Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/b172e9-1c5a-415c-8028-1280f2e783d4/1/m4Me6Uw3ubEVnH13MpNhgatUHYA.mft
File: m4Me6Uw3ubEVnH13MpNhgatUHYA.mft (raw, json)
Hash identifier: svRJnM4nu5XvZh6MtmwUxbSO/bFmnIjLujnKEB2L228=
Subject key identifier: F0:28:94:AE:65:D2:15:64:D7:B7:03:F3:DC:C3:34:4F:D9:BA:2A:73
Authority key identifier: 9B:83:1E:E9:4C:37:B9:B1:15:9C:7D:77:32:93:61:81:AB:54:1D:80
Certificate issuer: /CN=9b831ee94c37b9b1159c7d7732936181ab541d80
Certificate serial: 0194BCE06926B178010952B02311E65D383E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m4Me6Uw3ubEVnH13MpNhgatUHYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/b172e9-1c5a-415c-8028-1280f2e783d4/1/m4Me6Uw3ubEVnH13MpNhgatUHYA.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 15:00:10 +0000
Manifest this update: Fri 31 Jan 2025 15:00:10 +0000
Manifest next update: Sat 01 Feb 2025 15:00:10 +0000
Files and hashes: 1: m4Me6Uw3ubEVnH13MpNhgatUHYA.crl (hash: 91U141CgFn6mOzTIU41yQCoH49LTDHHq1UTBbDg6pv0=)
2: q2ym0slk0xbm2oB654qSKIP-iHM.roa (hash: T79hvxao/FCQThpWza9B8knVI82t4LDRrMr2rSD4Axs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:69:26:b1:78:01:09:52:b0:23:11:e6:5d:38:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b831ee94c37b9b1159c7d7732936181ab541d80
Validity
Not Before: Jan 31 15:00:10 2025 GMT
Not After : Feb 1 15:00:10 2025 GMT
Subject: CN=f02894ae65d21564d7b703f3dcc3344fd9ba2a73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:bb:54:37:c5:ee:34:ec:6b:52:77:a6:c9:30:
70:d1:a1:8e:65:e4:1f:c2:53:50:ef:39:43:62:aa:
5d:25:93:ac:b6:c6:7e:ca:97:10:8e:5e:25:49:d9:
f3:ef:82:59:24:0b:53:6c:b9:a7:5e:77:d8:85:5e:
3b:e5:e8:e4:b1:81:89:39:db:07:12:85:a4:d1:a7:
5f:b6:50:a2:71:7b:cc:63:0b:b4:06:81:3e:f1:7d:
65:c8:5d:24:9e:83:61:30:f0:74:47:c8:b7:c0:6c:
5f:44:a8:2b:18:12:f2:b9:63:ca:5f:74:ec:e0:98:
81:d2:89:45:c1:fd:7e:bc:62:d6:5d:62:a8:77:64:
63:f5:3f:d2:29:45:cb:c6:7d:de:27:c1:b8:31:2a:
0a:40:c1:2f:cd:22:d8:63:f2:a7:02:de:97:25:b5:
83:e0:09:fc:4e:90:56:fb:b1:89:3a:f9:db:a9:16:
6d:ec:8a:cf:c8:44:38:c6:23:18:11:fc:96:4a:2f:
78:e9:53:8c:96:36:0d:ba:5c:ac:40:ae:4b:8a:0d:
7d:ab:50:80:1d:a3:4c:5d:c9:42:bb:01:66:2a:82:
2f:68:56:92:1a:3e:77:50:f0:93:69:a3:68:54:d8:
e2:d8:4e:b2:b1:5d:96:c2:e2:f8:64:31:b9:58:6e:
71:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:28:94:AE:65:D2:15:64:D7:B7:03:F3:DC:C3:34:4F:D9:BA:2A:73
X509v3 Authority Key Identifier:
keyid:9B:83:1E:E9:4C:37:B9:B1:15:9C:7D:77:32:93:61:81:AB:54:1D:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m4Me6Uw3ubEVnH13MpNhgatUHYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b172e9-1c5a-415c-8028-1280f2e783d4/1/m4Me6Uw3ubEVnH13MpNhgatUHYA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b172e9-1c5a-415c-8028-1280f2e783d4/1/m4Me6Uw3ubEVnH13MpNhgatUHYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:55:a6:a3:da:7f:0b:bc:22:e0:72:a3:e6:ed:0d:da:bb:61:
ac:21:9f:81:7c:da:eb:48:8c:29:90:21:79:0c:b5:5c:23:bc:
78:5b:09:34:bd:00:42:50:c8:9d:b5:24:9b:f2:0f:dc:74:49:
f0:6f:32:eb:20:60:31:fc:98:da:8c:32:19:f7:f5:48:65:53:
36:8b:bf:b3:c1:e9:e3:d0:82:d3:a1:3b:85:08:14:af:ab:55:
36:da:d5:71:af:70:5c:ad:06:6b:96:f5:e9:02:19:ef:a5:91:
7e:2f:f9:a3:62:fa:d0:34:54:0b:6d:8a:a5:28:10:fc:58:27:
4e:06:6b:6f:f0:cd:e4:3b:ef:2c:57:10:08:37:e3:59:ad:70:
db:3d:e0:9c:79:68:4c:52:b1:38:1b:00:7c:9d:d5:a1:ea:ca:
6d:81:47:30:01:8c:30:d8:e5:45:02:a8:6c:ee:af:45:73:e3:
ae:d6:c7:45:fe:79:5e:c6:d0:9d:ac:91:fa:e6:d0:98:8b:96:
6f:0a:0a:fd:f9:99:72:84:6d:49:7e:5e:42:42:bd:b0:8b:6e:
2c:5d:fd:71:1e:d1:d2:74:81:dd:5b:70:47:66:2a:56:bd:d9:
91:b0:25:76:85:59:26:10:85:f8:3a:9f:21:9a:89:8c:b7:fe:
91:51:6b:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:13 2025 by rpki-client