Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/bea847-a783-489d-ae4b-53f57504ef35/1/mGM1ShEa9tXhrRDaOK2BRLa-ho4.mft
File: mGM1ShEa9tXhrRDaOK2BRLa-ho4.mft (raw, json)
Hash identifier: RGJeYiLhnBqs0/bIDjv3FSnBEt4lHWfZkYCBPIBBToY=
Subject key identifier: 0B:72:18:5C:8F:26:56:44:18:E1:6C:E5:4E:E7:F9:4B:2F:84:5D:38
Authority key identifier: 98:63:35:4A:11:1A:F6:D5:E1:AD:10:DA:38:AD:81:44:B6:BE:86:8E
Certificate issuer: /CN=9863354a111af6d5e1ad10da38ad8144b6be868e
Certificate serial: 0195E00FB1C2280F3C4FF06CEB987155BCA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mGM1ShEa9tXhrRDaOK2BRLa-ho4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/bea847-a783-489d-ae4b-53f57504ef35/1/mGM1ShEa9tXhrRDaOK2BRLa-ho4.mft
Manifest number: 05B9
Signing time: Sat 29 Mar 2025 04:01:19 +0000
Manifest this update: Sat 29 Mar 2025 04:01:19 +0000
Manifest next update: Sun 30 Mar 2025 04:01:19 +0000
Files and hashes: 1: J5SKCaGOc1EmK2ciMl5AsL0Yt6k.roa (hash: G1OhQbiptYNimu4j0r+tzGfxHpXqGX5AtlwZt3l6QBs=)
2: TMwrQ9VEC3dWwdOdSzhchqd9LKU.roa (hash: ddLT4suSyGT63FePBoB4o2Q5fl/qPXcvtKn+r4yKT0g=)
3: mGM1ShEa9tXhrRDaOK2BRLa-ho4.crl (hash: Rdbz7cBGZRExhc8XqUUvEKL1/nQ4k0dFFY3kYZGqK8c=)
4: qjXXTFXVdVVWr7-MSHZr7AQqbSo.roa (hash: Sp8Mn3EU/O89RIW7deIN1lZCT2/D8tgJU4hIx0BHNRE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:0f:b1:c2:28:0f:3c:4f:f0:6c:eb:98:71:55:bc:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9863354a111af6d5e1ad10da38ad8144b6be868e
Validity
Not Before: Mar 29 04:01:19 2025 GMT
Not After : Mar 30 04:01:19 2025 GMT
Subject: CN=0b72185c8f26564418e16ce54ee7f94b2f845d38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:b4:4a:b8:e9:f5:ab:2e:44:c9:ad:e5:b8:ab:
ee:cd:1c:9f:90:dd:20:5a:eb:33:25:83:09:7e:60:
2f:98:ca:fc:f8:7c:b6:2e:64:28:cd:56:49:2e:00:
12:30:01:31:67:bb:46:32:72:8b:34:5d:56:b1:cf:
d5:91:4e:1d:01:0d:e3:cc:d2:33:58:20:be:70:61:
8c:70:88:80:df:31:5b:83:f7:eb:7c:8d:48:72:22:
93:b4:d4:b6:d2:f1:37:75:d0:f1:18:75:b4:cc:ad:
4e:41:ea:99:7d:27:5c:50:b1:6d:19:0a:53:a0:9b:
9e:81:45:7b:21:18:21:ee:0f:46:a6:da:0d:5b:0d:
bc:29:32:b8:05:c7:cf:0c:9d:4c:8c:9a:23:9a:6d:
d9:90:04:8d:b5:95:a8:3b:98:14:ea:5e:ab:4e:ce:
65:c1:2e:eb:34:dd:0c:a8:65:76:3c:ff:46:f1:d4:
bb:35:50:66:8c:10:d6:ee:27:d7:30:3a:e6:0b:70:
d7:aa:cf:97:c6:c9:39:a5:b0:69:aa:35:9b:fb:ed:
dd:91:24:31:f4:c8:62:02:84:1b:3a:1b:42:2a:29:
4f:de:0f:26:fb:02:f2:d2:23:ea:bf:77:0d:d0:9e:
da:3d:0a:da:c3:65:3b:7b:95:ea:6a:9c:91:09:3d:
56:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:72:18:5C:8F:26:56:44:18:E1:6C:E5:4E:E7:F9:4B:2F:84:5D:38
X509v3 Authority Key Identifier:
keyid:98:63:35:4A:11:1A:F6:D5:E1:AD:10:DA:38:AD:81:44:B6:BE:86:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGM1ShEa9tXhrRDaOK2BRLa-ho4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/bea847-a783-489d-ae4b-53f57504ef35/1/mGM1ShEa9tXhrRDaOK2BRLa-ho4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/bea847-a783-489d-ae4b-53f57504ef35/1/mGM1ShEa9tXhrRDaOK2BRLa-ho4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:d2:05:27:9d:af:50:a7:70:f2:eb:5c:ce:44:af:d4:ae:47:
bb:db:fc:83:e2:98:7b:99:63:3b:8a:e0:24:04:a4:0a:c1:63:
cc:a7:e3:0d:95:14:02:b7:14:51:46:b5:63:d5:3c:22:9c:aa:
34:c0:70:0f:47:61:86:67:43:22:95:15:fc:b6:4c:5f:37:15:
5c:6a:c4:8e:c9:ec:54:09:e8:75:ca:85:1a:97:1e:fb:9c:b4:
fc:19:b7:d4:73:f6:ca:05:7a:73:44:58:85:c4:df:eb:59:59:
44:97:78:d8:d9:5c:ce:1e:55:43:66:3c:b7:f4:d9:2a:3d:77:
6c:a5:6c:da:ef:0d:63:07:67:06:d2:7f:cb:f4:48:49:da:34:
02:97:9a:97:12:6b:fd:ce:c8:f5:5d:0b:1f:b2:ad:7b:9b:ae:
48:ac:18:7e:8a:1b:25:f5:59:65:d4:62:0a:48:df:a1:70:0f:
2a:0f:98:9a:b0:11:2a:04:b8:f0:0e:a7:e0:61:6a:b8:37:ce:
01:e1:4c:fe:b7:c3:27:9c:83:35:f2:a0:b6:83:c2:92:82:57:
46:a1:55:22:32:63:12:dd:6e:77:40:ed:c2:9a:97:7c:21:85:
0c:a5:22:41:56:e0:1c:d9:d2:88:46:af:2b:7f:45:a9:32:2c:
8e:d0:77:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:27:24 2025 by rpki-client