Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/5c0b4a-2da4-43a5-9289-1937bde8cd6f/1/mpGLgMuzJzekayRIaaatVQlUP6E.mft
File: mpGLgMuzJzekayRIaaatVQlUP6E.mft (raw, json)
Hash identifier: EVfTmgEHQ4n9KhO9qWopapWA+8Y8JCHO1PNsuCmFQpQ=
Subject key identifier: DA:0F:0F:9B:2C:94:89:FC:83:7C:F2:43:91:A5:78:48:B5:81:15:DA
Authority key identifier: 9A:91:8B:80:CB:B3:27:37:A4:6B:24:48:69:A6:AD:55:09:54:3F:A1
Certificate issuer: /CN=9a918b80cbb32737a46b244869a6ad5509543fa1
Certificate serial: 0194BC3CAC2713D02E0ACE46ECC7B78DEE47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mpGLgMuzJzekayRIaaatVQlUP6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/5c0b4a-2da4-43a5-9289-1937bde8cd6f/1/mpGLgMuzJzekayRIaaatVQlUP6E.mft
Manifest number: 07D1
Signing time: Fri 31 Jan 2025 12:01:19 +0000
Manifest this update: Fri 31 Jan 2025 12:01:19 +0000
Manifest next update: Sat 01 Feb 2025 12:01:19 +0000
Files and hashes: 1: _sJ1gEKp9zcUkmdoEUiL1Hgw__4.roa (hash: QNXdCikQmuLlbojTN81QhJiEfrR2COSucqfmF6ZaSHQ=)
2: mpGLgMuzJzekayRIaaatVQlUP6E.crl (hash: fbc+fII4uccx3jWM00jjLimf6A3fYMJPP7P5DuDd9qk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:ac:27:13:d0:2e:0a:ce:46:ec:c7:b7:8d:ee:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a918b80cbb32737a46b244869a6ad5509543fa1
Validity
Not Before: Jan 31 12:01:19 2025 GMT
Not After : Feb 1 12:01:19 2025 GMT
Subject: CN=da0f0f9b2c9489fc837cf24391a57848b58115da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d8:6a:83:7e:d9:d3:f0:70:89:da:24:25:91:
b1:22:e2:47:c9:e0:ff:13:21:22:43:0c:1c:86:5f:
3c:6e:a5:34:56:f2:f3:40:33:03:65:1d:09:b1:bb:
b6:03:ee:26:fe:77:07:a9:65:d0:b7:13:b7:43:57:
2e:23:e9:68:a0:51:b5:d3:46:43:30:14:b7:2c:3c:
13:5c:3c:b5:68:93:83:4d:3e:37:e1:dc:4d:63:99:
df:d0:c3:b5:68:14:6d:ab:49:2f:7e:4e:dd:6c:6d:
d3:91:7c:e6:ee:47:ff:bc:b2:55:b2:f9:90:0c:52:
7b:6e:4e:60:65:a5:3d:1d:55:80:bf:7e:87:3c:1e:
19:c8:6f:e6:c6:9b:53:7e:3f:40:30:85:eb:18:23:
8b:7a:21:ae:6b:ad:c2:26:e4:8e:1c:10:56:28:7f:
b5:1b:ae:75:4f:db:8a:58:74:1d:5f:e1:ba:35:69:
54:2a:33:36:6a:96:32:bc:e6:be:ed:35:65:e4:41:
62:02:6b:7a:0c:7b:89:25:11:66:b1:01:af:56:c6:
d6:e6:d7:dc:10:8b:36:09:26:46:30:59:2d:63:d7:
f9:6d:be:3f:b2:6f:6d:07:08:35:c4:a0:dc:25:c4:
68:b4:6c:06:a8:5b:62:71:ff:bf:1e:d6:1e:03:99:
7a:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:0F:0F:9B:2C:94:89:FC:83:7C:F2:43:91:A5:78:48:B5:81:15:DA
X509v3 Authority Key Identifier:
keyid:9A:91:8B:80:CB:B3:27:37:A4:6B:24:48:69:A6:AD:55:09:54:3F:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mpGLgMuzJzekayRIaaatVQlUP6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/5c0b4a-2da4-43a5-9289-1937bde8cd6f/1/mpGLgMuzJzekayRIaaatVQlUP6E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/5c0b4a-2da4-43a5-9289-1937bde8cd6f/1/mpGLgMuzJzekayRIaaatVQlUP6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:71:f3:a7:67:51:fd:ac:37:22:9f:ec:dc:aa:e1:83:14:cd:
ab:76:55:ec:ca:8a:dc:b8:13:48:29:1f:31:1c:1d:b7:b3:00:
bc:6a:62:3b:8f:00:ac:61:88:d0:33:12:2d:86:e1:49:1c:f4:
58:dc:ae:7a:58:39:ce:ae:d5:57:8b:0f:6c:f1:64:06:37:f5:
37:95:9e:38:af:e9:e2:f1:c7:ce:ec:f5:d1:b0:7f:05:c5:97:
82:c2:34:46:b0:52:5f:2d:2b:76:1d:23:24:86:98:7f:d8:24:
57:58:3e:88:7f:6d:f6:c3:92:30:c7:82:7a:4c:81:46:b4:b0:
7e:b6:b8:01:d4:aa:50:4a:e1:57:9a:95:f8:5d:91:d9:63:ba:
0c:3f:b4:dd:bd:fa:9c:19:12:22:7c:62:02:75:09:f2:53:99:
7f:67:97:32:74:fb:71:96:6a:23:12:f2:1e:46:34:6a:05:1a:
b6:2a:ce:1b:a4:e6:fa:9e:b0:58:ea:ab:e9:3c:b6:33:b0:53:
3d:9f:e2:eb:4e:3d:54:8a:13:af:db:7b:0e:09:92:a3:cf:00:
60:a2:8e:e2:d8:d1:0d:60:5e:ea:fc:26:99:9c:fe:77:65:3b:
e4:f1:97:6d:fc:d9:53:87:0f:06:2e:16:5f:f4:fb:2e:90:56:
7a:23:34:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:01 2025 by rpki-client