Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/661dad-00c9-4f17-94d8-2bbd01f9e500/1/mm4UdEgoljS5hojuWlr0R9Qsuwc.mft
File: mm4UdEgoljS5hojuWlr0R9Qsuwc.mft (raw, json)
Hash identifier: f2PJnF7JUyHczzActc60/lP7SCTVbVD81Bi8BRT/hUA=
Subject key identifier: E5:55:3A:10:94:CC:C2:A7:54:F4:11:E9:AF:8B:B3:A1:19:09:0C:9F
Authority key identifier: 9A:6E:14:74:48:28:96:34:B9:86:88:EE:5A:5A:F4:47:D4:2C:BB:07
Certificate issuer: /CN=9a6e147448289634b98688ee5a5af447d42cbb07
Certificate serial: 0194BCE0CC9CEC2BC5E033432BBA069E6205
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mm4UdEgoljS5hojuWlr0R9Qsuwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/661dad-00c9-4f17-94d8-2bbd01f9e500/1/mm4UdEgoljS5hojuWlr0R9Qsuwc.mft
Manifest number: 0FAC
Signing time: Fri 31 Jan 2025 15:00:36 +0000
Manifest this update: Fri 31 Jan 2025 15:00:36 +0000
Manifest next update: Sat 01 Feb 2025 15:00:36 +0000
Files and hashes: 1: ONDqQfjr9_AJ9RydMAScKqXbPqA.roa (hash: tzIBuHIsI+gH6B58aDq25YyBMDZoGOkfi5bBeLvI+/k=)
2: mm4UdEgoljS5hojuWlr0R9Qsuwc.crl (hash: FKMTnxnknBK98s0RtqSEpBYLjxQ3DkIwX17x53djqOk=)
3: sGdpJ3MGc2JYHlPiUM-Ur_MYt80.roa (hash: Mg+YYDsRO2iqoqy0HjPvZxJm7jFKR4if92J93XJagMw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:cc:9c:ec:2b:c5:e0:33:43:2b:ba:06:9e:62:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a6e147448289634b98688ee5a5af447d42cbb07
Validity
Not Before: Jan 31 15:00:36 2025 GMT
Not After : Feb 1 15:00:36 2025 GMT
Subject: CN=e5553a1094ccc2a754f411e9af8bb3a119090c9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:92:6d:2b:ca:10:36:5a:93:d2:a2:c5:49:48:
2b:e3:82:b0:1a:d3:b6:a2:a1:15:f8:9d:8c:5a:7b:
d0:ab:89:b1:f3:67:d1:26:3d:55:66:51:73:5b:8e:
00:3b:f3:2f:d3:2b:0b:ff:aa:01:ff:6d:52:96:13:
a0:71:90:7e:06:60:74:3b:23:a0:d3:60:53:9e:f2:
a0:7b:e7:8f:09:c8:94:2a:30:5d:f2:bd:ab:f9:70:
cb:ee:3c:2b:27:72:05:1e:f5:32:28:eb:fb:57:0f:
00:55:e6:86:36:d5:0e:c9:05:b1:31:1f:2e:8d:a8:
9e:bb:60:92:0a:e6:aa:16:e1:98:9b:99:53:65:a3:
f7:81:64:fa:5f:97:01:15:de:b8:4d:19:f2:d0:b8:
c4:8f:39:c9:e5:0f:e5:f4:1c:a6:a7:af:e0:d2:5c:
5b:79:88:ca:96:aa:b7:26:20:ea:de:e6:63:2f:ac:
8d:00:1b:22:10:69:97:17:ce:4d:52:ff:7d:8c:c1:
bf:48:86:4c:d5:f5:7c:97:d9:34:f9:66:92:ed:4c:
42:7e:1b:b6:70:3a:69:63:4e:1b:bd:07:f7:d2:2c:
f3:aa:c5:81:6c:6b:11:d2:12:6d:fd:18:3f:5f:d2:
7e:72:0a:38:25:64:b2:ad:c6:e6:f0:f7:b1:a0:fd:
4c:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:55:3A:10:94:CC:C2:A7:54:F4:11:E9:AF:8B:B3:A1:19:09:0C:9F
X509v3 Authority Key Identifier:
keyid:9A:6E:14:74:48:28:96:34:B9:86:88:EE:5A:5A:F4:47:D4:2C:BB:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mm4UdEgoljS5hojuWlr0R9Qsuwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/661dad-00c9-4f17-94d8-2bbd01f9e500/1/mm4UdEgoljS5hojuWlr0R9Qsuwc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/661dad-00c9-4f17-94d8-2bbd01f9e500/1/mm4UdEgoljS5hojuWlr0R9Qsuwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:9f:7e:4e:10:90:a0:d0:49:72:07:88:99:49:12:f1:74:a4:
fa:30:17:3d:48:89:fe:e1:58:25:9a:ad:2b:15:7a:ce:55:68:
e3:6e:a4:a9:da:37:5d:a4:b3:c1:94:43:1b:2a:0f:3f:82:d8:
6d:95:29:07:b8:4f:7c:3d:5e:a5:4a:d3:a4:db:7a:5d:52:5a:
df:2b:bd:5a:40:9b:69:97:7a:04:30:73:0f:99:69:65:02:fa:
71:77:00:6c:c0:a3:b0:9d:df:4a:dd:63:b8:a1:e3:70:e1:10:
26:1e:d9:6d:a0:ce:cb:9d:d1:10:ab:bb:d8:3d:9b:b2:cd:d4:
54:b3:65:9c:84:17:55:c8:2e:64:ae:de:38:6f:bf:3b:d8:4a:
f2:a9:12:b2:75:c4:fd:2f:ff:c1:bb:1c:64:c8:81:e0:3e:f1:
fe:b8:c2:84:e6:33:01:6e:cd:52:ca:f6:cb:60:0a:bb:90:9a:
5e:fc:a6:b9:1c:c7:ba:f3:9c:60:e4:4d:4e:54:97:23:0e:bb:
08:e8:06:db:a2:4c:eb:f5:b2:1e:18:b0:af:80:d1:b3:57:87:
2b:7e:a6:d0:8b:4f:ef:5c:d8:b5:d7:86:bb:bd:6c:1a:5f:4c:
32:cc:16:24:35:3c:8a:de:f9:4e:b1:bb:77:83:d0:d0:41:76:
04:a9:d3:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 03:53:04 2025 by rpki-client