Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/10fce0-ee47-4ed4-a03d-0d4542920bcb/1/mgheBvLiouMEJW-IE1_xPectBzY.mft
File: mgheBvLiouMEJW-IE1_xPectBzY.mft (raw, json)
Hash identifier: D436qLC7sSM/Xw+I8z330KSm57PKuJMlfUSwK+7IUmM=
Subject key identifier: D0:87:B2:93:AE:7C:69:8F:78:E6:F7:AC:F2:7D:4D:C7:41:5E:67:00
Authority key identifier: 9A:08:5E:06:F2:E2:A2:E3:04:25:6F:88:13:5F:F1:3D:E7:2D:07:36
Certificate issuer: /CN=9a085e06f2e2a2e304256f88135ff13de72d0736
Certificate serial: 0194BC04ECF6CD10D57E31B1CE757E933680
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mgheBvLiouMEJW-IE1_xPectBzY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/10fce0-ee47-4ed4-a03d-0d4542920bcb/1/mgheBvLiouMEJW-IE1_xPectBzY.mft
Manifest number: 0B08
Signing time: Fri 31 Jan 2025 11:00:26 +0000
Manifest this update: Fri 31 Jan 2025 11:00:26 +0000
Manifest next update: Sat 01 Feb 2025 11:00:26 +0000
Files and hashes: 1: 9Dg6tOo6O44yr7jeWe1ba9VjCFs.roa (hash: 26YW4jX+yyct0IS6KpfO0MNuSdKZWiF48vsQnmBErMk=)
2: mgheBvLiouMEJW-IE1_xPectBzY.crl (hash: vLH4bySlUQaw3MXB4Ws8YBt5or4BoHHc+gIVHQ024vY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:ec:f6:cd:10:d5:7e:31:b1:ce:75:7e:93:36:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a085e06f2e2a2e304256f88135ff13de72d0736
Validity
Not Before: Jan 31 11:00:26 2025 GMT
Not After : Feb 1 11:00:26 2025 GMT
Subject: CN=d087b293ae7c698f78e6f7acf27d4dc7415e6700
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:82:06:78:18:f8:00:9c:b7:82:e7:60:a8:f7:
a2:4d:72:b4:bb:e2:81:6e:81:9b:17:98:5a:c1:ff:
5a:66:82:c8:6e:c9:75:17:9d:e1:e5:65:ed:b3:fa:
c4:77:b7:22:2a:15:f4:0c:22:57:6b:21:21:2b:55:
b6:aa:81:e8:9d:6c:f0:69:a2:88:53:eb:9c:cf:64:
fb:f7:7f:c9:ab:0d:fc:11:ac:56:e1:de:64:95:fc:
08:77:e3:72:6f:2f:14:d6:c4:50:22:f6:03:ab:1f:
8c:87:70:fd:13:52:bc:3b:e0:ab:1a:17:be:f1:6a:
4f:c5:c4:87:51:f7:92:fe:f9:e0:3f:09:d3:30:f4:
46:62:e6:61:0d:b9:81:d4:c8:23:9a:ac:69:df:ed:
ac:59:69:b2:ca:4c:2c:e5:a9:00:8b:97:5d:36:65:
1f:0d:1b:d9:c3:85:91:37:c3:d8:19:2f:05:f5:5c:
14:bd:72:a8:b6:ad:0e:9a:f6:3b:e8:0b:4c:1d:30:
f0:44:58:ce:20:be:61:1b:0f:ab:6a:a6:19:43:fe:
61:ef:64:e6:e7:65:8d:dd:ea:07:59:8d:ec:ec:00:
03:8d:35:86:e2:db:46:80:04:be:90:29:17:6a:e9:
e4:8c:31:4e:2e:32:11:e4:50:92:6e:47:68:83:c4:
33:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:87:B2:93:AE:7C:69:8F:78:E6:F7:AC:F2:7D:4D:C7:41:5E:67:00
X509v3 Authority Key Identifier:
keyid:9A:08:5E:06:F2:E2:A2:E3:04:25:6F:88:13:5F:F1:3D:E7:2D:07:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mgheBvLiouMEJW-IE1_xPectBzY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/10fce0-ee47-4ed4-a03d-0d4542920bcb/1/mgheBvLiouMEJW-IE1_xPectBzY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/10fce0-ee47-4ed4-a03d-0d4542920bcb/1/mgheBvLiouMEJW-IE1_xPectBzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:86:d3:c9:fa:a6:c8:e4:bb:c4:d8:35:61:33:42:53:2e:ab:
84:4e:d2:84:3f:b9:19:f8:d5:c5:bc:8a:1f:03:b8:7c:68:14:
83:19:b1:cd:85:b3:06:97:bc:26:bf:0e:1c:29:a3:38:36:d7:
1c:b7:5b:4a:c5:7a:d5:8a:a5:d5:39:76:b6:a6:da:97:53:20:
ce:72:8c:8d:c6:2c:df:a1:9f:3f:89:09:d6:fb:64:14:e7:b6:
50:8e:1d:4a:7f:d6:62:87:5a:87:6f:22:5e:bb:cf:ef:3e:c8:
46:a7:c6:01:95:7a:b6:cb:1d:69:48:95:b9:5b:7e:85:9c:59:
fd:24:90:31:50:43:59:ef:e5:ef:b9:c6:06:aa:40:9b:b1:83:
e9:99:e4:fb:37:a9:c4:6d:e6:9e:05:51:3c:3b:9f:44:25:11:
06:5b:b8:06:87:32:9d:bc:9a:ff:ec:d3:d6:83:aa:7e:0a:fb:
02:1d:86:8b:41:08:c6:4d:c5:6a:d3:53:8a:d1:fe:e4:80:bd:
5b:d8:c6:34:b8:0e:62:5e:8c:fd:67:f9:ad:8d:d3:c3:0c:c5:
dd:2f:86:d0:90:e8:6f:5a:dd:cb:89:2f:3b:52:1e:1b:8e:0f:
f4:ea:2e:3f:30:b8:01:7b:fe:6b:2e:57:59:61:d2:3d:2f:c7:
a8:a1:c0:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:42 2025 by rpki-client