Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/3a8dd0-3875-4eb2-b633-e2665d447d32/1/muB8lKimr3pdGPTqrqeeJt-TIhQ.mft
File: muB8lKimr3pdGPTqrqeeJt-TIhQ.mft (raw, json)
Hash identifier: +N+7xgrwwO71JFKhfPkJpvR76GECl2/ZhswYo+o2gik=
Subject key identifier: CB:D1:FB:5D:DD:E1:77:6A:33:B2:00:93:7B:2E:E4:F4:FE:F6:E0:EA
Authority key identifier: 9A:E0:7C:94:A8:A6:AF:7A:5D:18:F4:EA:AE:A7:9E:26:DF:93:22:14
Certificate issuer: /CN=9ae07c94a8a6af7a5d18f4eaaea79e26df932214
Certificate serial: 0194BC0527413BBE51B701A343FCA43810A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/muB8lKimr3pdGPTqrqeeJt-TIhQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/3a8dd0-3875-4eb2-b633-e2665d447d32/1/muB8lKimr3pdGPTqrqeeJt-TIhQ.mft
Manifest number: 1430
Signing time: Fri 31 Jan 2025 11:00:41 +0000
Manifest this update: Fri 31 Jan 2025 11:00:41 +0000
Manifest next update: Sat 01 Feb 2025 11:00:41 +0000
Files and hashes: 1: hirmv4l90daqtziUonbqzbb8z94.roa (hash: 2pWfc5u+sM7C4s4+z6TKeGnl46lQEVqcp+2HcKGG7wg=)
2: muB8lKimr3pdGPTqrqeeJt-TIhQ.crl (hash: IduzAAJMiaOKpuaiZy7+fnICRnmNY/aztPDgCaYMOR0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:27:41:3b:be:51:b7:01:a3:43:fc:a4:38:10:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ae07c94a8a6af7a5d18f4eaaea79e26df932214
Validity
Not Before: Jan 31 11:00:41 2025 GMT
Not After : Feb 1 11:00:41 2025 GMT
Subject: CN=cbd1fb5ddde1776a33b200937b2ee4f4fef6e0ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:f9:43:99:b6:44:0d:bb:12:e4:9d:fa:6b:95:
95:ec:1f:b5:c6:d0:36:01:04:78:7f:f6:54:66:ac:
f2:73:a9:3c:65:38:e9:d9:7d:78:7e:e1:a8:a4:2c:
3c:d8:e8:91:60:c8:21:27:e3:ec:6a:64:27:bf:12:
84:c0:e5:f2:ef:ff:32:e6:f0:7a:0c:39:0c:e4:a3:
17:69:5f:98:f0:aa:d7:55:8d:9b:91:73:82:7a:4a:
b7:04:19:0a:2c:63:d6:c7:99:05:a1:af:62:ab:fe:
f2:63:a8:10:5f:ba:36:82:1a:99:ec:0e:ce:1b:c8:
92:34:bd:c0:ad:99:b3:ca:fa:4d:16:fe:b9:52:f4:
49:31:6a:4d:99:4b:13:9a:12:c6:fa:85:c1:12:c1:
7d:70:d7:35:38:d9:c6:0b:c6:2c:6e:c8:69:65:4b:
c1:24:c0:32:e8:27:23:91:59:78:85:78:47:28:3b:
f2:13:74:d1:f4:71:34:31:33:9a:4f:ae:aa:f2:d4:
be:a3:e8:61:b0:90:d6:4b:7c:dd:17:1d:6a:1a:76:
e5:cd:7c:a0:98:d8:9c:fc:d3:9f:08:b8:16:a5:c0:
2f:95:1c:52:e2:95:04:e4:4c:a6:81:0a:88:cb:ec:
14:d3:47:29:4e:84:0e:e9:d7:ea:0f:b7:cf:45:46:
06:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:D1:FB:5D:DD:E1:77:6A:33:B2:00:93:7B:2E:E4:F4:FE:F6:E0:EA
X509v3 Authority Key Identifier:
keyid:9A:E0:7C:94:A8:A6:AF:7A:5D:18:F4:EA:AE:A7:9E:26:DF:93:22:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/muB8lKimr3pdGPTqrqeeJt-TIhQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/3a8dd0-3875-4eb2-b633-e2665d447d32/1/muB8lKimr3pdGPTqrqeeJt-TIhQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/3a8dd0-3875-4eb2-b633-e2665d447d32/1/muB8lKimr3pdGPTqrqeeJt-TIhQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:ea:96:9f:f2:35:2b:dc:c8:94:38:a6:9b:ce:e4:d4:ac:16:
12:39:02:2e:76:71:29:35:bd:07:89:90:91:10:36:c1:5a:17:
5d:8a:9c:6a:4f:59:3d:03:cb:99:f1:03:e4:80:47:c1:e8:70:
05:c9:f7:e3:23:96:4f:d3:cb:f9:c2:f8:b2:e9:1e:14:1a:11:
20:4d:eb:72:c0:9e:e7:d1:e0:ad:c1:a8:5e:c2:93:e1:6c:ed:
c2:0d:45:99:cb:44:3b:05:6b:3c:58:67:5b:57:ca:04:66:a5:
c7:bb:e7:d0:00:ba:a5:a9:3d:c1:be:d7:96:db:76:54:d7:86:
56:e8:cb:2f:3d:48:76:4d:1c:d7:3c:92:0b:7b:10:e3:5d:8f:
a5:41:48:5d:2b:da:e6:f2:91:37:72:d3:0b:4a:e8:ad:00:d9:
c7:72:60:9a:8a:f0:2e:22:9e:45:67:04:c0:b6:b0:e5:ff:8d:
66:0e:b9:fc:ba:57:7e:d5:ef:52:de:6d:d4:37:33:6e:82:d8:
80:21:e7:97:6c:e9:a3:e2:a9:7e:8f:29:42:0d:3d:9b:dc:5e:
09:a8:2b:e2:23:2e:3c:60:48:19:7c:1b:ca:f5:4b:0e:9f:e1:
83:f4:1a:6c:67:d2:19:e2:d4:1d:a9:45:46:3a:69:ad:9e:52:
f3:9b:0b:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 00:23:06 2025 by rpki-client