Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/35b49b-03a3-4101-a3fe-1d8e19df4a62/1/MtOVxX39MMDNLDD0IziuTBSnUKE.mft
File: MtOVxX39MMDNLDD0IziuTBSnUKE.mft (raw, json)
Hash identifier: k+IdpPk0CzTO6Cd30zhh4xXvTTR+c2gQrK4QTLLSZXQ=
Subject key identifier: D3:EC:FF:4E:77:5D:1A:E7:D5:32:95:F7:1B:9F:51:E9:0F:D5:49:5D
Authority key identifier: 32:D3:95:C5:7D:FD:30:C0:CD:2C:30:F4:23:38:AE:4C:14:A7:50:A1
Certificate issuer: /CN=32d395c57dfd30c0cd2c30f42338ae4c14a750a1
Certificate serial: 0194BC7300DA3AA739D0E14EA81E0B3881FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MtOVxX39MMDNLDD0IziuTBSnUKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/35b49b-03a3-4101-a3fe-1d8e19df4a62/1/MtOVxX39MMDNLDD0IziuTBSnUKE.mft
Manifest number: 0913
Signing time: Fri 31 Jan 2025 13:00:40 +0000
Manifest this update: Fri 31 Jan 2025 13:00:40 +0000
Manifest next update: Sat 01 Feb 2025 13:00:40 +0000
Files and hashes: 1: MtOVxX39MMDNLDD0IziuTBSnUKE.crl (hash: IiXn98F/Fsw7ID1LnhNnI4lxJ+chkh6MpOmdqe/K04w=)
2: SwDsrRhvfBw9F4XGJ9jQ9aLMXmM.roa (hash: 3d2l7JTHz6vbNzzhkSjJTHAcnYSSZFmoaOBcI2qRo/o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:00:da:3a:a7:39:d0:e1:4e:a8:1e:0b:38:81:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32d395c57dfd30c0cd2c30f42338ae4c14a750a1
Validity
Not Before: Jan 31 13:00:40 2025 GMT
Not After : Feb 1 13:00:40 2025 GMT
Subject: CN=d3ecff4e775d1ae7d53295f71b9f51e90fd5495d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:0f:5d:db:9f:e8:e8:36:fd:ba:5b:bc:18:aa:
48:9b:1a:85:73:10:f3:05:13:df:21:8a:c7:fc:26:
d1:9b:6c:21:71:32:23:3b:a8:0a:ed:8b:78:e1:7d:
e7:38:53:52:47:80:7f:61:f7:e1:0d:1d:6f:5b:8f:
32:1f:5c:96:51:36:99:68:a3:3a:0c:45:30:f2:ed:
eb:61:76:d0:ac:58:8a:14:89:5b:cd:70:bf:88:f1:
95:dd:f7:21:25:bb:f2:10:11:b0:e6:5e:47:86:d6:
b3:d8:4d:64:78:1f:c2:c0:91:a9:c3:90:0d:a1:e6:
07:a4:0b:3d:1e:b6:b5:f7:e5:27:0c:65:1d:72:4c:
53:26:a1:30:5f:b2:08:a2:9e:5e:29:80:c6:d0:4c:
b6:af:30:ff:82:19:66:ff:08:14:fd:ec:6b:30:91:
d4:e9:6f:a8:37:ce:8b:4b:74:9a:3c:a2:dc:6b:f4:
2a:5b:d4:3a:07:f7:47:8a:44:d0:74:a1:71:0d:7d:
3f:09:1a:c6:a6:b1:f0:20:33:bf:6d:a0:22:97:98:
26:d1:ca:87:35:07:4d:7a:2d:23:fe:5d:7e:6e:20:
7b:b2:8c:f9:f7:2e:f2:70:74:1d:06:9d:d9:d4:2f:
5d:b9:f1:d3:dc:48:99:ef:4c:a2:ea:db:13:5f:8d:
03:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:EC:FF:4E:77:5D:1A:E7:D5:32:95:F7:1B:9F:51:E9:0F:D5:49:5D
X509v3 Authority Key Identifier:
keyid:32:D3:95:C5:7D:FD:30:C0:CD:2C:30:F4:23:38:AE:4C:14:A7:50:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MtOVxX39MMDNLDD0IziuTBSnUKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/35b49b-03a3-4101-a3fe-1d8e19df4a62/1/MtOVxX39MMDNLDD0IziuTBSnUKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/35b49b-03a3-4101-a3fe-1d8e19df4a62/1/MtOVxX39MMDNLDD0IziuTBSnUKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:e2:11:8f:c2:bc:98:f3:9d:a3:fe:fb:2e:80:6a:93:ea:bc:
56:b4:34:cf:21:52:ee:44:14:ce:c7:f6:69:73:16:66:84:10:
1b:41:e7:8c:cb:6a:44:2e:c8:3a:60:8d:81:c0:66:fd:82:bc:
96:5b:9b:5c:91:90:35:5b:94:6c:5a:ca:54:91:24:23:1f:97:
eb:12:25:47:e3:59:cc:f5:92:65:0e:78:44:c8:f1:84:9b:e7:
5c:68:a8:b1:09:fc:7a:fd:4b:78:55:8d:ff:7f:35:b5:af:4f:
ab:a5:56:26:c4:a4:66:50:b0:50:3e:2c:42:a3:4c:88:1d:1b:
88:b3:c7:2b:8d:a8:a0:77:2b:7f:db:e0:e3:8d:22:1e:83:87:
d9:48:2d:70:ba:f2:63:97:8d:8d:bc:40:bd:ae:8f:c4:b1:7b:
6d:cd:44:a7:6a:b2:12:cd:90:4a:48:10:53:ec:dd:95:08:2d:
2c:8b:30:98:e0:b8:77:00:6c:ea:2d:3a:df:cc:b8:45:a7:94:
a3:ec:bb:ac:0e:0e:27:7e:dd:d5:8b:a5:65:5e:08:e2:db:e5:
7b:09:91:4d:f6:14:e9:33:b9:f5:e5:20:7c:3f:38:e1:f1:45:
f5:23:dd:10:6f:7d:8a:2b:a3:c2:61:68:34:c8:e2:48:c1:0b:
36:b4:5f:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:27 2025 by rpki-client