Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/3040df-768d-4c70-9aa0-011ba072f42c/1/M1Ul9eUbYi_f7nMM2ozaMRtEAN0.mft
File: M1Ul9eUbYi_f7nMM2ozaMRtEAN0.mft (raw, json)
Hash identifier: 2wq3RVkO31uVrE9/9fDHCi6OfiszAZ2P3URwvrRg1B8=
Subject key identifier: 6A:19:B3:09:10:40:92:DA:44:4F:01:1C:24:D5:9B:10:93:3E:4D:4F
Authority key identifier: 33:55:25:F5:E5:1B:62:2F:DF:EE:73:0C:DA:8C:DA:31:1B:44:00:DD
Certificate issuer: /CN=335525f5e51b622fdfee730cda8cda311b4400dd
Certificate serial: 01921E1CE27CA3CE2F88BE79FB57F951F24B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M1Ul9eUbYi_f7nMM2ozaMRtEAN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/3040df-768d-4c70-9aa0-011ba072f42c/1/M1Ul9eUbYi_f7nMM2ozaMRtEAN0.mft
Manifest number: 0DE9
Signing time: Mon 23 Sep 2024 09:01:02 +0000
Manifest this update: Mon 23 Sep 2024 09:01:02 +0000
Manifest next update: Tue 24 Sep 2024 09:01:02 +0000
Files and hashes: 1: M1Ul9eUbYi_f7nMM2ozaMRtEAN0.crl (hash: snkbdyHd2dsdj5yYRXjL19P8wMHnYcPihvjo2Sqq5FI=)
2: gy9B-YTVou1lA7o-iY7fVa3s69k.roa (hash: dpyNEoOkVBt+26I1bEcjr/52W7c0cPIoh6B3guizo7M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:1e:1c:e2:7c:a3:ce:2f:88:be:79:fb:57:f9:51:f2:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=335525f5e51b622fdfee730cda8cda311b4400dd
Validity
Not Before: Sep 23 09:01:02 2024 GMT
Not After : Sep 24 09:01:02 2024 GMT
Subject: CN=6a19b309104092da444f011c24d59b10933e4d4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:5b:ac:8e:b5:e1:c3:07:21:28:1c:78:63:7d:
0c:28:11:5e:99:24:bb:a7:29:8d:a9:ad:f2:bd:d7:
5d:91:90:e3:c3:1a:72:b8:72:00:1a:3e:ab:23:a5:
47:9c:ec:a9:22:01:bd:8e:f4:dd:c0:63:c5:cb:37:
f3:7d:a7:2f:fd:12:94:83:d6:88:eb:eb:d4:22:cb:
a1:02:28:64:94:24:8d:34:d8:46:38:32:70:26:2d:
e8:b0:1e:ab:4f:91:ff:2b:80:af:c4:25:39:41:e4:
95:3e:0c:c5:73:9e:e3:95:d4:0a:4c:33:c4:95:0d:
4e:58:83:a8:32:11:47:25:18:11:02:ca:1a:fa:2c:
d9:f4:5a:92:b9:3b:dc:1f:fa:15:45:29:bc:13:b7:
34:5b:30:64:7f:2a:39:73:55:2c:53:4f:6f:31:4f:
df:59:5d:34:2d:33:f4:cb:85:d2:c5:e1:77:68:9f:
88:7d:ab:0a:8c:5a:05:4a:db:da:87:31:e1:7c:33:
7a:a6:83:de:25:f8:e3:63:a8:40:4f:d1:dc:b7:66:
1c:09:08:75:49:4b:21:02:10:b0:4b:10:36:cb:e8:
21:48:f8:31:e2:33:28:f1:82:12:94:39:d1:2a:6e:
48:80:a0:87:95:27:44:55:d5:dc:4b:0e:4c:18:09:
12:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:19:B3:09:10:40:92:DA:44:4F:01:1C:24:D5:9B:10:93:3E:4D:4F
X509v3 Authority Key Identifier:
keyid:33:55:25:F5:E5:1B:62:2F:DF:EE:73:0C:DA:8C:DA:31:1B:44:00:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M1Ul9eUbYi_f7nMM2ozaMRtEAN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3040df-768d-4c70-9aa0-011ba072f42c/1/M1Ul9eUbYi_f7nMM2ozaMRtEAN0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3040df-768d-4c70-9aa0-011ba072f42c/1/M1Ul9eUbYi_f7nMM2ozaMRtEAN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:0d:38:28:24:9d:ca:1f:fc:a3:65:2c:86:4f:32:74:02:b5:
b6:71:8b:27:72:81:da:3a:f5:52:47:1c:a4:70:4b:f3:31:31:
9d:53:f2:91:fd:b0:08:22:5d:1e:aa:47:4a:34:94:e7:75:80:
10:2f:2b:80:69:a0:35:c9:7e:2d:d8:10:d1:7a:e8:84:9c:9d:
ad:f7:5c:ed:4f:2a:b1:ba:c7:a4:63:98:1e:a6:ab:67:73:37:
ee:e1:3e:fa:fd:03:78:1a:d1:ee:9b:fd:c3:1d:65:84:1c:b4:
3c:8d:84:e5:3b:d4:cf:b7:01:70:c7:3a:4e:73:2b:3e:10:57:
68:e0:ce:1f:15:4d:82:ca:5b:0f:5c:c5:90:13:20:ff:44:9a:
2b:f3:b7:e9:5c:0b:a6:dd:86:be:f9:f1:5f:3d:e6:92:19:8e:
a2:17:9f:2d:79:9e:70:d4:86:83:89:92:20:3d:8a:63:1d:70:
5e:5b:04:ec:15:9a:80:a8:dd:a3:49:fe:69:08:95:4b:e6:0e:
fa:4e:fb:b9:4a:60:f7:59:f3:fc:5f:1f:b3:c5:6b:06:1b:9e:
e3:77:b3:54:d7:bd:d0:a4:18:1d:9d:25:d9:92:bc:dc:64:df:
4d:69:0b:db:42:78:5a:95:6e:b5:6d:6e:12:2f:83:29:2a:26:
84:83:2d:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:26:23 2025 by rpki-client