Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/232cfd-76dc-49e9-a94d-5188ea17d9a9/1/MGavc-_zrCH_F6CVL_Nw5gykS10.mft
File: MGavc-_zrCH_F6CVL_Nw5gykS10.mft (raw, json)
Hash identifier: +E8B0KMc9zdg1skW8UltTMc/VVe9zBPmiBk0JteZvyM=
Subject key identifier: 2E:B9:45:0A:CA:32:F0:2F:08:3D:88:8E:D2:93:42:9D:94:E3:35:EC
Authority key identifier: 30:66:AF:73:EF:F3:AC:21:FF:17:A0:95:2F:F3:70:E6:0C:A4:4B:5D
Certificate issuer: /CN=3066af73eff3ac21ff17a0952ff370e60ca44b5d
Certificate serial: 0194BD858D7A3F53AD676A6519C3E56A6EAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MGavc-_zrCH_F6CVL_Nw5gykS10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/232cfd-76dc-49e9-a94d-5188ea17d9a9/1/MGavc-_zrCH_F6CVL_Nw5gykS10.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 18:00:33 +0000
Manifest this update: Fri 31 Jan 2025 18:00:33 +0000
Manifest next update: Sat 01 Feb 2025 18:00:33 +0000
Files and hashes: 1: MGavc-_zrCH_F6CVL_Nw5gykS10.crl (hash: yrYxQM3DRNRItcMt9YyRMFIxO39T9IRqF8cVg2cbk0Q=)
2: iic_3MWvnXwRjdS-4rnJnbVlZdw.roa (hash: ft3o3Jhs8krX+yoAKh9srXW+5Ly/fpaA/Ux+H2kgUMA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:8d:7a:3f:53:ad:67:6a:65:19:c3:e5:6a:6e:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3066af73eff3ac21ff17a0952ff370e60ca44b5d
Validity
Not Before: Jan 31 18:00:33 2025 GMT
Not After : Feb 1 18:00:33 2025 GMT
Subject: CN=2eb9450aca32f02f083d888ed293429d94e335ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:cf:60:f0:bb:82:65:70:87:a6:52:06:ca:3c:
a5:0a:af:5a:cc:bc:f4:2f:7a:55:c8:87:85:2f:51:
c3:06:b5:97:a2:18:b9:13:53:de:0a:62:f6:f5:8c:
3c:96:16:74:22:55:e6:22:3a:a9:06:3f:e5:5e:4c:
77:29:f9:25:b8:a4:76:f6:0b:45:97:ee:d9:ec:83:
cf:40:84:c4:68:d5:8d:ea:c8:52:59:4b:45:bc:bc:
8d:50:a6:50:a6:ba:d1:93:63:a9:b2:89:82:52:83:
d9:0d:c6:75:5b:66:e6:a7:ec:8b:f8:2f:8b:03:e4:
4b:b4:c1:b7:b6:cf:ee:c8:eb:b2:63:2f:81:03:0d:
e8:e9:48:90:38:c1:cd:2d:7d:66:f8:fa:d4:c8:48:
1a:b3:ac:fa:63:b5:27:59:1f:06:e4:93:5d:3b:95:
f7:dc:fb:02:5c:8f:cb:73:f7:e0:93:f6:29:ef:d8:
5d:b3:20:80:40:a6:0b:de:ba:30:60:31:ec:ee:d3:
8b:55:9f:5e:22:6a:79:fc:a0:b6:bd:22:8a:bc:db:
b8:51:21:7d:0c:0d:e7:be:85:07:84:b4:e3:5c:b8:
13:e7:3e:08:45:fc:e4:bb:67:52:dc:8b:d8:b4:51:
a5:1f:92:3c:28:ab:8b:37:d4:ed:51:48:dc:85:2b:
41:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:B9:45:0A:CA:32:F0:2F:08:3D:88:8E:D2:93:42:9D:94:E3:35:EC
X509v3 Authority Key Identifier:
keyid:30:66:AF:73:EF:F3:AC:21:FF:17:A0:95:2F:F3:70:E6:0C:A4:4B:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGavc-_zrCH_F6CVL_Nw5gykS10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/232cfd-76dc-49e9-a94d-5188ea17d9a9/1/MGavc-_zrCH_F6CVL_Nw5gykS10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/232cfd-76dc-49e9-a94d-5188ea17d9a9/1/MGavc-_zrCH_F6CVL_Nw5gykS10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:9a:77:10:09:b7:f3:6b:34:7b:33:df:76:5c:64:18:99:0d:
e6:a9:54:c6:93:52:89:ad:ce:fa:d0:17:17:d9:e8:a8:01:d2:
29:af:63:41:07:41:1a:ee:0f:ca:02:43:04:51:f3:d6:33:af:
af:c8:e8:6d:a1:98:7e:16:3f:dc:4b:d0:11:60:67:f4:c3:f9:
77:06:9e:b9:72:5d:85:0b:e8:6b:3c:aa:95:ec:d5:02:f8:a0:
37:db:f2:94:23:78:a9:46:a7:e0:b0:ab:71:7e:ad:04:3a:90:
9b:28:59:4a:be:d5:3c:3e:a2:7b:7f:55:2f:dc:c7:47:42:34:
88:8b:27:f6:cd:07:04:da:b3:e6:a2:3e:aa:8f:7c:46:0a:b1:
a7:f1:c2:6d:7e:bc:b5:bf:dd:fd:1b:4f:88:ed:11:3f:3e:37:
ac:74:e4:3e:0e:54:ac:8b:db:30:0d:34:13:67:af:a8:e6:1d:
47:52:37:60:91:ee:2a:72:36:f8:cd:c1:22:4f:85:36:b1:ca:
d8:55:70:38:ad:8a:a7:84:64:7e:55:13:64:c6:bf:76:13:41:
65:5f:be:60:9a:96:7b:8c:9a:7e:18:f6:35:00:7f:27:ab:e2:
e7:67:c9:50:98:c9:4c:e5:81:f8:58:96:20:26:d7:6c:a9:7d:
21:d9:05:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:05:06 2025 by rpki-client