Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/0f2682-9878-416b-965c-40aac6396777/1/mjgMVcRhF_nQ-fifiF_YrFhMcuc.mft
File: mjgMVcRhF_nQ-fifiF_YrFhMcuc.mft (raw, json)
Hash identifier: ikbdxd1BbF/4vOBRSlqPxmXZfziI9BxXFqnN0s1Xmhs=
Subject key identifier: B6:15:5B:67:F9:79:30:3E:11:E8:69:AC:1A:0E:74:61:B0:C6:7C:72
Authority key identifier: 9A:38:0C:55:C4:61:17:F9:D0:F9:F8:9F:88:5F:D8:AC:58:4C:72:E7
Certificate issuer: /CN=9a380c55c46117f9d0f9f89f885fd8ac584c72e7
Certificate serial: 0194BC72EDA953551FF91A94C905462BEE72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mjgMVcRhF_nQ-fifiF_YrFhMcuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/0f2682-9878-416b-965c-40aac6396777/1/mjgMVcRhF_nQ-fifiF_YrFhMcuc.mft
Manifest number: 034E
Signing time: Fri 31 Jan 2025 13:00:36 +0000
Manifest this update: Fri 31 Jan 2025 13:00:36 +0000
Manifest next update: Sat 01 Feb 2025 13:00:36 +0000
Files and hashes: 1: 0Xa-Nei_d95pLvklAjjCcq4wB50.roa (hash: IPQHZLb7lkBMMEnjRg8Zyo+jCG1PIyAJca8gIl7Nyqw=)
2: mjgMVcRhF_nQ-fifiF_YrFhMcuc.crl (hash: 06r6m4JOTwQfcXExdrlkdMRL4ZsVzb7iCc2feEaM7M4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:ed:a9:53:55:1f:f9:1a:94:c9:05:46:2b:ee:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a380c55c46117f9d0f9f89f885fd8ac584c72e7
Validity
Not Before: Jan 31 13:00:36 2025 GMT
Not After : Feb 1 13:00:36 2025 GMT
Subject: CN=b6155b67f979303e11e869ac1a0e7461b0c67c72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:6e:e7:cf:75:72:ba:61:34:75:74:7f:9d:df:
d3:23:2d:de:dd:1a:55:48:c7:0e:04:f4:4d:2f:9c:
5e:b9:b6:84:b9:8c:df:eb:d6:c6:4e:47:08:b3:df:
fb:10:43:87:ca:52:36:ae:ef:aa:eb:26:18:53:f2:
d9:9e:4f:28:ed:7c:86:46:84:21:f9:b7:48:1d:47:
a9:93:58:74:1d:92:62:07:0f:75:18:26:a6:7d:10:
49:61:5a:f0:ed:8d:24:54:96:89:c2:91:9a:b4:4a:
6e:29:4a:2d:e1:e0:cc:51:d6:41:e9:5e:e3:6d:f3:
cb:22:61:74:f0:96:59:3f:bd:44:22:37:a3:32:cd:
f0:66:9f:84:14:46:c7:fc:60:ef:51:39:b6:ea:c1:
a5:09:05:1f:06:86:8e:89:e0:83:0d:1f:57:b0:8b:
a4:06:57:ac:bc:fb:60:33:b1:6b:1d:7d:97:1b:26:
66:f2:c1:71:d1:30:8e:26:d9:ff:be:de:be:50:32:
e0:85:c9:fc:24:cf:75:67:d3:58:44:8f:3c:60:c8:
e1:d5:84:c6:11:7b:40:4e:f7:f0:a0:4c:d3:6d:ce:
da:72:21:c9:44:53:9d:fa:fb:34:8e:df:c4:05:8c:
9c:ac:b0:df:af:ca:cc:4b:97:ba:9c:e7:ab:b1:06:
a3:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:15:5B:67:F9:79:30:3E:11:E8:69:AC:1A:0E:74:61:B0:C6:7C:72
X509v3 Authority Key Identifier:
keyid:9A:38:0C:55:C4:61:17:F9:D0:F9:F8:9F:88:5F:D8:AC:58:4C:72:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mjgMVcRhF_nQ-fifiF_YrFhMcuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/0f2682-9878-416b-965c-40aac6396777/1/mjgMVcRhF_nQ-fifiF_YrFhMcuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/0f2682-9878-416b-965c-40aac6396777/1/mjgMVcRhF_nQ-fifiF_YrFhMcuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:58:8b:0c:c5:db:a7:ab:23:5f:ef:f6:65:af:62:cf:17:af:
49:f4:ec:7a:dc:5e:8a:fa:bf:1a:c3:c8:e7:66:e0:f4:7f:25:
9d:07:77:37:e8:43:03:89:f6:1b:67:b2:54:c8:2a:35:61:c7:
f7:02:a6:4d:52:a8:df:e7:f7:a0:9e:78:b7:14:cd:95:1f:61:
c2:78:26:d0:58:f6:12:a5:eb:70:5c:d1:9b:13:c5:82:c1:2c:
cf:be:61:6a:4f:a5:46:8e:5f:69:c9:bb:8c:09:96:50:12:87:
47:01:99:26:b6:04:f8:c4:62:f8:18:ec:76:d7:63:ee:c5:67:
21:4a:94:f7:87:61:de:ae:20:73:f2:1a:14:46:b5:fd:c7:a5:
7e:c6:b4:64:c1:a9:88:bd:48:a0:85:a9:f3:a0:62:db:25:3d:
15:cc:c5:70:e4:ca:31:9c:cd:c1:f5:0e:c7:5d:dd:43:34:29:
41:de:d5:11:2c:25:15:03:b1:39:06:15:63:e0:3f:54:9c:73:
d8:63:bb:73:d9:35:5d:b0:c5:74:06:d7:28:8d:b4:ad:5f:45:
d2:d9:45:59:ef:79:d9:28:39:90:85:76:49:61:00:f0:a5:0c:
52:8b:3e:18:a1:f7:e9:45:63:e1:f9:49:e8:fc:6a:a0:8f:6c:
57:3f:12:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:36 2025 by rpki-client