Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/264b78-b25d-47a3-ac55-165c96ff9529/1/mRVVjGiX_qIkhVz2A4GFc1RwhBE.mft
File: mRVVjGiX_qIkhVz2A4GFc1RwhBE.mft (raw, json)
Hash identifier: JYSTWUAGWi2vDgU2gHLeKkNghC01xRujekkbjakw0E8=
Subject key identifier: F3:8D:01:C2:63:33:5A:DD:39:92:3D:ED:16:0C:34:E4:61:26:D7:5F
Authority key identifier: 99:15:55:8C:68:97:FE:A2:24:85:5C:F6:03:81:85:73:54:70:84:11
Certificate issuer: /CN=9915558c6897fea224855cf60381857354708411
Certificate serial: 0194BCA96A42C3FBECA2A9691F251C3E03E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mRVVjGiX_qIkhVz2A4GFc1RwhBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/264b78-b25d-47a3-ac55-165c96ff9529/1/mRVVjGiX_qIkhVz2A4GFc1RwhBE.mft
Manifest number: 0A95
Signing time: Fri 31 Jan 2025 14:00:06 +0000
Manifest this update: Fri 31 Jan 2025 14:00:06 +0000
Manifest next update: Sat 01 Feb 2025 14:00:06 +0000
Files and hashes: 1: mRVVjGiX_qIkhVz2A4GFc1RwhBE.crl (hash: mAfGTZzUPobFdfES/RibMkSzHlkHAhCZYKr9p+M/LN0=)
2: p_ZOqooaB4FZLqO_coSsHFoaxrI.roa (hash: kDng5P96ioc5fd3WKreLwEWmLw7z/u+Qt5PBtL9Aseg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:6a:42:c3:fb:ec:a2:a9:69:1f:25:1c:3e:03:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9915558c6897fea224855cf60381857354708411
Validity
Not Before: Jan 31 14:00:06 2025 GMT
Not After : Feb 1 14:00:06 2025 GMT
Subject: CN=f38d01c263335add39923ded160c34e46126d75f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:70:28:65:d5:c3:1b:93:b6:a6:d4:87:51:36:
37:f7:51:db:fb:7f:ba:46:90:d6:b5:ac:8c:2b:d9:
32:f8:78:e7:00:a5:66:07:73:9c:23:5f:4c:3a:3c:
09:90:fb:d6:f4:65:e9:68:bc:7f:52:3b:37:d1:3d:
3b:eb:e0:2f:25:54:f3:31:d9:a9:d0:85:84:a2:eb:
68:6e:f2:32:be:ff:5d:2a:57:ef:39:1e:8a:fb:ae:
31:bb:2b:c5:1e:b3:e7:52:0d:15:10:93:6e:c6:0f:
96:39:e8:0f:8b:c7:14:1d:0f:a2:cd:c9:9a:79:43:
83:d1:63:b5:e2:2b:bd:b6:65:90:13:0c:e1:e7:10:
07:37:45:12:a3:a2:3f:20:57:0c:f4:7a:0f:b4:6d:
c7:d6:36:5c:b5:3c:1e:df:f8:9e:73:0d:d3:61:6e:
64:fe:33:43:e6:74:bf:ed:a0:b8:e0:7d:f7:1d:79:
b9:f6:4e:38:7a:be:ba:0b:03:25:24:9b:38:f5:fb:
7c:b8:e0:ee:b5:d9:75:c9:c8:3b:85:f9:9f:11:e7:
29:51:19:b7:8e:b1:ca:dd:d5:50:45:32:13:2b:b9:
71:78:00:3c:0d:92:20:36:20:db:bb:5b:ba:28:ed:
26:cf:2a:fb:ae:4c:b5:1e:5d:3d:d4:2f:5e:a4:ab:
a9:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:8D:01:C2:63:33:5A:DD:39:92:3D:ED:16:0C:34:E4:61:26:D7:5F
X509v3 Authority Key Identifier:
keyid:99:15:55:8C:68:97:FE:A2:24:85:5C:F6:03:81:85:73:54:70:84:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mRVVjGiX_qIkhVz2A4GFc1RwhBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/264b78-b25d-47a3-ac55-165c96ff9529/1/mRVVjGiX_qIkhVz2A4GFc1RwhBE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/264b78-b25d-47a3-ac55-165c96ff9529/1/mRVVjGiX_qIkhVz2A4GFc1RwhBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:2e:e2:42:4a:bc:c9:d5:58:9d:a0:ef:f5:30:90:6a:22:4a:
d9:80:79:e9:31:3f:e2:1c:b8:11:7b:e4:65:79:06:72:8c:c9:
1d:7a:00:71:24:66:03:87:13:b0:0f:eb:29:c1:18:b2:80:80:
26:0e:d0:61:09:ae:ff:18:56:42:a7:4c:e6:b4:eb:67:93:f0:
c7:21:c4:5e:b5:f1:a5:01:15:12:93:d0:bd:99:2a:ef:60:a8:
43:aa:86:df:bc:b4:33:f5:87:84:01:1d:f8:de:37:d7:85:ca:
96:1b:22:bf:12:b6:07:e6:7b:3d:d8:67:63:3e:d1:ae:31:07:
58:7f:71:51:34:c4:8f:5b:ad:0f:79:73:98:b0:91:0f:96:4a:
d9:82:9e:f4:ef:50:a6:b3:d2:76:e0:e5:06:c1:d0:66:99:ed:
98:15:ec:01:44:ea:ae:84:bf:e5:98:0e:9b:68:6d:4f:46:8c:
28:f0:4b:1c:81:00:67:4c:1a:7f:a6:b1:b3:9e:48:f0:06:a7:
7e:96:da:ab:4b:bd:59:75:9c:49:56:97:6d:ce:b2:2c:a1:d5:
77:71:4f:b0:46:08:6f:ee:69:17:30:79:1b:4e:02:15:c7:31:
9d:e9:90:ce:09:5d:0f:71:a2:7c:9f:2d:d4:fe:7f:51:31:f6:
40:7c:28:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:42 2025 by rpki-client