Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/36b098-e9ac-4910-a6f5-8e5d9eefaf91/1/M54PXmVDk87aIttEl48nPnieI0E.mft
File: M54PXmVDk87aIttEl48nPnieI0E.mft (raw, json)
Hash identifier: 9gUjia35Bidd6VP2oJTOwf8DHUYrnJnyCJjP/VnLPv0=
Subject key identifier: 4C:96:8F:43:AE:D0:38:B8:7F:AD:6C:F7:78:F8:0B:19:2B:DC:02:CA
Authority key identifier: 33:9E:0F:5E:65:43:93:CE:DA:22:DB:44:97:8F:27:3E:78:9E:23:41
Certificate issuer: /CN=339e0f5e654393ceda22db44978f273e789e2341
Certificate serial: 0194BCA975EFBC5599663DB34FFB8813D5D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M54PXmVDk87aIttEl48nPnieI0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/36b098-e9ac-4910-a6f5-8e5d9eefaf91/1/M54PXmVDk87aIttEl48nPnieI0E.mft
Manifest number: 0DFE
Signing time: Fri 31 Jan 2025 14:00:09 +0000
Manifest this update: Fri 31 Jan 2025 14:00:09 +0000
Manifest next update: Sat 01 Feb 2025 14:00:09 +0000
Files and hashes: 1: 1_nKEKtn-rDapvV_FkI8ith69-A.roa (hash: HYbESAe393AiWHvbrJ4k/KX49GqaEptIBwkG+L+SrsI=)
2: M54PXmVDk87aIttEl48nPnieI0E.crl (hash: d38zYtRqGJnkbHy4497DPiTm9Ahx+PdE+VU9uTRkgYQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:75:ef:bc:55:99:66:3d:b3:4f:fb:88:13:d5:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=339e0f5e654393ceda22db44978f273e789e2341
Validity
Not Before: Jan 31 14:00:09 2025 GMT
Not After : Feb 1 14:00:09 2025 GMT
Subject: CN=4c968f43aed038b87fad6cf778f80b192bdc02ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:6e:4c:77:1a:db:02:38:3d:3e:3a:01:43:6d:
0c:bf:a9:4e:50:c1:35:34:96:31:e0:b1:2a:16:39:
49:1a:fa:5c:0b:98:a0:d6:71:e8:ed:ac:75:a4:a2:
1b:6d:07:c1:02:e5:51:8f:8c:7b:46:a3:3b:ec:7d:
70:fc:6f:89:0f:a3:48:14:31:d4:95:e4:33:5c:c4:
3c:d1:5a:dc:8a:df:c7:e7:11:61:37:ab:79:25:13:
c0:53:10:0e:8a:45:d4:d2:0f:25:2b:b0:e8:72:a3:
d9:6a:25:ca:d9:a5:b7:c4:f4:cc:ca:6a:74:aa:85:
7d:40:b3:d8:53:04:3c:6b:55:a7:4c:c3:ef:72:77:
df:4b:82:3a:4b:f9:49:6b:37:1b:6f:47:03:9d:35:
8e:02:0d:ad:fc:47:2e:38:3f:44:d3:36:fa:2a:42:
a5:7e:f7:49:98:85:e5:00:59:de:97:3a:46:93:2b:
b8:3a:76:f1:9b:f4:b3:cf:71:09:04:e9:03:37:ae:
66:3c:4d:1f:dd:d9:7f:8c:19:60:9f:00:3b:1b:a1:
ae:37:7e:e8:f5:7b:db:71:d8:eb:26:23:71:78:ee:
73:55:b8:26:0d:2d:15:91:77:f8:c5:1c:18:ec:6f:
0d:5f:aa:f9:1b:7f:7f:b0:24:b6:73:19:70:5a:c1:
b8:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:96:8F:43:AE:D0:38:B8:7F:AD:6C:F7:78:F8:0B:19:2B:DC:02:CA
X509v3 Authority Key Identifier:
keyid:33:9E:0F:5E:65:43:93:CE:DA:22:DB:44:97:8F:27:3E:78:9E:23:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M54PXmVDk87aIttEl48nPnieI0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/36b098-e9ac-4910-a6f5-8e5d9eefaf91/1/M54PXmVDk87aIttEl48nPnieI0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/36b098-e9ac-4910-a6f5-8e5d9eefaf91/1/M54PXmVDk87aIttEl48nPnieI0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:01:95:c3:7e:5a:99:43:cf:4c:96:15:a1:6e:6d:2f:08:3c:
19:82:5b:52:21:32:98:5d:ec:2a:2d:fa:61:83:b5:af:a6:7b:
e1:f2:a7:4c:79:18:2e:b8:f4:fb:82:81:85:68:b2:d9:38:95:
bc:65:ce:a7:11:3b:67:a2:07:b0:b6:c2:27:76:ff:af:7f:4f:
55:41:a8:07:86:83:eb:05:1f:62:ff:b8:e1:dd:30:4d:37:25:
85:2a:fe:d9:af:fc:38:72:58:b0:c9:20:38:5b:ee:75:19:39:
ee:26:be:0b:70:a1:3a:1d:7a:6f:97:8f:5c:6a:69:a6:e7:04:
38:ce:cd:7b:69:6b:06:6d:9e:ec:95:90:92:b0:53:e9:37:aa:
bc:89:81:cd:bc:8f:a8:bf:bb:11:00:fc:20:46:6e:2c:dc:44:
a4:cd:09:cc:4a:66:c3:b3:e0:f9:a2:7d:50:01:7e:c8:15:4e:
e7:3a:01:bb:7a:ab:fc:ba:41:98:c2:4b:a3:58:c5:3b:d0:3e:
34:ef:a0:bd:c8:2a:80:e6:c3:59:1f:70:5e:56:ab:bc:ba:3e:
3e:05:47:76:82:60:75:05:be:38:74:6f:ac:53:77:ca:29:0e:
29:5b:71:78:3e:31:ea:f5:33:3d:e5:67:66:ad:1b:10:d2:e6:
d4:fc:40:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:18 2025 by rpki-client