Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/dee7e1-cf51-43cb-ad36-7fae065b646a/1/MvBHo0IShysLH_gE7gIrAq91_-0.mft
File: MvBHo0IShysLH_gE7gIrAq91_-0.mft (raw, json)
Hash identifier: TKMyu5zliuTT/O32ZN+4D/f14af5yOEAuhOy9d3A4BE=
Subject key identifier: 4F:E1:77:BD:2E:B4:14:EA:96:EF:C2:A1:44:31:02:51:DE:16:B2:5E
Authority key identifier: 32:F0:47:A3:42:12:87:2B:0B:1F:F8:04:EE:02:2B:02:AF:75:FF:ED
Certificate issuer: /CN=32f047a34212872b0b1ff804ee022b02af75ffed
Certificate serial: 0194BCE0DA7BA20BB70D2234C1CA77E13314
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MvBHo0IShysLH_gE7gIrAq91_-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/dee7e1-cf51-43cb-ad36-7fae065b646a/1/MvBHo0IShysLH_gE7gIrAq91_-0.mft
Manifest number: 03D5
Signing time: Fri 31 Jan 2025 15:00:40 +0000
Manifest this update: Fri 31 Jan 2025 15:00:40 +0000
Manifest next update: Sat 01 Feb 2025 15:00:40 +0000
Files and hashes: 1: MvBHo0IShysLH_gE7gIrAq91_-0.crl (hash: zsQ8A8GMB7DD2lFfgolpuLL+rwkqEQKCAsQkoMsDBOA=)
2: WgGE8SmHkkHtiKjEfowQOh6KXV8.roa (hash: 22fxBEDWF5kPp/e3BDEYhqrTgPBi1KncqCiTSsX2CWM=)
3: pvxgjOK61sSAIjSKXGp9wCqGnds.roa (hash: cyj8Q0roEhc5/yo7oP4F2A5FfhnYWsPzbSEckXutgEg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:da:7b:a2:0b:b7:0d:22:34:c1:ca:77:e1:33:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32f047a34212872b0b1ff804ee022b02af75ffed
Validity
Not Before: Jan 31 15:00:40 2025 GMT
Not After : Feb 1 15:00:40 2025 GMT
Subject: CN=4fe177bd2eb414ea96efc2a144310251de16b25e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:91:46:8c:4e:02:e3:22:b1:c2:3a:d3:c3:62:
4d:d9:54:2e:09:a3:6d:fe:16:78:14:ce:e8:d6:eb:
77:32:2d:f9:1f:47:9d:a1:8e:e4:c0:fc:4d:7c:53:
17:82:10:e0:fb:38:95:f2:65:70:04:00:da:1e:a0:
f2:5d:8b:14:84:df:f2:16:35:54:7c:84:56:29:e8:
e4:e8:26:5a:1b:2b:03:29:af:de:ab:40:ae:00:4b:
2f:a6:9a:3c:ae:44:37:11:3c:e9:46:4e:79:cd:2b:
47:3b:42:64:7f:8f:b6:c3:4c:3f:3b:47:c9:ab:b5:
06:a4:c0:30:9a:d2:e7:13:33:a0:1c:cc:1b:19:ad:
ed:e8:4e:c5:64:06:d9:50:4b:b2:12:e3:cc:41:61:
e0:88:99:b2:df:e4:d8:c5:fc:8c:b1:61:3b:0b:22:
cc:b5:a0:ea:52:9e:05:63:8a:d6:7f:e6:c9:29:b5:
54:f6:cb:dc:a0:f4:62:54:35:b0:d8:b6:d4:65:0f:
68:5f:4f:a2:73:84:87:6e:c9:da:e9:e4:1d:ef:4c:
cf:46:29:d2:d0:2d:1c:e5:39:42:bc:18:ac:5c:ab:
f7:bf:76:87:fc:b4:9b:5d:ac:51:19:6a:83:2f:4e:
ac:0f:c5:c9:99:c5:6a:d7:f6:20:46:34:d3:5e:59:
28:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:E1:77:BD:2E:B4:14:EA:96:EF:C2:A1:44:31:02:51:DE:16:B2:5E
X509v3 Authority Key Identifier:
keyid:32:F0:47:A3:42:12:87:2B:0B:1F:F8:04:EE:02:2B:02:AF:75:FF:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MvBHo0IShysLH_gE7gIrAq91_-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/dee7e1-cf51-43cb-ad36-7fae065b646a/1/MvBHo0IShysLH_gE7gIrAq91_-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/dee7e1-cf51-43cb-ad36-7fae065b646a/1/MvBHo0IShysLH_gE7gIrAq91_-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:28:93:1e:98:7f:71:ad:85:72:5c:9d:f1:82:c7:8d:b4:24:
bb:3a:7c:85:88:b6:81:0c:11:54:62:22:dc:c5:65:fe:8d:68:
81:81:a4:69:81:43:a9:44:d3:46:07:21:f7:e9:d2:04:8f:5d:
47:75:57:3d:10:64:0c:50:71:c2:c7:1c:5c:68:3e:7b:fd:b6:
4b:83:cc:32:dd:3a:de:2b:78:66:4b:7f:42:97:93:4f:70:c4:
dc:65:d6:5d:e4:d4:27:36:a3:8a:31:40:23:fc:0c:47:16:3e:
11:8e:dd:09:ab:25:54:10:3c:a2:55:9c:ae:91:9a:8d:9a:c8:
93:c1:d5:76:3c:4a:ff:31:71:dc:18:f0:b2:4e:d8:89:9c:ad:
12:50:04:83:dd:be:f7:12:0a:7f:3e:00:a4:02:2c:af:f7:bd:
10:af:92:ac:39:d6:87:49:4c:47:19:2b:83:a4:b6:88:ef:36:
ca:e9:c9:59:62:39:0d:e7:aa:f4:44:e8:fa:03:e8:ca:d0:80:
2e:81:5a:bc:04:d7:3d:0c:86:a2:74:0b:f9:77:e4:6b:c1:d4:
f5:4f:8a:4a:9d:76:94:14:a3:03:39:b8:e5:50:8e:6f:4c:3f:
82:13:4e:b7:b2:a4:ca:b0:fc:ab:71:3b:75:d3:bd:e9:34:cb:
41:7c:31:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 13:22:42 2025 by rpki-client