Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/10303c-43d5-4033-808a-52c699d386cd/1/s9FM4YqPHQWmo1OQr0rsjObMVuw.mft
File: s9FM4YqPHQWmo1OQr0rsjObMVuw.mft (raw, json)
Hash identifier: Y6ofrsjMMbdT6C/4e6oN2DeFrZVBHuUZlF+b/phH/bE=
Subject key identifier: AE:E2:F4:92:05:93:DC:0D:3E:14:79:D7:E2:30:CC:E2:66:D9:5A:6F
Authority key identifier: B3:D1:4C:E1:8A:8F:1D:05:A6:A3:53:90:AF:4A:EC:8C:E6:CC:56:EC
Certificate issuer: /CN=b3d14ce18a8f1d05a6a35390af4aec8ce6cc56ec
Certificate serial: 0194BC73304207D1F5B2AAC54814C314C11F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s9FM4YqPHQWmo1OQr0rsjObMVuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/10303c-43d5-4033-808a-52c699d386cd/1/s9FM4YqPHQWmo1OQr0rsjObMVuw.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 13:00:53 +0000
Manifest this update: Fri 31 Jan 2025 13:00:53 +0000
Manifest next update: Sat 01 Feb 2025 13:00:53 +0000
Files and hashes: 1: jQsHaj5ydFI2fziM46K4sV8khMM.roa (hash: /VZu49ELcVRt0AgBq70u1HUIw5xDpnWHzAN7Dc2pulg=)
2: s9FM4YqPHQWmo1OQr0rsjObMVuw.crl (hash: qIfJJrepZyJhQBfZkxlzRhlPb1gtn53BEXVHJaWebYo=)
3: tRz8tYUpxwf8wN4GeTnH5f0QQNU.roa (hash: lo7qT/3mV2HNXlaDbWGrnZSKU8gfCipkct2DwMPEdOw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:30:42:07:d1:f5:b2:aa:c5:48:14:c3:14:c1:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3d14ce18a8f1d05a6a35390af4aec8ce6cc56ec
Validity
Not Before: Jan 31 13:00:53 2025 GMT
Not After : Feb 1 13:00:53 2025 GMT
Subject: CN=aee2f4920593dc0d3e1479d7e230cce266d95a6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:bd:d6:50:6f:14:d8:1c:dd:40:26:c0:d8:a8:
d6:b7:06:4e:fa:96:df:94:b4:76:aa:92:5f:5a:aa:
cc:df:40:03:3c:f8:4b:3a:6a:a9:02:40:3d:50:b1:
d3:25:f3:03:0a:30:17:28:b0:89:5b:84:dc:d3:b1:
2f:f4:46:ea:58:70:36:66:b6:4f:13:31:92:14:a0:
29:ed:48:6c:3a:ed:4d:c3:eb:08:92:8b:27:bd:84:
e9:78:ad:c2:60:27:d3:fe:9d:3d:e3:91:cd:35:5f:
25:64:8c:09:3e:dc:fd:33:47:5a:29:f0:69:2a:59:
f1:b1:4c:fb:69:dc:17:90:15:8e:6c:bc:30:e1:4b:
17:6d:88:14:ab:27:1e:44:08:07:8d:03:c1:48:46:
50:c3:f4:b4:3e:a7:1e:6a:cf:df:97:55:ed:14:4f:
a9:0b:77:b9:d6:e3:e2:c2:9a:b1:7c:97:d9:aa:3c:
73:39:82:11:8f:65:d7:53:d6:a6:17:90:43:8c:47:
2c:e2:93:e1:89:6a:5c:63:36:b0:5f:4e:7c:e3:21:
90:9b:ff:be:a3:f9:41:c1:dd:ba:2f:38:fa:c2:d1:
54:41:36:da:52:23:30:c1:60:13:e0:3a:37:fb:86:
28:40:25:17:95:ff:63:2e:60:be:09:33:f5:b5:35:
98:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:E2:F4:92:05:93:DC:0D:3E:14:79:D7:E2:30:CC:E2:66:D9:5A:6F
X509v3 Authority Key Identifier:
keyid:B3:D1:4C:E1:8A:8F:1D:05:A6:A3:53:90:AF:4A:EC:8C:E6:CC:56:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9FM4YqPHQWmo1OQr0rsjObMVuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/10303c-43d5-4033-808a-52c699d386cd/1/s9FM4YqPHQWmo1OQr0rsjObMVuw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/10303c-43d5-4033-808a-52c699d386cd/1/s9FM4YqPHQWmo1OQr0rsjObMVuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:ba:db:09:65:24:e4:d7:c3:72:a5:42:9a:e3:49:ea:24:fd:
bc:0f:63:11:92:c9:ac:92:ce:1b:5f:79:28:48:3b:9b:d5:db:
2e:e9:02:15:6b:5a:c3:97:8a:c9:09:11:3a:41:f4:f5:4a:4e:
19:c7:40:c0:eb:a7:bd:01:93:bb:6c:68:2c:e9:af:75:a0:38:
b7:0f:93:f8:c7:20:97:43:34:55:21:82:32:24:bb:02:46:b1:
8e:b5:7b:aa:c4:f7:0d:b2:eb:69:3b:d7:b5:a1:c0:ec:cb:7f:
fb:d4:6c:13:4e:be:43:62:f4:3e:f3:ef:24:b7:e0:76:9d:36:
c6:7d:2c:ce:3a:89:07:e4:b0:59:75:aa:6a:9d:9b:30:6f:14:
4d:35:ee:94:8f:ac:21:0b:47:8c:5e:24:40:d9:f4:19:97:8b:
08:d3:28:47:65:4b:85:32:e1:c5:f4:96:75:da:9a:cc:3f:63:
7f:18:41:fb:a0:93:1a:af:9a:81:af:fc:37:94:a6:2c:74:89:
17:f1:97:5d:81:97:2d:07:37:eb:ea:6b:c6:da:81:d0:be:a7:
e8:e3:c2:72:cc:51:eb:45:c2:f0:27:99:ce:02:86:43:0a:e6:
94:2a:c1:d9:e4:ee:82:db:c8:7c:be:d6:3a:a5:b8:e2:4e:88:
3f:55:89:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:01:44 2025 by rpki-client