Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/9479ca-3db5-4f62-8e23-730b17f069ab/1/MkZ5WtaKa63Vr8trpGU-nAkPyFo.mft
File: MkZ5WtaKa63Vr8trpGU-nAkPyFo.mft (raw, json)
Hash identifier: s3So+IpaUjWv4P2r2aBG5PlRAPEu2itiB/9ph6NgRL4=
Subject key identifier: 00:A4:40:72:4B:06:B8:53:33:B8:3B:11:20:00:14:45:D8:F1:FC:2A
Authority key identifier: 32:46:79:5A:D6:8A:6B:AD:D5:AF:CB:6B:A4:65:3E:9C:09:0F:C8:5A
Certificate issuer: /CN=3246795ad68a6badd5afcb6ba4653e9c090fc85a
Certificate serial: 0194BD4E45EF3C22557E0742D0D7D9BFCC62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MkZ5WtaKa63Vr8trpGU-nAkPyFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/9479ca-3db5-4f62-8e23-730b17f069ab/1/MkZ5WtaKa63Vr8trpGU-nAkPyFo.mft
Manifest number: 11C9
Signing time: Fri 31 Jan 2025 17:00:11 +0000
Manifest this update: Fri 31 Jan 2025 17:00:11 +0000
Manifest next update: Sat 01 Feb 2025 17:00:11 +0000
Files and hashes: 1: LZ8uAkntmN0c-t2Y6sQNZXRHvWc.roa (hash: pnKmEkhVyamHT8q5re1u8FHw0CqLvJSlSrJsXdTnczY=)
2: MkZ5WtaKa63Vr8trpGU-nAkPyFo.crl (hash: j+GISwQCUbcifzWqf3KXzizQeH2WEiO+C9hVDXyioI0=)
3: RB-1Fy5sD5ZVDFZv751PSyh3H9Q.roa (hash: mxQ53KQYRRHLBJuqI/DtJ482oAxxveSfP/pLhygbyl4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:45:ef:3c:22:55:7e:07:42:d0:d7:d9:bf:cc:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3246795ad68a6badd5afcb6ba4653e9c090fc85a
Validity
Not Before: Jan 31 17:00:11 2025 GMT
Not After : Feb 1 17:00:11 2025 GMT
Subject: CN=00a440724b06b85333b83b1120001445d8f1fc2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:33:37:0f:9d:e8:bf:17:c6:0a:6e:2b:cd:ff:
10:9a:e9:c0:63:40:d7:dc:5d:27:8e:fb:3f:36:a1:
bd:dc:25:70:af:30:68:6b:59:1d:62:88:ab:9e:00:
46:27:92:76:08:54:09:83:39:53:b8:13:e1:cf:f7:
3c:48:bf:d7:6e:86:f3:71:7f:f1:0a:03:5c:87:94:
f0:2c:19:04:87:9a:e1:fa:57:49:ab:03:e1:d4:6d:
c8:63:18:2c:59:95:7a:c5:79:ed:68:5f:d3:6c:72:
f6:5d:b1:c3:b5:f8:e5:6a:2f:3a:b0:13:6f:f5:e9:
68:92:61:9d:79:90:7f:0d:12:f4:ad:cb:b2:10:07:
47:49:d6:29:8e:48:7d:3e:a9:e1:b8:69:3d:d5:ae:
52:8b:76:e9:21:fa:36:11:3e:2c:01:db:0f:b6:de:
0f:99:1c:f5:75:5f:43:50:0c:3b:70:c8:0a:2d:48:
98:05:ed:45:cf:e4:2b:22:2e:00:06:49:47:2c:7d:
bc:e8:02:a1:8c:ba:d8:8e:66:19:4d:e5:51:96:3e:
8e:08:fe:eb:66:b7:5f:0a:6e:b8:9f:0a:32:7a:c8:
d1:98:44:09:11:88:2b:d8:d3:c3:cc:14:4c:1f:03:
68:c3:68:c1:00:c4:d0:11:c0:33:4b:30:cf:b7:73:
9b:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:A4:40:72:4B:06:B8:53:33:B8:3B:11:20:00:14:45:D8:F1:FC:2A
X509v3 Authority Key Identifier:
keyid:32:46:79:5A:D6:8A:6B:AD:D5:AF:CB:6B:A4:65:3E:9C:09:0F:C8:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MkZ5WtaKa63Vr8trpGU-nAkPyFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/9479ca-3db5-4f62-8e23-730b17f069ab/1/MkZ5WtaKa63Vr8trpGU-nAkPyFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/9479ca-3db5-4f62-8e23-730b17f069ab/1/MkZ5WtaKa63Vr8trpGU-nAkPyFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:02:af:c3:f3:04:10:b4:2f:3c:45:0c:3f:68:8f:ff:89:07:
51:ff:48:50:8a:e4:ff:f9:89:70:68:5b:67:7a:d5:ef:c8:ca:
e6:ad:a8:47:b9:f5:29:1e:bc:69:cf:9f:a8:95:6e:72:94:dd:
2c:56:41:d1:a1:f0:df:fb:55:d1:9d:76:18:a6:3f:cb:8f:f7:
54:0e:f5:15:fd:c9:21:8f:bc:68:32:25:cb:74:22:77:14:62:
cd:27:97:fd:c2:40:c7:d1:79:31:06:34:55:1f:2c:62:08:2a:
d0:11:aa:8f:d3:df:41:64:c0:05:1a:b4:d0:61:0e:3a:19:10:
39:64:45:02:2f:f4:7a:e3:e7:5f:83:a3:d5:92:f4:72:3d:9c:
b4:b9:59:70:a5:c5:d4:0e:ce:20:f9:80:4b:fd:b5:3c:19:a8:
39:6a:5f:1f:79:8c:5d:d4:48:4b:d5:4e:19:a1:74:1d:41:80:
5a:21:51:d9:e6:14:d8:5b:31:14:31:bc:f1:56:a7:c3:57:31:
2d:ef:d6:27:cf:44:b6:f0:06:a4:42:75:c0:0d:47:ef:20:9a:
04:92:a5:16:05:70:6a:bc:1d:fa:1e:2a:47:be:9d:04:fe:e9:
8f:d7:b3:44:f8:4e:ec:f8:33:85:a5:0e:49:a3:4b:83:5d:61:
4a:4c:2e:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:39:43 2025 by rpki-client