4B:DD:9D:6E:FB:A6:EA:11:C6:07:37:CB:A0:2D:CF:1E:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mmCuS92dbvum6hHGBzfLoC3PHmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0616e0-9cbb-430a-8244-edcc52e17a94/1/mmCuS92dbvum6hHGBzfLoC3PHmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0616e0-9cbb-430a-8244-edcc52e17a94/1/mmCuS92dbvum6hHGBzfLoC3PHmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:ff:70:73:f9:0e:08:24:c5:49:84:a3:5f:86:5c:0c:eb:85:
ab:91:ab:9b:36:c6:95:a8:8c:2e:ba:8a:95:ab:78:f6:49:29:
76:fb:30:51:a5:31:c2:16:8a:4e:5e:3e:1d:c8:22:fc:83:c9:
8d:6b:40:ca:9d:f5:b7:38:7d:cf:8f:54:6e:4d:78:cc:54:09:
ce:52:23:a2:2d:e4:e7:e2:fc:ca:7a:0e:56:1a:c8:2c:d1:4a:
aa:61:18:17:fd:1e:0c:77:d9:35:6f:78:eb:92:18:c5:74:12:
d3:5a:bc:7d:12:a2:13:df:ed:5d:1a:49:79:17:a4:51:6c:cd:
6a:5f:56:61:03:94:92:f0:45:9e:d6:8d:46:df:09:2b:a9:cd:
60:84:e4:3c:19:cc:03:a7:8e:fd:a2:57:4c:25:23:63:e2:68:
ef:37:43:92:73:9f:62:7b:d7:df:0d:42:db:27:9c:df:ea:da:
7f:14:1c:f5:2e:77:5a:6a:30:52:a5:98:39:7f:a3:76:5c:1d:
94:89:b3:85:1d:8b:aa:58:2e:1d:35:ec:5c:83:46:e0:af:06:
9a:b3:2e:b4:d7:ae:eb:e0:1e:0a:9c:53:af:42:de:16:68:68:
c9:39:ad:b6:b3:3c:54:1c:dc:df:61:67:94:91:ae:06:af:3b:
be:9c:ae:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 07:08:27 2025 by rpki-client