Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/d4dade-caef-4cd0-aef3-004f0cb3ed77/1/MDVUbqWweQVJyguhuyo-Hbrko9o.mft
File: MDVUbqWweQVJyguhuyo-Hbrko9o.mft (raw, json)
Hash identifier: A1uNChsDGFTkxNfOJ70vfip91Z6RA+e9UU1MI4YkN7w=
Subject key identifier: A2:4F:99:FF:CB:1D:B4:A8:0C:98:E0:68:69:65:C4:EF:7A:F5:0C:84
Authority key identifier: 30:35:54:6E:A5:B0:79:05:49:CA:0B:A1:BB:2A:3E:1D:BA:E4:A3:DA
Certificate issuer: /CN=3035546ea5b0790549ca0ba1bb2a3e1dbae4a3da
Certificate serial: 0194BC728A0520CC68196F239E8AEDDD8165
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MDVUbqWweQVJyguhuyo-Hbrko9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/d4dade-caef-4cd0-aef3-004f0cb3ed77/1/MDVUbqWweQVJyguhuyo-Hbrko9o.mft
Manifest number: 1029
Signing time: Fri 31 Jan 2025 13:00:10 +0000
Manifest this update: Fri 31 Jan 2025 13:00:10 +0000
Manifest next update: Sat 01 Feb 2025 13:00:10 +0000
Files and hashes: 1: 2W6axHjolbpaH6HEq0QZHunfxqw.roa (hash: wviH1ELaB1e2Lcqmt6CIweQCBrQQn4JSYfHt2lakpZo=)
2: MDVUbqWweQVJyguhuyo-Hbrko9o.crl (hash: YZzq+D48c3T+vIU4cXFzyUW1ORLB2Ka/5o4GUw1iCCM=)
3: rrMUUFpVeR29bf5As6_7n50ECNM.roa (hash: kpYzrs/MH+Fk5UtuYnqob2xS0TbxQg7bm0bqEnSyqG0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:8a:05:20:cc:68:19:6f:23:9e:8a:ed:dd:81:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3035546ea5b0790549ca0ba1bb2a3e1dbae4a3da
Validity
Not Before: Jan 31 13:00:10 2025 GMT
Not After : Feb 1 13:00:10 2025 GMT
Subject: CN=a24f99ffcb1db4a80c98e0686965c4ef7af50c84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ef:e5:f8:e1:4b:02:95:ee:3d:f1:f9:3e:f6:
72:f7:1c:bc:66:c5:21:2c:96:fd:9d:3e:d2:30:61:
bd:54:ca:5b:f3:da:a1:3d:ec:5c:68:8c:1e:76:74:
be:7e:4d:7b:f1:5a:7a:f5:99:6e:0e:ff:a7:49:c3:
af:ac:e2:bf:1c:4f:f6:e1:d1:1f:52:b9:0c:f1:6e:
28:2c:4a:89:4a:34:24:92:d1:63:77:99:fe:c2:ca:
91:a0:83:75:18:99:39:ab:26:b5:2a:60:9e:ae:8d:
8a:eb:c1:3c:02:d5:bf:46:00:e1:7c:64:d5:da:2a:
c2:16:f8:0f:74:1a:f6:45:20:5d:13:8c:1e:24:1b:
0d:ba:d7:12:38:a9:72:8c:89:6b:5e:27:0c:e5:a5:
2c:2d:90:31:ad:df:ca:67:1a:1b:4a:9c:d6:2f:f7:
7a:4e:66:24:94:42:b5:43:6e:7d:80:30:ff:43:99:
c5:97:2e:eb:5b:4c:c2:4a:f6:7a:1b:1c:bc:0c:a2:
d1:3d:13:69:19:e0:02:e1:83:2f:b0:a8:71:c4:83:
1a:81:5e:d1:dd:02:c9:09:ec:d3:e6:5e:9e:db:13:
2e:e1:73:e8:1e:98:45:b5:10:f4:0f:f5:89:60:e0:
32:e6:e2:9b:16:20:51:1a:7b:6e:1e:03:98:50:b8:
c2:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:4F:99:FF:CB:1D:B4:A8:0C:98:E0:68:69:65:C4:EF:7A:F5:0C:84
X509v3 Authority Key Identifier:
keyid:30:35:54:6E:A5:B0:79:05:49:CA:0B:A1:BB:2A:3E:1D:BA:E4:A3:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MDVUbqWweQVJyguhuyo-Hbrko9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/d4dade-caef-4cd0-aef3-004f0cb3ed77/1/MDVUbqWweQVJyguhuyo-Hbrko9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/d4dade-caef-4cd0-aef3-004f0cb3ed77/1/MDVUbqWweQVJyguhuyo-Hbrko9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:3d:82:0f:94:42:f9:4d:51:c0:61:85:83:7e:c9:51:73:7a:
6e:60:61:d9:e3:8c:7c:e6:2d:b6:2e:82:c1:9c:cf:d9:48:12:
f7:77:a4:76:76:2e:a5:f4:11:c5:9a:58:48:bc:22:7b:7d:5f:
b9:62:0d:e9:57:a6:62:5f:39:cb:99:37:6c:8b:a8:b6:83:c5:
5a:3a:c2:6b:07:c6:45:09:3b:ee:ee:c2:0d:a2:99:28:1a:56:
85:25:91:06:1e:64:54:07:7e:ef:66:b8:1c:db:5c:59:c9:cf:
a1:d9:4f:55:2b:c4:b0:42:da:43:6b:e5:45:52:a4:97:b9:f3:
c1:bf:bd:26:0d:1c:8e:f0:fd:76:55:9d:53:88:6f:06:50:9c:
30:8f:85:42:6a:39:3f:35:31:23:75:e9:2e:eb:eb:07:96:56:
de:5b:19:b5:7c:71:f2:26:2a:5b:4f:3e:c0:e4:d0:20:39:43:
2a:e3:f0:7a:87:3d:8b:c2:de:16:db:77:2b:0c:50:71:e0:82:
0d:ff:9a:80:ac:34:95:d2:b5:0e:2d:5b:33:45:30:6a:b8:cc:
9d:54:78:81:b6:f1:b5:5b:2c:47:52:e4:c0:bd:7c:76:fa:e4:
05:ea:cb:f9:2b:0a:45:18:ce:94:df:41:e9:9f:60:46:47:8a:
e8:ef:a7:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:44:34 2025 by rpki-client