Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/79ebc6-617b-4ea9-b453-4360ee06a22c/1/MksgMsOPsX9C-IMqTCHh8NXxnuA.mft
File: MksgMsOPsX9C-IMqTCHh8NXxnuA.mft (raw, json)
Hash identifier: wrUUUX+vkRzeE5cb1h2YJhm8jbkpaJVpvjdsaqlHxTQ=
Subject key identifier: 4D:D6:BF:D4:4F:31:04:18:E1:91:40:64:C2:2D:2F:CC:1A:02:4F:43
Authority key identifier: 32:4B:20:32:C3:8F:B1:7F:42:F8:83:2A:4C:21:E1:F0:D5:F1:9E:E0
Certificate issuer: /CN=324b2032c38fb17f42f8832a4c21e1f0d5f19ee0
Certificate serial: 0194BD4E7CCB6A0DACE0B4568B36C51F8832
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MksgMsOPsX9C-IMqTCHh8NXxnuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/79ebc6-617b-4ea9-b453-4360ee06a22c/1/MksgMsOPsX9C-IMqTCHh8NXxnuA.mft
Manifest number: D0
Signing time: Fri 31 Jan 2025 17:00:24 +0000
Manifest this update: Fri 31 Jan 2025 17:00:24 +0000
Manifest next update: Sat 01 Feb 2025 17:00:24 +0000
Files and hashes: 1: 1-5n0KWaGHCDQYhl2aLfMjhVyMRI.roa (hash: KATmxtMp2ikC0o4XIGyQU9bJkWtT8ILR3+Dm38ZRLnA=)
2: MksgMsOPsX9C-IMqTCHh8NXxnuA.crl (hash: k77D+AWjpjxL5xLDzmLasuAFmciwxPDVqpWPVk8CG9o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:7c:cb:6a:0d:ac:e0:b4:56:8b:36:c5:1f:88:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=324b2032c38fb17f42f8832a4c21e1f0d5f19ee0
Validity
Not Before: Jan 31 17:00:24 2025 GMT
Not After : Feb 1 17:00:24 2025 GMT
Subject: CN=4dd6bfd44f310418e1914064c22d2fcc1a024f43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:1e:53:fd:d1:01:6f:d0:94:a4:6b:2f:9a:b5:
46:98:f8:f1:b3:ec:a8:40:74:12:74:24:98:d5:f5:
15:88:76:3f:35:91:d5:d1:ab:80:e9:81:30:46:a9:
9d:d7:b9:f7:d2:da:84:5f:dc:a9:d2:23:58:35:b4:
a0:70:72:cb:39:df:bb:56:2d:c1:c2:04:b5:fd:2a:
67:06:eb:08:b1:58:f4:8a:bf:44:3a:a6:0d:fb:4f:
df:6a:0d:f8:8c:82:2e:b0:ec:b2:e8:cb:54:20:05:
00:ba:2a:cd:58:5a:07:62:75:16:76:aa:d8:d9:e3:
b6:35:45:c5:92:c1:ac:b8:dd:03:dc:1b:28:ac:a0:
b8:72:ad:0f:18:57:50:8c:02:a7:e4:93:00:43:bc:
ff:c3:9b:8f:f8:d6:1c:66:f6:ba:f6:27:ed:95:3a:
58:bf:42:c5:2d:12:bc:1f:78:5b:e1:02:4c:d1:25:
18:fd:ef:f2:3a:01:e7:6f:12:bc:98:69:97:05:9e:
25:b5:ea:20:56:f6:6c:67:54:a9:2a:bb:b4:51:84:
49:e4:ff:7e:ad:df:2b:28:42:cc:c3:9e:f5:3d:c8:
39:21:4e:99:71:cb:0b:84:99:a8:73:c1:27:85:7a:
38:9b:27:f8:2a:9f:a5:be:28:6b:41:4a:69:cf:f4:
ff:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:D6:BF:D4:4F:31:04:18:E1:91:40:64:C2:2D:2F:CC:1A:02:4F:43
X509v3 Authority Key Identifier:
keyid:32:4B:20:32:C3:8F:B1:7F:42:F8:83:2A:4C:21:E1:F0:D5:F1:9E:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MksgMsOPsX9C-IMqTCHh8NXxnuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/79ebc6-617b-4ea9-b453-4360ee06a22c/1/MksgMsOPsX9C-IMqTCHh8NXxnuA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/79ebc6-617b-4ea9-b453-4360ee06a22c/1/MksgMsOPsX9C-IMqTCHh8NXxnuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:5d:e7:a9:5a:84:0b:ec:18:b0:6c:6c:93:de:e9:54:ed:ca:
fc:b7:a0:a3:ca:2a:73:e6:f0:d2:dc:d0:00:6b:e3:e9:3c:3b:
5e:bc:41:b6:5b:8f:b0:4c:08:67:74:8c:01:36:2c:75:5e:32:
6e:7a:78:62:c3:19:a5:1d:aa:b7:8d:a3:4f:23:25:c3:af:b2:
03:06:3e:3e:4d:2f:27:b5:4e:32:f4:30:e3:d4:82:63:1a:c9:
80:8b:e3:9b:83:05:99:28:e7:0c:99:69:c9:d8:75:e5:95:ed:
28:05:02:3f:d3:e0:fd:05:30:70:ab:16:ba:6f:41:0d:86:02:
68:a2:63:de:e9:d8:41:93:95:2b:f7:ce:a2:21:05:6e:c0:a4:
94:3d:e8:aa:c3:16:6d:48:fd:b1:e5:76:e7:46:80:2b:84:7d:
b9:7e:bb:cc:8e:1c:08:4f:80:f2:80:1d:76:1b:36:9c:ad:d5:
d2:3a:c4:06:58:28:aa:f8:03:84:b5:0f:6f:cc:bd:d7:59:78:
5b:58:cd:b9:65:cd:31:c7:ef:be:6c:84:e9:ed:f1:6f:4a:e9:
22:f6:c2:fa:c8:99:b3:62:90:04:e7:54:44:aa:c7:aa:19:2b:
cc:1c:52:e3:f8:fc:e1:ff:2f:ed:dd:3d:50:89:7b:75:1f:16:
04:a3:97:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:57:45 2025 by rpki-client