Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d8679e-46bb-44f5-ba52-b52b3a236fa7/1/rMSPelkSBYjUFw6igV5q5RvmvP8.mft
File: rMSPelkSBYjUFw6igV5q5RvmvP8.mft (raw, json)
Hash identifier: vlOr1n9qZ9hlPa7ag+6RR0jzapT/TbqDq7mGSOcAylg=
Subject key identifier: 44:6A:DD:AF:E2:B1:61:8E:FA:D6:9F:6D:0E:56:C7:77:5B:B7:4F:CA
Authority key identifier: AC:C4:8F:7A:59:12:05:88:D4:17:0E:A2:81:5E:6A:E5:1B:E6:BC:FF
Certificate issuer: /CN=acc48f7a59120588d4170ea2815e6ae51be6bcff
Certificate serial: 0194BCE0B81D5AE69047D73046640EB5E46A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rMSPelkSBYjUFw6igV5q5RvmvP8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d8679e-46bb-44f5-ba52-b52b3a236fa7/1/rMSPelkSBYjUFw6igV5q5RvmvP8.mft
Manifest number: 04C1
Signing time: Fri 31 Jan 2025 15:00:31 +0000
Manifest this update: Fri 31 Jan 2025 15:00:31 +0000
Manifest next update: Sat 01 Feb 2025 15:00:31 +0000
Files and hashes: 1: 9aHsA3_Ynggs276_sCFsSz4MycM.roa (hash: qPhn5WBiWKeIsNs1cjOrwQopHwGcYtGq0upChF7kDvI=)
2: B0641shvDQ9p2BIgOLZHHAVjZSw.roa (hash: bvzmPdErYhIKPNksHZ+/ri9guEtRIMbmfasCvweNx4w=)
3: XrEnfRZ_aS_v253DnFB44a25MQg.roa (hash: cz7gfFsvOBuR8Jx82WCxw05R+M3PHvihU0+XIidI9k8=)
4: rMSPelkSBYjUFw6igV5q5RvmvP8.crl (hash: 49OU++ZDdzC21C7c9HxgSU55VnEwhHBSQ7yKRRdaDsE=)
5: xspPEiEQGiUUjQNMRrR4LTirJ8g.roa (hash: ij24ceO8VLn5TPnpgS1+UFG8iPy5YqTgJqLC4WCf/eM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:b8:1d:5a:e6:90:47:d7:30:46:64:0e:b5:e4:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acc48f7a59120588d4170ea2815e6ae51be6bcff
Validity
Not Before: Jan 31 15:00:31 2025 GMT
Not After : Feb 1 15:00:31 2025 GMT
Subject: CN=446addafe2b1618efad69f6d0e56c7775bb74fca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:35:c4:84:e0:3c:18:69:8e:e3:31:6e:b2:3e:
3c:40:c1:91:c5:48:23:e2:fc:9b:d0:ce:e5:be:a7:
1f:26:a1:0c:8d:f1:49:a1:b2:a0:b1:da:fe:24:df:
c4:e9:1d:e1:ab:54:0e:ee:bc:ca:c5:6f:e1:b1:98:
75:cb:00:f1:18:94:56:6a:d3:e7:00:ce:52:1d:03:
ca:d0:96:83:6b:69:cb:29:4d:c6:e1:4d:4b:03:d1:
b8:89:31:19:31:2e:28:d4:7a:e9:fc:b1:1c:d5:99:
a6:84:95:34:bb:d8:25:06:e6:a2:d0:40:85:22:8a:
ee:32:d1:2d:6e:5c:c5:d5:12:cd:a3:cd:d1:be:81:
51:fd:3b:78:ce:72:d0:c9:69:32:4e:ba:d7:d6:ec:
4c:eb:b2:72:66:bb:d0:68:e7:86:ab:f8:c2:82:25:
dc:45:f5:b9:cc:52:d9:f4:e7:52:ac:51:ed:f9:7a:
7c:f9:f0:69:5b:6a:82:1b:c5:ea:13:94:00:fe:71:
91:83:ac:bc:8c:76:d5:d5:12:c4:9e:f5:bb:05:77:
1f:fb:2f:48:30:53:ce:22:ce:47:b0:eb:97:ff:f5:
9e:99:f4:f9:12:0f:27:25:8b:b0:fb:0b:84:c8:f9:
45:9d:e0:1e:5a:ee:ad:d6:48:64:9a:65:a8:8e:eb:
4d:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:6A:DD:AF:E2:B1:61:8E:FA:D6:9F:6D:0E:56:C7:77:5B:B7:4F:CA
X509v3 Authority Key Identifier:
keyid:AC:C4:8F:7A:59:12:05:88:D4:17:0E:A2:81:5E:6A:E5:1B:E6:BC:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rMSPelkSBYjUFw6igV5q5RvmvP8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d8679e-46bb-44f5-ba52-b52b3a236fa7/1/rMSPelkSBYjUFw6igV5q5RvmvP8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d8679e-46bb-44f5-ba52-b52b3a236fa7/1/rMSPelkSBYjUFw6igV5q5RvmvP8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:05:b7:9c:6b:98:d8:6e:0c:73:da:89:90:27:25:95:1c:a6:
fe:be:ae:c0:26:ef:35:18:6f:d0:d1:4f:d0:38:73:28:a5:39:
20:dd:d8:bc:7a:77:65:b1:08:cc:64:89:05:a5:79:b0:e8:2f:
c7:02:23:3e:d6:69:c5:5e:27:7a:ac:8d:e7:60:e6:81:1f:a0:
c4:42:c5:8e:da:86:c1:19:81:a8:12:5d:9e:dc:a8:68:a4:c2:
f1:2f:42:88:d6:45:04:c2:b4:71:7a:3e:70:1e:16:cd:90:31:
5a:10:c2:98:0e:7d:60:7e:e8:40:7e:40:3c:01:a0:7c:28:e4:
8b:9f:93:d6:8d:01:29:ce:ca:a3:f7:73:05:c2:0c:85:18:d2:
1b:43:54:6e:f3:88:0b:cc:27:5b:f7:d0:4e:44:98:a5:5e:2a:
95:2c:a6:23:19:15:3c:09:68:f2:98:12:eb:62:94:d6:d9:e6:
08:e5:9d:c7:ea:f6:95:b9:9c:0b:c7:8c:34:ef:d9:8b:2c:30:
51:93:a0:79:48:3e:04:5a:cb:dd:02:5d:dc:76:99:69:28:62:
16:b4:42:dd:18:c1:ee:6a:a6:2d:f5:1f:25:6b:26:09:09:b3:
d7:a7:79:5b:29:a4:5e:1f:5e:ec:65:9a:f6:55:37:ac:4a:81:
f0:e6:56:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:54 2025 by rpki-client