Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/bdc9d1-e59e-4d1e-ba85-190afa2c1361/1/mHUtGGZ9v_hCL5fh44kOmTgdCdQ.mft
File: mHUtGGZ9v_hCL5fh44kOmTgdCdQ.mft (raw, json)
Hash identifier: +QoPn7vz34Fzj9XeufvsDdpu7XGF88lpb+cLAbu59y4=
Subject key identifier: AD:8F:3D:2C:9E:D3:28:CA:AD:5D:4E:14:C0:D7:18:DE:F8:89:2F:20
Authority key identifier: 98:75:2D:18:66:7D:BF:F8:42:2F:97:E1:E3:89:0E:99:38:1D:09:D4
Certificate issuer: /CN=98752d18667dbff8422f97e1e3890e99381d09d4
Certificate serial: 0194BCAA4603F4BEFD35B667BB0F49A125B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mHUtGGZ9v_hCL5fh44kOmTgdCdQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/bdc9d1-e59e-4d1e-ba85-190afa2c1361/1/mHUtGGZ9v_hCL5fh44kOmTgdCdQ.mft
Manifest number: 04C0
Signing time: Fri 31 Jan 2025 14:01:03 +0000
Manifest this update: Fri 31 Jan 2025 14:01:03 +0000
Manifest next update: Sat 01 Feb 2025 14:01:03 +0000
Files and hashes: 1: eEuL986vzdl5Ue42JMTwEjrhHL8.roa (hash: sD06A9ioFyTX7xWQwS5R0iqBwd3oxcUKyjznK7FeoF8=)
2: mHUtGGZ9v_hCL5fh44kOmTgdCdQ.crl (hash: 6AcYe7SC7tT20BsKt5eDfFdT7w4u57XusNFfE6zJXuw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:46:03:f4:be:fd:35:b6:67:bb:0f:49:a1:25:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98752d18667dbff8422f97e1e3890e99381d09d4
Validity
Not Before: Jan 31 14:01:03 2025 GMT
Not After : Feb 1 14:01:03 2025 GMT
Subject: CN=ad8f3d2c9ed328caad5d4e14c0d718def8892f20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:67:1b:d0:99:5e:3c:62:90:50:ef:eb:f4:0a:
d3:2d:9a:98:70:0c:47:18:c9:7f:c8:9e:0b:5c:d4:
41:78:ab:ac:1a:c7:19:9f:a1:28:56:80:9b:4c:a5:
03:95:c5:55:9f:3b:02:89:ee:07:d1:07:81:41:83:
86:42:e0:49:9f:97:cf:0a:0b:d2:bf:42:7a:2f:3c:
a3:b7:64:c8:14:b2:33:fb:f9:e8:04:8a:24:c6:ec:
ae:69:31:7a:59:a1:72:e6:1b:a1:66:f3:58:c9:66:
5b:cd:97:72:df:08:f4:b5:e6:8c:60:20:ab:80:1e:
21:72:ab:2e:bd:a2:35:ab:6d:4e:73:b2:37:9b:5c:
66:4d:00:69:ce:12:0e:14:19:3e:fe:6f:89:7f:16:
69:f6:27:c5:fa:64:48:74:13:b4:6b:5d:93:3b:04:
33:bd:2e:45:13:44:e8:62:49:b2:57:32:cb:06:ab:
3c:32:20:f5:2f:4d:1a:d6:7a:2b:07:a1:3c:36:2c:
01:6b:5e:27:9c:aa:5b:cf:d0:c1:03:76:3e:6f:50:
58:3d:73:10:f7:c2:84:9f:12:80:23:2e:66:23:37:
6e:f3:f8:ef:02:c5:ea:f1:27:0b:f8:1a:70:77:2a:
1f:92:74:8a:e5:35:8c:21:17:13:fd:f8:87:39:31:
d4:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:8F:3D:2C:9E:D3:28:CA:AD:5D:4E:14:C0:D7:18:DE:F8:89:2F:20
X509v3 Authority Key Identifier:
keyid:98:75:2D:18:66:7D:BF:F8:42:2F:97:E1:E3:89:0E:99:38:1D:09:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mHUtGGZ9v_hCL5fh44kOmTgdCdQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/bdc9d1-e59e-4d1e-ba85-190afa2c1361/1/mHUtGGZ9v_hCL5fh44kOmTgdCdQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/bdc9d1-e59e-4d1e-ba85-190afa2c1361/1/mHUtGGZ9v_hCL5fh44kOmTgdCdQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:79:77:26:07:42:39:1b:cb:b5:6f:88:dc:8d:52:00:62:83:
c6:af:1d:df:63:75:c4:20:8d:ba:bb:4a:a7:56:df:e5:ab:72:
f7:88:33:d9:d3:9f:19:02:e4:73:b1:d3:b0:03:bb:f0:78:dc:
40:75:6a:54:0d:66:e3:1c:e5:3e:2b:ab:fc:09:08:1c:94:79:
ec:89:2c:57:53:63:57:c1:5c:af:52:22:f3:5e:aa:60:84:50:
34:a6:ef:c2:0d:76:d1:8e:36:24:7b:fa:d6:6b:d8:15:00:f4:
c9:a7:ba:d5:00:71:5a:40:ee:6f:90:37:b9:74:42:db:84:9e:
25:0c:72:49:f0:fc:08:0e:a5:6d:8b:dd:f5:af:bb:c0:75:0d:
a6:20:49:d9:49:86:28:f0:86:54:9b:b6:d0:60:9f:3f:1f:65:
37:01:0f:3d:02:f4:94:5c:d9:25:d6:b8:a0:af:5f:1d:05:f6:
7f:14:bf:8e:37:0e:24:13:9a:7a:0a:7b:58:21:25:18:b9:a0:
69:19:2e:a4:5e:e4:56:c9:e4:6c:b2:83:7f:4a:6f:13:5b:0e:
38:c8:77:c8:73:d4:8e:cc:25:7a:67:bc:45:84:b5:7d:0a:97:
13:14:01:c2:a2:34:b4:3d:5a:68:41:a3:bc:b1:91:dd:40:66:
75:3a:85:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:08 2025 by rpki-client