Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/ff00c4-b728-44a0-962d-973db9ce68b5/1/MsK-SD_ye7jw3AnOD3HyqI6vfgc.mft
File: MsK-SD_ye7jw3AnOD3HyqI6vfgc.mft (raw, json)
Hash identifier: IdVMrztmNnnW7BUmrSOA7AaystnbJb5LiY8llY7s57U=
Subject key identifier: 5F:0F:D4:CA:FB:70:94:DE:C9:47:2F:06:4C:FA:C3:CD:A3:10:68:7D
Authority key identifier: 32:C2:BE:48:3F:F2:7B:B8:F0:DC:09:CE:0F:71:F2:A8:8E:AF:7E:07
Certificate issuer: /CN=32c2be483ff27bb8f0dc09ce0f71f2a88eaf7e07
Certificate serial: 0194BCE0C12F6D7C2892A8868EE2C6B5E6F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MsK-SD_ye7jw3AnOD3HyqI6vfgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/ff00c4-b728-44a0-962d-973db9ce68b5/1/MsK-SD_ye7jw3AnOD3HyqI6vfgc.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 15:00:33 +0000
Manifest this update: Fri 31 Jan 2025 15:00:33 +0000
Manifest next update: Sat 01 Feb 2025 15:00:33 +0000
Files and hashes: 1: 3Ld3_xMK0PlfZFY-qBwXca5iVGM.roa (hash: CjU6hi/Jh6Zo5sGQ2UDjZfEn9Czpv8lCLYgvh/6NOKs=)
2: MsK-SD_ye7jw3AnOD3HyqI6vfgc.crl (hash: VwNbjMxhr2r5fll3KHo9qrYyUK1wRLvoLeVLTjiGE0I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:c1:2f:6d:7c:28:92:a8:86:8e:e2:c6:b5:e6:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32c2be483ff27bb8f0dc09ce0f71f2a88eaf7e07
Validity
Not Before: Jan 31 15:00:33 2025 GMT
Not After : Feb 1 15:00:33 2025 GMT
Subject: CN=5f0fd4cafb7094dec9472f064cfac3cda310687d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f9:5e:ac:4b:37:61:0e:5c:7c:e2:95:06:a6:
78:2d:ba:b4:b2:37:b6:41:1b:b3:b4:40:5d:c0:4a:
f6:01:8c:6f:99:be:cc:15:f3:f2:f5:df:9e:f5:ea:
93:57:a4:e7:0a:a6:3e:23:16:20:ca:55:42:41:da:
87:df:0b:c2:55:8a:d4:39:1a:28:76:5a:35:de:16:
bc:3b:df:ae:ac:5b:5e:d4:f9:d8:dd:7e:0d:eb:35:
dc:85:17:2d:0f:d5:e9:56:a9:4b:66:f1:1c:97:84:
04:a6:2c:12:84:a9:86:e1:7b:3f:de:13:84:5c:19:
ed:c4:44:74:f7:b6:a1:23:74:e1:93:45:7b:fc:05:
66:2d:87:66:55:6d:ce:a2:2b:7f:ac:07:96:82:58:
0d:19:a4:29:52:5c:43:6c:c4:8a:da:ad:08:9b:7c:
2c:4f:fd:d0:fe:16:21:03:a4:36:14:6e:4c:cd:d8:
df:0f:b3:03:05:b1:67:03:21:35:cf:8b:4d:d2:1e:
b0:a5:4f:64:08:c3:fc:7f:e0:4b:17:a2:7c:f4:4f:
7d:5e:58:07:00:97:ed:d6:87:94:8b:e6:42:5c:c3:
ad:b5:68:07:e5:de:ff:59:14:32:b8:33:f9:f1:66:
89:d2:4e:26:3e:d4:d2:16:2c:88:7d:64:6d:48:38:
fe:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:0F:D4:CA:FB:70:94:DE:C9:47:2F:06:4C:FA:C3:CD:A3:10:68:7D
X509v3 Authority Key Identifier:
keyid:32:C2:BE:48:3F:F2:7B:B8:F0:DC:09:CE:0F:71:F2:A8:8E:AF:7E:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MsK-SD_ye7jw3AnOD3HyqI6vfgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/ff00c4-b728-44a0-962d-973db9ce68b5/1/MsK-SD_ye7jw3AnOD3HyqI6vfgc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/ff00c4-b728-44a0-962d-973db9ce68b5/1/MsK-SD_ye7jw3AnOD3HyqI6vfgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:c0:98:2a:43:a5:02:6a:8d:69:68:19:cc:17:6b:f7:23:f0:
40:3d:0f:38:51:b0:77:41:d6:27:4b:64:0a:87:d4:4a:e9:20:
ef:41:36:31:95:0a:00:ab:e3:d7:c9:01:85:2f:c5:e5:b8:9d:
4d:89:fb:7a:62:4e:40:31:34:c2:b7:45:33:a5:0f:34:07:ad:
d1:63:18:f1:85:f7:8b:20:dc:ea:ed:f2:09:16:90:db:c8:18:
44:a3:71:89:91:1f:e8:bf:f7:11:ac:e5:b1:5d:a0:27:f6:fa:
f2:44:f0:5e:53:9c:a5:6c:2f:ac:ee:a0:b8:0d:83:ba:6d:0e:
df:74:24:e2:b6:11:fc:7f:b2:81:0e:ed:af:4e:8b:65:c9:9f:
13:a8:56:97:9d:72:cb:27:5d:5c:83:e1:aa:9b:a5:ef:3f:9e:
18:6b:18:74:59:e3:b4:92:4f:14:4c:01:f9:3c:eb:ec:4a:60:
8e:24:22:77:a7:d0:0b:99:81:1c:21:f0:00:96:f6:b9:97:90:
1a:22:36:01:c1:72:fe:65:be:be:de:36:1e:01:09:58:2d:39:
fc:4f:9d:71:f0:86:9a:4e:57:d3:e1:96:58:90:8f:88:a0:63:
11:9d:24:d8:a0:a5:f1:ed:08:39:9e:7f:df:eb:df:df:59:54:
11:af:0b:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:18 2025 by rpki-client