Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/44c42c-1e68-4aab-839d-9593e3a43725/1/mQxLs441zXAyDreRUgxsrTSksnE.mft
File: mQxLs441zXAyDreRUgxsrTSksnE.mft (raw, json)
Hash identifier: gjPDZHHsyCmRcBbw81SbrfK7VQTieI8A8sLk+6GZBNQ=
Subject key identifier: BC:6C:6D:12:94:05:AF:3F:5C:DC:CA:FC:E5:62:4A:15:0D:6C:71:24
Authority key identifier: 99:0C:4B:B3:8E:35:CD:70:32:0E:B7:91:52:0C:6C:AD:34:A4:B2:71
Certificate issuer: /CN=990c4bb38e35cd70320eb791520c6cad34a4b271
Certificate serial: 0194BCA96D6B97A91D135ED0C109E8AD49F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mQxLs441zXAyDreRUgxsrTSksnE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/44c42c-1e68-4aab-839d-9593e3a43725/1/mQxLs441zXAyDreRUgxsrTSksnE.mft
Manifest number: 10BE
Signing time: Fri 31 Jan 2025 14:00:07 +0000
Manifest this update: Fri 31 Jan 2025 14:00:07 +0000
Manifest next update: Sat 01 Feb 2025 14:00:07 +0000
Files and hashes: 1: JtxbWq9ormth5LcKwN5vG4Q3apo.roa (hash: lQXeYw4zv4cIzlRUFSI2nS9Q4llqbkuImnCVCQNKPmM=)
2: mQxLs441zXAyDreRUgxsrTSksnE.crl (hash: RPvLEYrvIkCDGLYwlXje0kZ9Lhg4nq4Cqlqe6o69qxM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:6d:6b:97:a9:1d:13:5e:d0:c1:09:e8:ad:49:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=990c4bb38e35cd70320eb791520c6cad34a4b271
Validity
Not Before: Jan 31 14:00:07 2025 GMT
Not After : Feb 1 14:00:07 2025 GMT
Subject: CN=bc6c6d129405af3f5cdccafce5624a150d6c7124
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:75:a8:87:b0:7d:be:1a:87:01:c3:a0:6f:af:
be:b4:4e:f0:e4:06:bd:07:89:8f:d8:45:5f:ca:cc:
ef:18:54:22:c4:ac:02:5f:24:78:45:da:60:5d:1c:
42:84:18:96:d1:58:3d:e7:70:1d:c0:eb:7a:1b:0f:
7f:7b:96:e8:13:bf:5e:f5:b9:66:46:1b:4f:7b:d9:
3c:4d:40:87:5c:ac:93:01:f8:55:b3:db:26:e4:f9:
28:ed:7e:3b:44:72:35:51:8b:5d:39:b9:77:5e:f9:
3b:ab:49:8c:7e:88:62:5b:d7:01:4c:a7:d7:8d:c1:
d8:55:55:36:2d:de:fe:18:c1:a4:13:91:bd:7f:11:
07:b3:3a:ab:e6:cc:cc:aa:8c:17:7f:d2:f1:8b:49:
05:b2:5b:29:dc:f0:dc:d0:ef:86:1f:63:4d:5d:d6:
60:9b:87:1c:e3:c7:b8:40:59:41:2c:88:8d:22:eb:
60:a4:92:a2:8e:1d:b5:9f:64:9a:86:1e:fc:51:89:
24:b5:52:47:64:60:20:46:21:76:d3:bc:5b:03:a5:
41:69:41:f3:dd:be:84:61:51:55:d5:5a:c5:cd:80:
c0:02:fc:e9:fb:cb:e8:de:c6:09:d1:ad:db:14:19:
03:15:0b:c9:be:f8:b1:8e:0f:a8:d1:bf:fc:15:56:
55:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:6C:6D:12:94:05:AF:3F:5C:DC:CA:FC:E5:62:4A:15:0D:6C:71:24
X509v3 Authority Key Identifier:
keyid:99:0C:4B:B3:8E:35:CD:70:32:0E:B7:91:52:0C:6C:AD:34:A4:B2:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mQxLs441zXAyDreRUgxsrTSksnE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/44c42c-1e68-4aab-839d-9593e3a43725/1/mQxLs441zXAyDreRUgxsrTSksnE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/44c42c-1e68-4aab-839d-9593e3a43725/1/mQxLs441zXAyDreRUgxsrTSksnE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:c4:d2:06:0f:c7:b6:cb:51:3b:de:b2:12:ce:0a:58:e2:de:
e2:bc:6d:57:0a:df:fa:f6:4a:3a:63:c2:e4:d3:65:0c:2a:8e:
b6:da:c4:55:d3:dd:a9:7a:6c:d5:a8:ab:9e:da:28:6c:b4:ec:
65:f5:86:86:90:63:89:18:64:89:e4:37:bc:4a:2f:44:87:9e:
11:a3:f3:90:b4:8e:bf:b2:11:e1:fc:d2:6f:83:d1:48:f0:6a:
21:30:31:36:73:d0:d2:75:c3:a4:31:ba:a9:3a:4f:94:29:26:
e1:03:8c:40:43:e4:8e:2f:2d:78:ed:3c:97:39:52:80:c7:38:
8d:6a:ad:c8:1d:3f:ba:54:5b:8d:47:a3:e4:fa:db:68:51:24:
2c:94:ad:da:e2:97:1b:fc:d2:66:97:f7:43:37:85:b4:ca:51:
90:95:91:a2:f8:e6:54:36:eb:33:1d:dc:4f:6d:7f:29:ec:92:
29:fe:3e:97:2c:ac:bf:b6:d3:79:8a:d6:f2:5d:55:b8:b0:3b:
4e:f2:d9:18:fa:41:5d:c6:68:c1:43:6e:3d:3b:a3:78:fb:86:
78:24:4e:a6:ee:6e:d2:e7:cf:32:8c:26:55:30:f6:b7:87:f1:
43:d1:e7:76:b3:c5:1e:05:08:ee:cc:a7:e1:60:84:2b:07:5c:
a5:51:81:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:10:53 2025 by rpki-client