Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/e34579-3880-4657-a49a-9ef0e66c3a6c/1/M-oZtnDL0a9iBwTE4qMzCKsg5FI.mft
File: M-oZtnDL0a9iBwTE4qMzCKsg5FI.mft (raw, json)
Hash identifier: VpxNuXn5w2QtXt6arUg4EutDBO8fLLn7sEMiwNR57mI=
Subject key identifier: EC:40:6C:9F:6E:57:CA:66:BE:B0:E6:84:8E:84:D7:5E:8D:15:41:90
Authority key identifier: 33:EA:19:B6:70:CB:D1:AF:62:07:04:C4:E2:A3:33:08:AB:20:E4:52
Certificate issuer: /CN=33ea19b670cbd1af620704c4e2a33308ab20e452
Certificate serial: 0194BC73023B9049C1D5DFBBA7F60F69A6F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M-oZtnDL0a9iBwTE4qMzCKsg5FI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/e34579-3880-4657-a49a-9ef0e66c3a6c/1/M-oZtnDL0a9iBwTE4qMzCKsg5FI.mft
Manifest number: 0142
Signing time: Fri 31 Jan 2025 13:00:41 +0000
Manifest this update: Fri 31 Jan 2025 13:00:41 +0000
Manifest next update: Sat 01 Feb 2025 13:00:41 +0000
Files and hashes: 1: KZ08JkK0sSRvNMx3Ikkq6uBEkO0.roa (hash: hZ8c3KxUe/IuNuwm8qqXzahz1nx8hksDbJXcmHPzZMg=)
2: M-oZtnDL0a9iBwTE4qMzCKsg5FI.crl (hash: MX/ydkI6xkzr5eqnmixLyNaWgVrKbqGZ9bjOhdQ1JrI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:02:3b:90:49:c1:d5:df:bb:a7:f6:0f:69:a6:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33ea19b670cbd1af620704c4e2a33308ab20e452
Validity
Not Before: Jan 31 13:00:41 2025 GMT
Not After : Feb 1 13:00:41 2025 GMT
Subject: CN=ec406c9f6e57ca66beb0e6848e84d75e8d154190
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:7b:b0:65:6a:08:ed:52:a7:f2:12:c1:39:82:
a4:ae:ec:0b:d4:38:37:29:04:99:9c:6a:53:21:9f:
3c:6c:46:ce:17:9f:3d:b3:5b:d4:3e:f9:45:18:e8:
eb:43:27:14:1c:33:24:87:db:a2:e0:44:ef:26:5c:
a1:9a:e5:1f:a3:6c:2a:ac:55:9a:28:e0:d9:9b:46:
76:b6:93:25:a7:fa:e9:51:8f:ce:83:22:c9:d8:69:
22:86:2a:cd:9b:4c:ae:96:74:2a:3f:9c:76:8b:1f:
ce:8b:c9:5d:8d:23:7d:c9:a6:e8:56:52:b8:e4:74:
c1:96:b9:9e:c5:6f:2a:d7:d9:2a:c4:86:38:24:05:
05:8d:f3:fd:75:ef:3e:5c:05:fe:a7:67:63:a1:0c:
69:fc:42:5d:0b:6c:54:d6:98:49:b2:73:85:b6:b5:
44:54:60:70:e3:28:79:3e:6c:0c:c6:49:7d:2e:e2:
04:98:00:d1:84:35:ac:f1:be:dd:31:5d:81:bf:4c:
96:af:ed:90:4b:ea:b8:b8:91:42:5d:78:ec:18:33:
e6:39:31:97:6b:b4:2e:f1:d4:05:58:8c:44:a5:8b:
4c:bc:40:76:3b:bc:fc:22:9c:7c:45:ca:16:e1:d7:
8c:6a:b5:0c:0d:88:ed:81:34:15:1c:9c:ae:35:04:
df:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:40:6C:9F:6E:57:CA:66:BE:B0:E6:84:8E:84:D7:5E:8D:15:41:90
X509v3 Authority Key Identifier:
keyid:33:EA:19:B6:70:CB:D1:AF:62:07:04:C4:E2:A3:33:08:AB:20:E4:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M-oZtnDL0a9iBwTE4qMzCKsg5FI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/e34579-3880-4657-a49a-9ef0e66c3a6c/1/M-oZtnDL0a9iBwTE4qMzCKsg5FI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/e34579-3880-4657-a49a-9ef0e66c3a6c/1/M-oZtnDL0a9iBwTE4qMzCKsg5FI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:02:47:cc:58:6c:08:30:62:ef:36:ba:a6:06:61:88:06:c5:
72:14:48:bb:cd:cc:9e:f0:ed:03:2d:f0:3a:e2:d2:6e:d8:dc:
09:94:91:05:3e:27:72:1d:d3:9a:ff:be:9e:3d:66:30:a9:08:
b0:b6:60:04:5e:6f:21:4f:fb:bb:ba:d7:45:1f:42:32:a7:53:
d9:a6:77:e6:5f:8d:a3:88:3c:1a:ea:2e:bd:24:f1:39:95:bf:
f3:3e:38:76:d7:99:fe:a9:f5:5c:e8:46:9e:d6:16:64:bb:2f:
e3:04:59:9e:4d:b0:2f:09:18:ab:14:db:1a:32:23:41:e6:e0:
de:5b:f0:98:c4:81:d9:e2:ff:cd:9a:a1:0d:42:ee:ae:cd:aa:
b1:54:71:de:6e:da:ec:c3:c5:f6:b9:6d:4f:8e:af:e1:3e:c4:
5a:70:bd:8f:61:15:0f:56:65:59:27:a5:7c:a6:36:1d:f1:37:
86:bd:5c:df:5f:c0:9f:11:e7:ac:a7:b8:5c:c8:51:69:f1:47:
15:fe:cb:f4:4a:31:d6:c1:ba:05:0e:7d:d1:00:2e:c6:b6:32:
83:bf:9a:b0:7b:80:69:b7:39:ea:86:e9:69:56:05:b2:6a:7e:
e6:81:78:f0:bd:89:f8:7a:aa:33:12:ef:26:7c:69:63:85:20:
aa:20:14:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:56 2025 by rpki-client