Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/ad050f-a22d-4a77-958c-357a61361dcb/1/M8-_vy7M05OqMMIhNplluEcZLag.mft
File: M8-_vy7M05OqMMIhNplluEcZLag.mft (raw, json)
Hash identifier: 9c3seAKM6AlURLPGseTs+p3uEesJsGw91tfOytwFwWo=
Subject key identifier: 44:98:D3:4C:51:79:89:57:7E:AE:16:16:6E:E5:BE:E7:DD:D9:AF:B9
Authority key identifier: 33:CF:BF:BF:2E:CC:D3:93:AA:30:C2:21:36:99:65:B8:47:19:2D:A8
Certificate issuer: /CN=33cfbfbf2eccd393aa30c221369965b847192da8
Certificate serial: 0194BCA98CB85CE79519E25632CEF088358A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M8-_vy7M05OqMMIhNplluEcZLag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/ad050f-a22d-4a77-958c-357a61361dcb/1/M8-_vy7M05OqMMIhNplluEcZLag.mft
Manifest number: 0FA3
Signing time: Fri 31 Jan 2025 14:00:15 +0000
Manifest this update: Fri 31 Jan 2025 14:00:15 +0000
Manifest next update: Sat 01 Feb 2025 14:00:15 +0000
Files and hashes: 1: M8-_vy7M05OqMMIhNplluEcZLag.crl (hash: 1rNMSk3Ke43gEVZD7Ws49IDGE9rSm8PWGvXG35GCUts=)
2: MMfXFIBTN4EF53B-qz6xr0lTa60.roa (hash: PppBDUKwa5tmMVRDOOI/PKjma94X0CuRbdLOVWnm99g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:8c:b8:5c:e7:95:19:e2:56:32:ce:f0:88:35:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33cfbfbf2eccd393aa30c221369965b847192da8
Validity
Not Before: Jan 31 14:00:15 2025 GMT
Not After : Feb 1 14:00:15 2025 GMT
Subject: CN=4498d34c517989577eae16166ee5bee7ddd9afb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:77:71:a3:36:f9:8c:c6:8e:6b:6b:9d:cb:19:
ef:0c:c1:a3:8e:df:9f:6e:4d:6c:6e:7c:d1:4b:7b:
e8:60:65:8b:6c:c7:15:4a:d9:7e:51:a3:48:b1:ca:
28:01:64:96:b1:68:f9:ee:d0:4a:c3:15:ad:7d:f1:
17:18:31:1b:ab:89:18:2a:6b:ac:15:94:8f:e3:b3:
fd:63:da:f2:1b:4f:43:ed:bf:81:32:b3:4a:fd:9c:
f8:3b:b1:8f:52:12:64:c1:19:6d:6a:e8:c9:c0:85:
33:09:f9:9f:5b:da:bf:f3:22:6c:05:41:c5:90:5e:
9e:a6:ca:3b:e0:0e:bc:93:6b:eb:a5:20:0a:a1:7d:
03:e2:1c:ed:9e:26:f3:08:04:43:e3:17:6e:63:0c:
eb:3d:7c:f8:a0:ac:90:be:48:e4:e5:42:f5:4e:ec:
02:58:40:74:5c:3b:22:7a:e2:d7:7a:a1:5d:1d:af:
eb:92:7e:68:33:0b:a2:7e:89:03:fc:15:4b:0a:11:
91:32:e8:ad:26:e1:f5:0a:40:53:51:6a:57:2d:5f:
3f:f3:dc:f6:9c:a0:5c:e7:cd:18:5e:4d:8c:21:9f:
06:d6:86:6c:70:5c:45:7d:6d:40:85:17:12:cb:6a:
01:ca:1d:ae:66:b7:ff:e2:3b:9d:95:69:59:c7:9d:
b0:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:98:D3:4C:51:79:89:57:7E:AE:16:16:6E:E5:BE:E7:DD:D9:AF:B9
X509v3 Authority Key Identifier:
keyid:33:CF:BF:BF:2E:CC:D3:93:AA:30:C2:21:36:99:65:B8:47:19:2D:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M8-_vy7M05OqMMIhNplluEcZLag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ad050f-a22d-4a77-958c-357a61361dcb/1/M8-_vy7M05OqMMIhNplluEcZLag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ad050f-a22d-4a77-958c-357a61361dcb/1/M8-_vy7M05OqMMIhNplluEcZLag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:71:2d:f8:bd:a9:fb:19:18:1d:2e:da:54:c8:4b:46:d8:f2:
73:23:82:6f:46:d2:db:d4:b7:14:47:c3:c4:0d:d6:63:d1:bd:
75:7a:8d:f3:75:ca:ca:05:e5:3e:92:c1:12:53:06:30:ad:3d:
43:15:68:35:df:9f:10:46:29:6c:8f:21:e0:01:55:49:4a:0a:
da:36:a9:54:9e:37:c5:d5:0f:1e:31:9d:df:b2:51:0d:76:9c:
40:27:1b:87:c8:93:5c:8a:31:57:04:91:27:42:ab:13:07:45:
47:ae:4f:75:c6:f0:61:54:e3:e6:bb:97:4c:74:a4:f1:60:b2:
45:da:c9:f8:ae:50:a6:83:a9:54:d8:97:58:dd:76:2f:47:e1:
09:ce:a4:a0:4b:3a:88:e3:2f:a0:f9:0e:6d:d2:01:04:94:bd:
6b:a6:7b:2d:5d:4c:7b:6e:cf:b8:cf:38:e6:1d:e6:90:06:43:
c8:d3:74:5e:70:51:65:84:60:d0:dc:81:d4:92:4f:85:7a:de:
32:31:3f:dd:32:01:22:5f:cb:f9:82:10:22:b6:b1:7e:2f:ff:
b1:c0:d3:be:00:f9:62:4c:a9:5e:ab:d1:ce:ec:9b:e5:6e:5f:
6c:c7:a8:68:eb:30:26:5b:cd:f2:11:df:ab:c6:bf:90:17:62:
62:c0:e8:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:05 2025 by rpki-client