Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/62846e-0189-468d-a8d3-1a8daff11e0c/1/M645mYTXN0sqjgr3LSv88QXIYVQ.mft
File: M645mYTXN0sqjgr3LSv88QXIYVQ.mft (raw, json)
Hash identifier: wkxR41Xna6BDX2irYqMSUweG+TOaEcW+/pdtClS6Zjo=
Subject key identifier: DA:17:2C:E2:76:CF:19:DD:E1:EC:64:DA:90:54:07:B9:0E:C4:C6:87
Authority key identifier: 33:AE:39:99:84:D7:37:4B:2A:8E:0A:F7:2D:2B:FC:F1:05:C8:61:54
Certificate issuer: /CN=33ae399984d7374b2a8e0af72d2bfcf105c86154
Certificate serial: 0194BCA9E7F0B25B5176B9134AE9689BFEC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M645mYTXN0sqjgr3LSv88QXIYVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/62846e-0189-468d-a8d3-1a8daff11e0c/1/M645mYTXN0sqjgr3LSv88QXIYVQ.mft
Manifest number: 133F
Signing time: Fri 31 Jan 2025 14:00:38 +0000
Manifest this update: Fri 31 Jan 2025 14:00:38 +0000
Manifest next update: Sat 01 Feb 2025 14:00:38 +0000
Files and hashes: 1: FVPUO_4e4I5-OcVJQIXU4CRRPVk.roa (hash: q0KHYdYKhmIsDVg/gFGOj9HyFrWEATNN4eGecvRkCEk=)
2: M645mYTXN0sqjgr3LSv88QXIYVQ.crl (hash: psw3ZCeQr+Sc9qCerXEO2ZrJdMrcE9moC1reSkfJCmg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:e7:f0:b2:5b:51:76:b9:13:4a:e9:68:9b:fe:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33ae399984d7374b2a8e0af72d2bfcf105c86154
Validity
Not Before: Jan 31 14:00:38 2025 GMT
Not After : Feb 1 14:00:38 2025 GMT
Subject: CN=da172ce276cf19dde1ec64da905407b90ec4c687
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ba:11:e1:c8:a7:27:9d:8f:91:9c:b5:54:1a:
c6:59:10:af:8c:52:3c:0c:56:a9:27:b6:8d:a6:0f:
15:cc:e8:c4:5a:fd:44:df:38:91:c2:1c:92:27:eb:
12:e1:06:69:11:ba:c9:ea:b5:10:ca:1a:53:07:2e:
f5:fd:5c:13:f0:c7:08:7e:f6:04:27:bc:b5:31:d2:
ab:94:fd:27:ea:08:8e:d6:68:26:d6:09:e2:ce:1a:
28:b7:9c:c4:7f:ad:80:3c:ef:b0:5a:0e:1f:92:e4:
ea:17:92:27:c6:41:93:0b:c1:b0:63:4f:da:94:db:
4c:f0:b2:9a:98:3a:a4:af:9a:8d:57:12:58:8e:7d:
fb:a5:b7:10:29:37:10:a1:20:da:42:b1:42:f2:05:
28:01:33:ed:ae:15:fb:a3:6e:c2:ad:3f:c2:f2:39:
b6:cc:d1:0f:c9:4f:dd:85:9b:28:fa:6d:6a:52:96:
09:28:bb:a0:5c:2e:13:c7:91:02:71:a5:1c:87:5a:
33:9d:38:ce:0f:51:54:1d:24:5f:e3:28:72:59:49:
6f:f2:3a:a9:ea:02:d5:16:86:76:cb:00:1c:c7:c4:
d7:5e:fd:48:21:ce:00:1c:60:03:cb:57:fd:3e:0d:
c3:ef:66:4f:75:3f:a5:d1:fe:27:93:48:48:8b:56:
a6:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:17:2C:E2:76:CF:19:DD:E1:EC:64:DA:90:54:07:B9:0E:C4:C6:87
X509v3 Authority Key Identifier:
keyid:33:AE:39:99:84:D7:37:4B:2A:8E:0A:F7:2D:2B:FC:F1:05:C8:61:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M645mYTXN0sqjgr3LSv88QXIYVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/62846e-0189-468d-a8d3-1a8daff11e0c/1/M645mYTXN0sqjgr3LSv88QXIYVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/62846e-0189-468d-a8d3-1a8daff11e0c/1/M645mYTXN0sqjgr3LSv88QXIYVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:4e:bc:28:11:d9:9e:aa:2f:2b:8b:46:81:1d:37:c3:6f:34:
14:ba:8c:81:1f:0e:4e:27:90:60:24:f1:f0:8a:72:48:86:9b:
21:2b:d9:66:9d:f4:82:88:e1:03:4c:cf:88:d2:9b:ad:88:0a:
8b:8a:ba:21:49:5d:56:50:6f:49:b8:d3:82:ae:ac:7f:aa:94:
b2:54:a5:a2:47:2f:56:15:96:ad:c1:94:cb:90:e4:d7:58:4e:
8f:3e:99:42:e2:a2:54:b8:1e:ec:cc:53:64:55:31:b1:af:0f:
d6:90:e0:c7:0f:ef:f3:4a:dc:a4:a2:65:76:0a:c0:85:c1:46:
4b:ce:54:2a:b2:dd:3b:bd:a9:ff:4a:21:61:16:63:d1:dd:66:
78:d2:d1:cd:cd:70:a5:e3:d4:a1:52:b6:3d:33:09:81:b7:b1:
2c:cb:aa:ab:c0:81:ec:9b:7c:34:1b:8d:a5:84:e5:a3:d7:de:
9a:d1:e9:33:fd:00:7d:07:c5:57:5e:1e:05:65:cb:8d:d3:a5:
46:14:81:0b:1b:b3:77:ce:45:56:e7:70:7d:be:df:a6:d3:36:
49:a4:4a:fc:6e:ef:ce:f5:85:0e:07:58:69:84:a8:49:b2:07:
9a:fc:76:5a:81:8b:a4:92:8b:34:db:31:c8:e4:bb:a5:b9:de:
f7:10:26:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 19:52:22 2025 by rpki-client