Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.mft
File: MRhMnotqpAfA1z7QugYwdfYxTjY.mft (raw, json)
Hash identifier: kJnRCDOfsVMmc+HgzqtbLjKzRSuwkHCeEVmdOBlDwM0=
Subject key identifier: 1F:10:73:95:27:3A:C1:31:77:E0:12:53:2F:D8:D0:0C:C4:0B:E9:A5
Authority key identifier: 31:18:4C:9E:8B:6A:A4:07:C0:D7:3E:D0:BA:06:30:75:F6:31:4E:36
Certificate issuer: /CN=31184c9e8b6aa407c0d73ed0ba063075f6314e36
Certificate serial: 0194BCE0C72DE13D010CAF44FD50BECFCCE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MRhMnotqpAfA1z7QugYwdfYxTjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.mft
Manifest number: 0500
Signing time: Fri 31 Jan 2025 15:00:35 +0000
Manifest this update: Fri 31 Jan 2025 15:00:35 +0000
Manifest next update: Sat 01 Feb 2025 15:00:35 +0000
Files and hashes: 1: M16uuK8RBAhq-G4iUMFVGeS4VOA.roa (hash: Tzmv8XvI8c70nplaF0O7on0dN4ghnMF0KoTaadCmRAo=)
2: MRhMnotqpAfA1z7QugYwdfYxTjY.crl (hash: uNV58oZQ+5ehaLp5xkktYm6CfzY/GbtiYz3KLsggwwU=)
3: j0wVGA_XYNpaj0gdPVnYetQ4kdo.roa (hash: LDoymRkSd4Uoyu5Lf7qh9Z/0YCixabChwL/74B3fLbA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:c7:2d:e1:3d:01:0c:af:44:fd:50:be:cf:cc:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31184c9e8b6aa407c0d73ed0ba063075f6314e36
Validity
Not Before: Jan 31 15:00:35 2025 GMT
Not After : Feb 1 15:00:35 2025 GMT
Subject: CN=1f107395273ac13177e012532fd8d00cc40be9a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:95:2b:96:ca:d7:4a:b8:0f:57:df:7f:5e:ea:
1c:4c:54:87:6f:58:8e:8a:b8:2d:eb:7a:84:1e:18:
a4:f9:fa:2f:af:b2:c8:ba:60:f6:08:17:90:2b:f5:
0d:42:45:ea:f2:e1:e2:2a:d3:10:49:0e:2b:3a:41:
33:8c:26:60:bb:75:de:fe:3b:2e:b0:0e:25:29:2c:
26:07:73:52:33:05:a7:dd:65:4a:0c:fa:0b:e6:16:
e9:b0:42:a2:75:19:66:9e:c3:a3:07:87:a6:24:0d:
18:55:9b:d4:b4:98:cb:e7:0c:99:e1:61:65:4d:13:
b0:d4:84:2c:1b:ce:e1:8a:5c:e7:40:8e:d9:78:1d:
22:93:f7:ef:1f:65:30:e2:35:28:09:33:57:f3:e2:
95:dd:e7:20:58:ab:b0:30:0c:b5:a5:24:d0:36:8b:
44:6d:6d:43:10:5c:44:7c:e9:4c:7c:b8:05:d0:70:
4f:04:e8:e4:30:f8:b5:2d:cc:e4:79:cb:99:7a:05:
04:f1:01:4b:e5:7e:ae:5a:6e:81:6c:7c:86:f9:7a:
6f:8f:f5:0e:11:a3:86:d3:c6:d5:79:34:4e:da:15:
08:a0:a7:ce:57:ce:ee:e7:93:19:0d:e5:db:80:18:
03:fa:95:87:d0:d6:ca:83:7c:95:58:d3:5e:47:25:
30:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:10:73:95:27:3A:C1:31:77:E0:12:53:2F:D8:D0:0C:C4:0B:E9:A5
X509v3 Authority Key Identifier:
keyid:31:18:4C:9E:8B:6A:A4:07:C0:D7:3E:D0:BA:06:30:75:F6:31:4E:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MRhMnotqpAfA1z7QugYwdfYxTjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:01:7c:ff:37:97:f6:e7:32:43:f0:81:dd:fa:84:24:f1:e2:
4b:a2:5a:dc:65:cc:c9:75:58:d1:12:f5:47:d5:e9:a5:6a:63:
b1:b4:2b:8f:64:06:40:da:82:39:a1:19:7c:52:0a:4b:88:60:
e9:7a:bf:da:b1:1d:41:dd:91:7e:e6:0c:8f:e2:a8:f7:50:b0:
9e:4e:b0:c1:e4:78:0b:a6:b1:c1:e6:a4:e5:de:51:b3:9c:12:
82:4f:17:c3:11:fe:ae:27:d9:37:17:48:06:91:5a:d9:a5:bf:
51:21:fa:05:87:7e:76:d4:00:d6:d8:ce:ce:07:a3:20:f1:cd:
94:22:c0:a3:30:12:6d:07:d7:bc:50:1b:95:1f:d0:9e:46:e5:
db:dc:2d:54:4d:e6:46:b8:84:8f:9e:0d:ba:dd:ab:a6:d9:6e:
8e:06:b9:1c:12:10:bb:3f:3d:c7:0d:d3:a1:d1:42:3e:ef:36:
37:60:2a:95:13:dc:ce:a3:83:3c:8d:90:81:f4:6b:80:ae:e2:
29:39:8e:2b:67:78:e9:8e:53:e3:e3:50:33:78:fd:07:6d:26:
e7:8d:1e:6a:04:13:52:43:93:05:ab:a3:e9:1c:8b:c0:e3:7f:
5d:e5:dd:4f:1a:30:7d:54:02:22:85:dc:f1:e9:c4:b7:97:4f:
f9:8b:12:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:10 2025 by rpki-client