Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.mft
File: MbD2TGnTMLZuvNA6m_D9wZ8xR9g.mft (raw, json)
Hash identifier: 5mh1xz7B0VUPKGx+BtbBZVGAXN8+TSzD7MfGEj4vXzk=
Subject key identifier: 19:59:FE:CB:9B:A2:69:95:3A:DD:8E:35:6A:C3:C5:4F:69:9A:FC:71
Authority key identifier: 31:B0:F6:4C:69:D3:30:B6:6E:BC:D0:3A:9B:F0:FD:C1:9F:31:47:D8
Certificate issuer: /CN=31b0f64c69d330b66ebcd03a9bf0fdc19f3147d8
Certificate serial: 0194BC04B897D13F4F5330D385B82CBBF19A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.mft
Manifest number: 1156
Signing time: Fri 31 Jan 2025 11:00:13 +0000
Manifest this update: Fri 31 Jan 2025 11:00:13 +0000
Manifest next update: Sat 01 Feb 2025 11:00:13 +0000
Files and hashes: 1: MbD2TGnTMLZuvNA6m_D9wZ8xR9g.crl (hash: GANdgLOsrOyiWzSURM6CjSI5Vj3uA4JtcF5VFs7Ubek=)
2: vMtZPJ4kUtksr6gLcXUeBnehIhI.roa (hash: DdRgp6Qkh05LfzmrfBTFEBFoxp7FvSvhk/CzDJr5MWg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:b8:97:d1:3f:4f:53:30:d3:85:b8:2c:bb:f1:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31b0f64c69d330b66ebcd03a9bf0fdc19f3147d8
Validity
Not Before: Jan 31 11:00:13 2025 GMT
Not After : Feb 1 11:00:13 2025 GMT
Subject: CN=1959fecb9ba269953add8e356ac3c54f699afc71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8e:a6:ef:77:31:af:0b:de:03:ea:72:64:d6:
12:5c:bb:4c:ee:c6:71:14:f7:b3:2b:bd:aa:27:0d:
ee:99:21:9f:37:8c:5a:46:45:1b:a5:df:f3:41:bd:
ce:1f:c5:69:c5:7d:6b:62:46:e3:52:53:bd:d7:bd:
2f:99:11:7d:e5:9f:fa:bb:4d:53:f0:c1:0f:37:c9:
42:92:c3:f1:e0:74:40:95:71:cd:31:ff:46:66:a8:
75:13:a3:1b:d6:52:2c:f3:41:95:78:42:02:8f:37:
9f:49:3e:07:7b:54:09:c5:0f:07:08:e6:0c:76:db:
ba:9d:b1:f2:c1:cc:bd:7f:3e:ce:75:d0:7b:76:3f:
68:fd:68:80:ca:10:56:3c:d1:48:de:2e:22:c0:57:
af:ad:c0:a1:f4:fd:2e:ed:72:27:65:ac:47:74:63:
a8:e9:4d:ef:d4:fd:88:95:fe:f3:b6:65:ee:bb:1f:
dc:fb:f0:6b:4f:74:36:fc:28:93:b6:8c:95:95:1b:
7b:7e:e0:f5:f7:76:d1:e9:a6:7f:10:76:d9:99:24:
4e:93:c2:00:9c:96:5b:09:80:1f:8a:82:5d:e7:5e:
49:e0:44:07:b5:99:a3:84:9f:87:c1:24:52:5e:8c:
bb:dc:1e:2f:be:ff:0d:17:90:08:92:cc:4a:24:71:
d7:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:59:FE:CB:9B:A2:69:95:3A:DD:8E:35:6A:C3:C5:4F:69:9A:FC:71
X509v3 Authority Key Identifier:
keyid:31:B0:F6:4C:69:D3:30:B6:6E:BC:D0:3A:9B:F0:FD:C1:9F:31:47:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:a5:8d:a6:cf:26:43:42:b3:5d:bf:c1:4c:d8:38:66:6b:70:
b7:09:bf:fb:56:34:f0:4e:e8:73:4c:bf:91:0b:b2:97:16:aa:
4f:64:1b:d9:8e:f1:b2:12:25:25:4d:91:2c:28:c8:cd:56:34:
1b:e0:a1:43:a0:85:3f:47:4c:11:65:23:73:3e:ee:1d:5d:cd:
17:56:2d:cd:2b:15:ea:6f:cf:78:d2:dc:69:b8:ec:ee:60:90:
1b:f4:78:ef:ec:40:35:80:e0:36:34:a3:74:ed:bc:71:71:25:
54:17:bd:ed:4d:89:ae:e2:07:67:3e:ba:0c:7e:c0:46:e6:8d:
8b:e9:2f:5c:3d:02:c1:df:2e:f6:7c:53:1e:6a:65:02:3c:b3:
72:51:ee:de:ea:ff:b7:15:d7:eb:76:b9:03:55:2b:61:3c:47:
f3:f6:14:0d:70:48:96:4f:42:7a:26:91:25:ae:a8:e3:c7:bc:
2b:e0:9f:14:fa:c2:23:6f:b1:ee:5b:0e:92:1d:f2:84:e3:e6:
1d:a7:e4:26:8e:0c:4b:d3:cf:d9:49:cc:94:0c:cf:ff:c3:de:
bb:fb:56:f0:97:48:f8:b6:73:86:7c:bf:f5:83:b6:c4:bc:22:
16:73:27:fe:c4:66:6e:c1:d0:55:08:fa:db:d1:96:00:2a:72:
0d:55:59:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:43:32 2025 by rpki-client