Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/mi8HAdemPPPRk2lcOV0aH3gzXM8.mft
File: mi8HAdemPPPRk2lcOV0aH3gzXM8.mft (raw, json)
Hash identifier: ZZwcuGCskWxP3UvZqbD0ixVLqh+BKb79KrgUGSBxuSI=
Subject key identifier: 79:89:37:C7:00:3E:5F:64:21:64:82:71:ED:8A:55:F1:3E:6A:A4:77
Authority key identifier: 9A:2F:07:01:D7:A6:3C:F3:D1:93:69:5C:39:5D:1A:1F:78:33:5C:CF
Certificate issuer: /CN=9a2f0701d7a63cf3d193695c395d1a1f78335ccf
Certificate serial: 0194BC3C4C1622166466D550E2DFDE0F9513
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mi8HAdemPPPRk2lcOV0aH3gzXM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/mi8HAdemPPPRk2lcOV0aH3gzXM8.mft
Manifest number: 1116
Signing time: Fri 31 Jan 2025 12:00:55 +0000
Manifest this update: Fri 31 Jan 2025 12:00:55 +0000
Manifest next update: Sat 01 Feb 2025 12:00:55 +0000
Files and hashes: 1: GEL87EsMVhk3ZunlststnTM4YLA.roa (hash: H7b1xc1l2fw0pFwv7g5oKkpSKlsP+OyAptyBIDDM0uk=)
2: agw3OIrKwOyL1W_VnmVopnHAQeo.roa (hash: f+xBycRNQ1p+9ZUPOHzjnJANu2PPzQm41w3wdyO787g=)
3: mi8HAdemPPPRk2lcOV0aH3gzXM8.crl (hash: kvWVZLtmOd/ENbZezxqa2PpBhnGZ6kKCkc0dafYPfpI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:4c:16:22:16:64:66:d5:50:e2:df:de:0f:95:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a2f0701d7a63cf3d193695c395d1a1f78335ccf
Validity
Not Before: Jan 31 12:00:55 2025 GMT
Not After : Feb 1 12:00:55 2025 GMT
Subject: CN=798937c7003e5f6421648271ed8a55f13e6aa477
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:01:7f:44:28:b5:75:44:45:80:08:2c:4c:1a:
3f:6a:92:36:f7:d3:d3:c8:0c:53:d9:6b:77:0b:ac:
50:c0:88:89:87:7e:08:22:ab:aa:84:0c:fc:dc:16:
f0:d2:94:6f:41:70:bd:c7:c0:04:94:1f:ac:d1:5d:
fe:e9:84:c7:cb:e7:f2:0f:d0:bf:9b:5c:97:66:69:
cc:d2:7a:eb:5e:46:c3:69:e4:15:48:88:32:59:58:
31:51:ff:01:75:4a:87:84:d0:07:77:6a:f0:5e:87:
cd:41:59:40:60:b7:fc:9d:0b:00:f2:19:d6:09:cf:
a1:cb:2b:80:d4:bd:58:a5:69:f9:29:e1:fd:d1:27:
c1:cf:92:4f:d0:73:c5:5b:58:e3:be:57:ce:5f:91:
33:c5:48:d8:cc:27:fe:dd:2a:6c:60:2d:eb:f3:8f:
72:f3:8c:ea:4f:db:db:a7:6c:b2:5f:c7:3b:41:20:
8e:78:81:62:42:66:ae:09:5b:95:c9:ea:f7:a6:64:
e8:ee:bb:4c:c7:2c:b3:4a:0f:3f:47:c2:63:94:5e:
05:7d:be:10:05:c4:d3:ea:58:e8:79:08:a0:11:71:
c8:4a:4c:cb:01:e4:f0:5a:b8:eb:25:82:65:8c:23:
87:63:ac:47:c9:97:43:27:82:eb:92:eb:c9:20:e7:
f8:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:89:37:C7:00:3E:5F:64:21:64:82:71:ED:8A:55:F1:3E:6A:A4:77
X509v3 Authority Key Identifier:
keyid:9A:2F:07:01:D7:A6:3C:F3:D1:93:69:5C:39:5D:1A:1F:78:33:5C:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mi8HAdemPPPRk2lcOV0aH3gzXM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/mi8HAdemPPPRk2lcOV0aH3gzXM8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/mi8HAdemPPPRk2lcOV0aH3gzXM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:12:e0:7c:99:76:0a:a5:10:d4:4e:c7:c7:72:6e:68:ec:dd:
1c:52:ee:52:59:0e:34:dd:ce:90:85:df:30:88:f6:68:92:a2:
2b:6f:30:a3:d2:9e:e9:d2:35:91:12:7b:1a:ba:87:30:fb:ef:
65:0e:ed:88:d7:e1:67:24:eb:8a:20:e4:da:8f:58:49:7b:de:
93:26:d8:d5:ce:49:c6:61:8a:be:fa:90:72:3e:c6:28:4c:22:
90:09:e4:18:c3:2e:13:3c:66:eb:50:4a:61:38:b6:66:d7:65:
36:50:5f:88:7f:2c:be:28:db:40:f0:22:4f:9e:5b:b2:f5:7b:
fe:f3:8c:81:57:43:0c:13:04:f1:50:4d:22:b9:b0:49:09:56:
e0:a2:07:ce:63:b0:3e:b6:6e:93:35:95:94:6c:11:83:5e:91:
7c:96:53:fc:55:8d:8c:34:7c:97:db:30:00:33:3c:0b:b9:41:
a3:d4:f7:97:cb:ca:a7:3e:ea:e2:72:9c:29:0f:e7:79:8c:c1:
44:8c:ed:05:d3:44:bb:b6:6d:a6:e1:b1:96:63:ba:9d:dc:eb:
1d:6b:1c:62:00:39:5e:fa:bb:c9:01:3f:01:f2:af:41:c0:1d:
d0:c8:5b:d5:c6:5d:0a:e4:24:dd:5b:a5:56:3c:7f:c7:55:6e:
76:3f:00:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:33:11 2025 by rpki-client