Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/d0fad1-b8b1-4960-b67f-02edf08f7cf8/1/mhoIaS8ijaDEGzF8b6fMXDvsUeE.mft
File: mhoIaS8ijaDEGzF8b6fMXDvsUeE.mft (raw, json)
Hash identifier: +8pe1ZF7M0Sc7ElbqGC+zQ5dNNWOMjfSFoMhxpbKLv0=
Subject key identifier: 74:79:7F:15:7A:84:70:4F:04:07:8D:96:BA:86:3B:93:EC:C4:67:69
Authority key identifier: 9A:1A:08:69:2F:22:8D:A0:C4:1B:31:7C:6F:A7:CC:5C:3B:EC:51:E1
Certificate issuer: /CN=9a1a08692f228da0c41b317c6fa7cc5c3bec51e1
Certificate serial: 0194BCA97F049EBACA17802BCD0232C1DF19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mhoIaS8ijaDEGzF8b6fMXDvsUeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/d0fad1-b8b1-4960-b67f-02edf08f7cf8/1/mhoIaS8ijaDEGzF8b6fMXDvsUeE.mft
Manifest number: 1252
Signing time: Fri 31 Jan 2025 14:00:12 +0000
Manifest this update: Fri 31 Jan 2025 14:00:12 +0000
Manifest next update: Sat 01 Feb 2025 14:00:12 +0000
Files and hashes: 1: 0aA52a05uApLKY3CXNmnXhwKrks.roa (hash: MeSVjVqbWBXWuoo0WV7N+n6x9g24v2DXI6O3Ubp3bGI=)
2: mhoIaS8ijaDEGzF8b6fMXDvsUeE.crl (hash: ZJIQmJW0bqBg0lwVTho4gc7Lz8+SXv+CK7bpRj5MX7E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:7f:04:9e:ba:ca:17:80:2b:cd:02:32:c1:df:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a1a08692f228da0c41b317c6fa7cc5c3bec51e1
Validity
Not Before: Jan 31 14:00:12 2025 GMT
Not After : Feb 1 14:00:12 2025 GMT
Subject: CN=74797f157a84704f04078d96ba863b93ecc46769
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:44:7f:d2:cd:18:cf:5d:ff:6b:70:0e:10:e5:
08:53:91:3b:cb:7c:23:71:45:47:38:14:ab:8c:88:
d7:50:de:52:77:74:fe:e1:8c:d2:bf:90:83:57:d4:
84:0c:8a:83:84:8a:d6:79:f0:d8:6d:69:1d:b5:2f:
fe:6c:72:5b:b8:5c:1d:de:07:2d:a2:3c:94:68:44:
a8:e4:96:7d:fd:64:c3:a8:90:18:f8:f4:94:a9:7d:
2a:2a:d2:b2:13:04:9a:ce:38:c8:f5:08:be:9e:54:
9d:9b:78:38:28:70:64:38:4a:c5:7c:f5:3a:48:fb:
e4:37:29:cb:4b:b3:77:00:4a:c2:b1:da:d8:54:ee:
d1:69:00:b2:2c:47:a8:c2:96:ca:e7:49:a6:2f:c5:
5b:51:0a:e5:8e:45:67:55:b0:65:59:04:6a:49:45:
7c:85:6d:8a:05:52:05:db:4b:dc:62:d8:77:2c:3c:
9c:b6:42:c6:68:34:c8:ff:f6:20:bd:81:b3:d4:ef:
d1:a5:fe:08:63:12:ae:9c:85:cc:43:22:34:6f:0f:
1f:17:84:9f:de:fa:e2:fe:e9:b8:be:a6:2e:ca:35:
4c:a2:25:e4:05:ec:2d:96:25:26:f1:53:76:38:e7:
81:f4:cd:91:06:4c:85:e2:c2:cf:55:84:97:49:4d:
6b:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:79:7F:15:7A:84:70:4F:04:07:8D:96:BA:86:3B:93:EC:C4:67:69
X509v3 Authority Key Identifier:
keyid:9A:1A:08:69:2F:22:8D:A0:C4:1B:31:7C:6F:A7:CC:5C:3B:EC:51:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mhoIaS8ijaDEGzF8b6fMXDvsUeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d0fad1-b8b1-4960-b67f-02edf08f7cf8/1/mhoIaS8ijaDEGzF8b6fMXDvsUeE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d0fad1-b8b1-4960-b67f-02edf08f7cf8/1/mhoIaS8ijaDEGzF8b6fMXDvsUeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:c9:8d:47:c0:ec:a6:c5:8b:23:27:b4:a7:af:d9:7f:12:3e:
20:da:46:fa:a5:c3:3c:65:18:a0:ca:4c:07:c8:33:84:6a:b6:
8c:ab:1b:46:66:a3:c6:3c:11:da:7e:e0:b1:11:8f:e2:62:83:
8a:4e:3d:cf:18:aa:74:c1:18:34:9f:f8:d3:c7:70:0a:f2:d5:
9b:95:8e:1d:4c:3f:02:e5:dc:db:ea:92:09:b9:8c:9d:96:95:
07:3d:bf:8b:23:d1:1a:08:72:3a:c1:28:27:38:cd:7c:c6:8a:
f2:e6:8d:8f:a8:18:72:83:a5:32:b9:a6:4b:e1:88:18:9a:23:
e6:ce:23:7e:34:f1:b8:27:31:86:99:1e:c4:f3:b2:66:a0:ca:
c9:10:21:8d:bc:f7:84:6f:3c:4b:b1:24:93:0a:82:88:95:04:
52:c2:73:47:08:73:48:b2:15:a6:81:63:9b:93:75:17:51:ef:
6f:81:e6:cb:9f:ad:2b:28:e5:75:73:76:40:68:9f:c5:90:a0:
14:f9:e9:10:27:63:d9:77:a9:9b:26:03:92:a2:37:5d:67:e6:
7c:a6:93:c4:cb:d9:31:69:0a:7d:0f:91:d6:f7:05:51:ec:f5:
34:42:a5:38:14:98:cf:a1:73:d5:2a:86:78:87:a1:64:ec:de:
5a:c5:7b:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 21:18:25 2025 by rpki-client