Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/194c8e-e1b6-4aae-b5b2-7981fde6bf39/1/MEp5HcdPI3cjL7sHtq5xJAq5VV8.mft
File: MEp5HcdPI3cjL7sHtq5xJAq5VV8.mft (raw, json)
Hash identifier: uvnslVY1UalPeBcFb7poHZPcUWsuaT2EBaQW65w9Xz8=
Subject key identifier: 88:34:78:F0:C7:DD:69:9F:18:A9:A7:E3:A4:06:32:3D:15:60:0B:ED
Authority key identifier: 30:4A:79:1D:C7:4F:23:77:23:2F:BB:07:B6:AE:71:24:0A:B9:55:5F
Certificate issuer: /CN=304a791dc74f2377232fbb07b6ae71240ab9555f
Certificate serial: 0194BCAA3E955EA76EFBE614D1B83EB702B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MEp5HcdPI3cjL7sHtq5xJAq5VV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/194c8e-e1b6-4aae-b5b2-7981fde6bf39/1/MEp5HcdPI3cjL7sHtq5xJAq5VV8.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 14:01:01 +0000
Manifest this update: Fri 31 Jan 2025 14:01:01 +0000
Manifest next update: Sat 01 Feb 2025 14:01:01 +0000
Files and hashes: 1: MEp5HcdPI3cjL7sHtq5xJAq5VV8.crl (hash: utyghqBGBdBfQOGLWACQUwwlZ7gsRe91jt5pk7wcccM=)
2: uvD1NcvE0sPpTuXNxuhcQ5fPB6Q.roa (hash: OX3lDi/3JYwmJY7qneRsBmTQJvJ1wj5rMRdXng4YNi4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:3e:95:5e:a7:6e:fb:e6:14:d1:b8:3e:b7:02:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=304a791dc74f2377232fbb07b6ae71240ab9555f
Validity
Not Before: Jan 31 14:01:01 2025 GMT
Not After : Feb 1 14:01:01 2025 GMT
Subject: CN=883478f0c7dd699f18a9a7e3a406323d15600bed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:3a:fa:c5:01:ca:48:88:c3:f8:40:58:7a:2a:
f9:70:59:f9:95:21:86:d8:d5:ff:78:bb:ef:88:c5:
be:df:af:c4:a1:78:8a:d4:af:6f:a8:71:87:ec:8f:
55:97:55:c2:3d:d5:6b:e6:8d:f3:ab:1d:c0:ef:33:
ff:dc:f5:3c:02:e7:bc:91:20:29:9d:94:a5:c9:18:
8e:95:6b:80:59:f5:f6:56:71:28:7a:e6:c3:22:05:
39:fc:8c:f9:44:71:76:fa:ca:aa:47:3d:86:a0:23:
99:50:ad:c1:6e:63:03:c3:fa:6f:f0:4a:ab:ba:19:
d2:d6:b4:0d:1e:bd:40:d9:ba:d0:33:19:e6:b6:54:
84:9d:0b:aa:6f:85:fe:8b:18:11:23:95:b7:69:a6:
3f:05:f5:cc:9a:ce:06:af:7c:1f:46:9b:28:9e:40:
e3:f0:16:9f:04:eb:d8:08:8b:66:dd:68:3e:4f:63:
57:42:73:6e:12:a3:c5:00:0c:c1:e5:31:1e:31:da:
65:fd:1b:9b:a6:54:fb:82:7f:ac:f0:d3:0b:68:0a:
ea:60:bc:71:05:f5:f2:2f:7c:06:36:a9:cd:b1:4a:
08:29:bb:a1:e4:67:57:a2:59:86:db:c3:6f:f6:7f:
ed:42:bf:19:6e:41:a5:1c:ab:2f:96:26:6b:10:66:
89:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:34:78:F0:C7:DD:69:9F:18:A9:A7:E3:A4:06:32:3D:15:60:0B:ED
X509v3 Authority Key Identifier:
keyid:30:4A:79:1D:C7:4F:23:77:23:2F:BB:07:B6:AE:71:24:0A:B9:55:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MEp5HcdPI3cjL7sHtq5xJAq5VV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/194c8e-e1b6-4aae-b5b2-7981fde6bf39/1/MEp5HcdPI3cjL7sHtq5xJAq5VV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/194c8e-e1b6-4aae-b5b2-7981fde6bf39/1/MEp5HcdPI3cjL7sHtq5xJAq5VV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:6c:b6:9e:cf:ba:62:b9:43:e4:d5:64:cf:ad:c5:88:66:6a:
94:f2:76:73:c7:b6:de:bd:ae:6b:42:2c:b0:78:c1:60:b2:de:
e3:8c:97:f8:b0:39:7c:31:b2:59:3a:fa:29:04:8f:b8:56:d1:
58:a7:3f:b2:f8:f3:d1:9e:09:8e:5f:4a:7b:96:17:c5:cd:db:
a3:25:34:a9:81:b8:45:6f:b5:8c:7a:f7:6c:a5:26:51:45:b9:
b8:c8:5b:cc:1a:97:40:61:cb:42:e9:0c:38:10:09:3d:36:60:
d1:b2:47:ad:21:ce:33:b6:11:6c:f6:6a:15:d7:2b:e8:a2:60:
b6:0b:5e:1c:c0:9f:f0:9b:36:43:a5:70:4f:c3:7d:30:bc:4f:
fc:0e:80:32:08:db:90:1e:3f:ca:61:e9:cb:b7:f0:fa:a9:9d:
10:01:8a:8b:28:40:f1:4e:e3:2e:0f:a7:73:e6:10:7c:8e:64:
07:55:64:89:b4:a2:e3:e7:cc:65:68:77:86:b0:34:7c:a6:f4:
64:07:bb:9a:d4:c2:16:f9:28:d1:b3:cb:25:05:7e:5b:e3:c0:
ee:99:24:e9:b7:12:bc:8b:a3:e0:19:95:91:8e:cb:a6:6c:ce:
46:8d:b3:1e:bd:43:58:fd:41:c0:91:37:de:b8:c5:4f:c7:b0:
96:66:66:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:24:11 2025 by rpki-client