Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/8e08b3-487c-485a-9479-b084c73861b8/1/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.mft
File: Mh7EYm7N4lM1r_CIsExxOVrmvCQ.mft (raw, json)
Hash identifier: gMrbSc6dxJdD9t2i6PyE6Efq6vvnYEA2jAFEdI5qeGs=
Subject key identifier: 42:44:D8:B8:DF:0B:3D:7F:16:3A:72:3B:38:92:AB:4D:09:5E:31:A3
Authority key identifier: 32:1E:C4:62:6E:CD:E2:53:35:AF:F0:88:B0:4C:71:39:5A:E6:BC:24
Certificate issuer: /CN=321ec4626ecde25335aff088b04c71395ae6bc24
Certificate serial: 0194BC3C85506F69F6CE3DB32DE9F6030E81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/8e08b3-487c-485a-9479-b084c73861b8/1/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 12:01:10 +0000
Manifest this update: Fri 31 Jan 2025 12:01:10 +0000
Manifest next update: Sat 01 Feb 2025 12:01:10 +0000
Files and hashes: 1: DOtwGbtfl6s-x4f6aE2W8WlzVNw.roa (hash: ZfbdXBQ4B0vsaA9tpmB6Y8tzcJv8ZqF7FOHdCGM+Zl4=)
2: Mh7EYm7N4lM1r_CIsExxOVrmvCQ.crl (hash: fjz5CVZyXDeh0PnKDWLGb0ejMExe+LxCeYfGQ3Om5mA=)
3: VEwZGvZC8CGE0lsKNB1ekuITOKI.roa (hash: ruqW88ZWJqaz7y+HRNbaxPPhfL3FKhp6ygNCnPCWApo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:85:50:6f:69:f6:ce:3d:b3:2d:e9:f6:03:0e:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=321ec4626ecde25335aff088b04c71395ae6bc24
Validity
Not Before: Jan 31 12:01:10 2025 GMT
Not After : Feb 1 12:01:10 2025 GMT
Subject: CN=4244d8b8df0b3d7f163a723b3892ab4d095e31a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:36:1c:b5:5d:fd:b9:e8:67:41:d3:eb:fe:a2:
4d:8e:6b:52:51:b8:e2:4f:c6:6f:ca:64:88:b5:f2:
eb:31:7c:88:82:e0:09:a6:dc:5a:7b:1b:ee:61:36:
f3:67:61:b6:ec:62:cc:5b:c5:5a:f8:2d:6c:dd:44:
79:f4:09:66:88:b6:ef:82:a5:9f:cc:ba:1f:e4:e6:
0a:ee:a8:0b:c9:dd:f7:bf:ac:83:b2:3f:c5:16:b1:
ee:87:84:a0:ef:7c:86:43:07:37:65:80:ac:3e:39:
6c:8b:92:60:02:85:9e:ee:64:2c:01:1a:15:99:65:
7b:98:46:20:8d:55:d3:64:2d:29:08:dd:db:01:64:
5a:53:3a:74:d7:b6:ae:2e:f8:d3:47:16:95:3d:d6:
92:c0:b5:40:23:1b:c8:66:d6:44:e8:55:05:b5:31:
10:04:cc:aa:3f:6a:11:15:77:4c:f2:5f:3c:d1:96:
da:2c:55:6c:ac:d5:49:87:8d:44:3a:46:a7:09:99:
28:61:8b:85:d4:28:63:b6:5a:0b:df:5f:ae:ef:bb:
1a:0b:7b:b0:98:0a:fe:6a:91:26:6a:77:73:78:6e:
a4:a3:ed:26:3c:de:62:a0:74:8c:f1:30:28:cf:00:
b4:5e:fb:56:c2:5d:37:52:2f:8c:ee:45:a0:7e:9e:
b4:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:44:D8:B8:DF:0B:3D:7F:16:3A:72:3B:38:92:AB:4D:09:5E:31:A3
X509v3 Authority Key Identifier:
keyid:32:1E:C4:62:6E:CD:E2:53:35:AF:F0:88:B0:4C:71:39:5A:E6:BC:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8e08b3-487c-485a-9479-b084c73861b8/1/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8e08b3-487c-485a-9479-b084c73861b8/1/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:15:2f:81:10:04:72:b0:9e:93:f9:b6:71:b4:d9:a0:aa:8c:
1b:bf:50:57:a9:68:9f:d4:c5:d4:b5:3e:0b:85:5c:f9:6c:cb:
f8:5c:a6:56:cb:91:6b:36:87:62:9a:a1:aa:72:02:35:bb:f0:
50:1c:cc:84:d5:81:c6:cc:36:fa:80:48:90:44:67:a7:cd:45:
f4:ff:05:46:e5:2b:70:f0:71:8d:45:5e:4c:3e:c3:43:36:65:
43:50:dd:38:fc:26:a5:8e:30:e2:c6:46:61:51:2a:b3:90:59:
4a:3d:e5:3a:01:9d:cc:d6:74:72:a0:9b:6b:76:8a:ca:7a:93:
15:2b:e8:f7:ee:e2:35:33:56:31:f6:a4:75:eb:b4:95:79:b9:
0b:51:64:f7:c9:01:9a:28:12:73:66:15:76:4a:e7:24:54:43:
29:86:99:a7:95:0e:47:33:60:a3:02:19:b0:61:b7:4a:46:b5:
30:96:80:a1:c7:97:c9:53:9c:e2:4e:7c:0b:c0:28:8b:59:5f:
76:19:f8:4e:a8:ed:3b:18:2c:f3:8e:33:db:c5:57:fc:71:09:
6e:c1:50:2b:d9:76:d6:03:d8:57:b3:e8:25:bf:81:52:1f:40:
cc:c5:9b:6b:a1:c0:f8:e1:7b:ba:6e:95:dd:7d:c8:15:fd:c2:
05:d2:2b:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:14 2025 by rpki-client