Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/09f39d-ef64-46e2-9471-63622b66fb24/1/mTueqf22EbkchXRBCsklxYafWmA.mft
File: mTueqf22EbkchXRBCsklxYafWmA.mft (raw, json)
Hash identifier: AWC/Zt5GEYjr0cpBkHIcK82/8rY8BaKxlI0OeBbdIgw=
Subject key identifier: CF:0A:D8:F8:B4:0B:5B:A3:5F:F3:24:C7:40:75:A3:B9:06:7F:83:40
Authority key identifier: 99:3B:9E:A9:FD:B6:11:B9:1C:85:74:41:0A:C9:25:C5:86:9F:5A:60
Certificate issuer: /CN=993b9ea9fdb611b91c8574410ac925c5869f5a60
Certificate serial: 018EFD1869041472A74EE980483E9C0214E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mTueqf22EbkchXRBCsklxYafWmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/09f39d-ef64-46e2-9471-63622b66fb24/1/mTueqf22EbkchXRBCsklxYafWmA.mft
Manifest number: 0D02
Signing time: Sat 20 Apr 2024 20:00:19 +0000
Manifest this update: Sat 20 Apr 2024 20:00:19 +0000
Manifest next update: Sun 21 Apr 2024 20:00:19 +0000
Files and hashes: 1: WOAqX6RHnb8d7-zv5b4La1rrMn8.roa (hash: ALjPM9P8L2XAWYXfvG32lKJaYFzKaGPvXMmI/wv1rWA=)
2: mTueqf22EbkchXRBCsklxYafWmA.crl (hash: sAx9zONGr0k5YZCigqrwYa2ZrGw9UVJ2N5bcXAMYco0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:fd:18:69:04:14:72:a7:4e:e9:80:48:3e:9c:02:14:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=993b9ea9fdb611b91c8574410ac925c5869f5a60
Validity
Not Before: Apr 20 20:00:19 2024 GMT
Not After : Apr 21 20:00:19 2024 GMT
Subject: CN=cf0ad8f8b40b5ba35ff324c74075a3b9067f8340
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:36:62:f2:fd:02:6a:da:b7:f1:1f:67:fa:9b:
00:fa:07:ef:cf:09:fb:0f:95:7d:02:4d:8b:5b:fd:
14:95:f5:9c:56:e6:fc:a5:fb:bc:b3:41:e3:45:ac:
d8:e7:50:a4:c6:4f:d4:d3:81:4c:2c:cf:10:64:2a:
99:e0:ad:8b:e6:4a:6a:98:43:41:c2:41:9c:6c:56:
25:e0:82:38:c0:23:c8:2a:2c:e6:0a:e7:c6:ef:c8:
61:eb:bd:44:36:bd:37:f6:17:a6:29:5f:f8:ae:cb:
3d:ff:96:0b:13:9c:6e:af:a5:59:fb:0d:a4:d9:ff:
68:ac:a2:d6:d1:ed:af:2e:80:93:e2:0b:66:c0:47:
91:48:6b:a9:72:56:05:14:ff:29:0a:00:2a:26:67:
19:9d:67:4d:a8:7a:e5:50:1e:e9:bd:ea:e2:03:db:
e3:87:d8:d5:a8:66:bc:37:7d:cc:e9:e5:99:b0:a3:
a4:79:86:e4:21:75:cc:65:4e:5a:a2:44:9b:39:8a:
96:fe:a2:35:0f:e8:20:22:4a:60:e9:ac:78:eb:cb:
52:8a:1a:23:a6:b8:ab:82:26:5d:49:fd:ae:a8:0e:
fe:9f:10:03:43:1a:9b:c8:b1:2c:05:ac:35:53:40:
48:27:7a:78:df:45:ea:12:7a:24:b1:97:77:8b:d4:
e2:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:0A:D8:F8:B4:0B:5B:A3:5F:F3:24:C7:40:75:A3:B9:06:7F:83:40
X509v3 Authority Key Identifier:
keyid:99:3B:9E:A9:FD:B6:11:B9:1C:85:74:41:0A:C9:25:C5:86:9F:5A:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mTueqf22EbkchXRBCsklxYafWmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/09f39d-ef64-46e2-9471-63622b66fb24/1/mTueqf22EbkchXRBCsklxYafWmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/09f39d-ef64-46e2-9471-63622b66fb24/1/mTueqf22EbkchXRBCsklxYafWmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:19:c4:04:ed:01:17:41:63:cb:f5:cf:19:2a:47:37:e7:3b:
67:76:00:3c:48:18:ae:b1:2d:a7:cf:a1:8b:52:97:bc:a9:2c:
db:0f:60:3c:7e:3e:f7:da:0e:04:5d:30:d8:bb:68:5f:d6:fc:
be:b2:05:40:51:6c:f7:bb:46:06:be:d4:7a:a7:cb:03:5c:8d:
50:75:b0:1e:ab:80:76:57:18:d0:05:34:12:f6:39:82:8e:76:
ad:7e:0b:38:6e:a8:f5:7e:1f:d2:a4:6e:be:85:0c:ff:5d:8a:
a5:b0:25:22:95:2f:9d:ff:fc:72:56:e8:ab:8d:91:5b:5b:7f:
b6:69:1b:14:dd:15:49:fa:b4:24:70:34:46:ee:4e:93:d7:c2:
0a:4c:33:43:ab:15:ae:79:6e:93:e6:e5:33:d0:75:41:33:2c:
12:32:e0:60:e2:9a:fe:d5:c9:f8:81:9a:57:b5:10:f2:a1:da:
a6:0c:fe:b6:cd:11:70:03:94:bf:d8:ec:02:84:bc:41:1c:0e:
ed:9e:89:70:c4:d7:f1:28:74:b6:9f:e9:bc:e6:a8:c0:ca:e8:
a5:1b:07:7a:e4:7a:71:38:6b:da:4d:1a:2b:1c:3d:e2:f7:6d:
c9:3a:13:7e:05:04:57:06:25:a9:bd:ab:9d:b8:fc:f6:e0:c2:
e0:d7:6c:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:05:10 2025 by rpki-client