Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/73c829-1518-4d41-92c2-7e0ab8bcae89/1/MW9DO7TO3XLYbETthZmQNSK15PE.mft
File: MW9DO7TO3XLYbETthZmQNSK15PE.mft (raw, json)
Hash identifier: iRmJzbYMukr2l4K3kkJCFu+1c7rM1mR4RnlDCb29VVE=
Subject key identifier: EE:2E:89:20:01:9E:90:BA:4E:09:10:97:28:9A:5C:6B:54:E8:AD:F2
Authority key identifier: 31:6F:43:3B:B4:CE:DD:72:D8:6C:44:ED:85:99:90:35:22:B5:E4:F1
Certificate issuer: /CN=316f433bb4cedd72d86c44ed8599903522b5e4f1
Certificate serial: 0194BC72E60A09F2D7C01201556A85D2E5C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MW9DO7TO3XLYbETthZmQNSK15PE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/73c829-1518-4d41-92c2-7e0ab8bcae89/1/MW9DO7TO3XLYbETthZmQNSK15PE.mft
Manifest number: 0F0A
Signing time: Fri 31 Jan 2025 13:00:34 +0000
Manifest this update: Fri 31 Jan 2025 13:00:34 +0000
Manifest next update: Sat 01 Feb 2025 13:00:34 +0000
Files and hashes: 1: MW9DO7TO3XLYbETthZmQNSK15PE.crl (hash: jobfHKVsUbkKGsYN4MSqS5OQaBfBlbdl5qQiJm9IPy4=)
2: ueb8jWjZsgheztsTNqHl1-Lrnro.roa (hash: bi/jdKM4OGa/0sgftxqgBQAErRWTNtYfIJIP4pXeceo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:e6:0a:09:f2:d7:c0:12:01:55:6a:85:d2:e5:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=316f433bb4cedd72d86c44ed8599903522b5e4f1
Validity
Not Before: Jan 31 13:00:34 2025 GMT
Not After : Feb 1 13:00:34 2025 GMT
Subject: CN=ee2e8920019e90ba4e091097289a5c6b54e8adf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a0:23:ca:b2:da:fb:ce:26:cd:d1:bf:8a:d5:
01:13:dd:ed:68:04:ab:b3:b7:72:cf:c5:c2:61:d7:
f8:7f:1d:21:27:23:19:ff:74:71:fd:98:be:a5:bc:
d8:6f:48:ea:06:d4:09:62:00:67:d4:62:58:4e:32:
80:c2:ee:e8:de:33:e5:0e:6a:41:c7:b1:3a:bc:71:
f7:b6:e9:a8:2c:fe:29:dd:f5:c6:a3:6c:50:9a:2b:
7b:ce:50:7f:1c:e7:96:d0:11:70:3f:2f:00:e3:8c:
53:45:15:09:11:97:a2:25:bb:24:f6:07:ce:6f:03:
0f:34:21:2c:a7:28:be:72:4d:12:57:dc:d6:fa:ca:
03:6a:20:31:f4:06:70:75:ef:6d:02:40:60:cc:f6:
db:18:5d:44:4c:f7:0d:4b:08:08:18:c7:13:18:f2:
d2:30:4b:0d:bf:15:bc:36:bb:a8:5f:c9:24:b3:c8:
18:34:1d:6a:8e:7f:53:91:1d:bb:de:51:de:dd:1c:
91:f1:c0:e3:40:fa:66:e9:bb:0e:11:11:cf:5f:22:
31:f0:c1:0a:65:e6:a0:cd:c5:fd:a4:cc:00:a0:bd:
88:5a:c8:23:72:a1:4d:96:f7:d7:ef:8a:cf:1f:2e:
28:64:84:b1:40:95:6a:73:b4:d0:84:33:95:14:92:
f6:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:2E:89:20:01:9E:90:BA:4E:09:10:97:28:9A:5C:6B:54:E8:AD:F2
X509v3 Authority Key Identifier:
keyid:31:6F:43:3B:B4:CE:DD:72:D8:6C:44:ED:85:99:90:35:22:B5:E4:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MW9DO7TO3XLYbETthZmQNSK15PE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/73c829-1518-4d41-92c2-7e0ab8bcae89/1/MW9DO7TO3XLYbETthZmQNSK15PE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/73c829-1518-4d41-92c2-7e0ab8bcae89/1/MW9DO7TO3XLYbETthZmQNSK15PE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:3e:d5:a6:a3:37:4e:1c:7b:dd:4d:11:d9:4d:68:4a:fe:24:
e3:df:7d:7f:00:96:c8:f4:9c:f4:80:4b:ab:fb:7d:33:0b:4a:
0b:38:c3:36:88:21:4d:3b:71:79:3c:bb:9c:d3:ad:46:d9:f7:
51:17:c4:bb:a2:9c:22:3c:3a:fd:2b:2d:61:42:f8:c9:81:46:
51:e1:cc:4e:82:9d:73:e9:97:1e:50:02:de:44:cf:38:46:70:
60:fa:9b:76:95:6f:27:14:eb:76:3a:57:d0:92:ba:df:2d:06:
e4:47:40:7c:d0:f8:6c:13:ea:a4:ad:8a:5d:94:75:9a:6c:c5:
3d:56:9e:35:67:f0:4c:10:b2:df:7e:7f:fc:25:26:74:57:22:
10:5a:5b:cb:4f:35:93:c6:cf:12:38:c2:da:d2:29:4b:3e:71:
9b:86:e4:2a:d1:ff:37:ac:a4:eb:50:38:d4:ab:9d:14:77:27:
ee:63:68:ec:93:23:4e:19:4a:4d:60:37:a8:44:ab:98:7d:99:
fe:47:89:fe:e7:58:51:24:15:a2:1d:f5:9c:87:b0:c1:f4:e3:
75:5d:8c:b6:61:0a:17:f3:15:76:31:cf:b0:9c:f5:1b:1c:49:
66:32:d9:9d:ab:96:9f:f1:60:42:8a:7a:21:e5:e7:d3:91:60:
9e:a3:14:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:46 2025 by rpki-client