Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/0f19e9-1b2b-4812-ab5a-fdf84f83a274/1/M5VDMDSfV1Aqdq5umZh-_D47gQk.mft
File: M5VDMDSfV1Aqdq5umZh-_D47gQk.mft (raw, json)
Hash identifier: fx5SD8EZkNn3Y1lSqO/ylHt2gIdPi+ZzAPCEyctaFj4=
Subject key identifier: CB:88:B4:91:D6:06:85:53:71:A7:A0:1D:BA:47:59:1B:03:C4:0E:B7
Authority key identifier: 33:95:43:30:34:9F:57:50:2A:76:AE:6E:99:98:7E:FC:3E:3B:81:09
Certificate issuer: /CN=33954330349f57502a76ae6e99987efc3e3b8109
Certificate serial: 0194BCAA268C808BB9C256E1D53B8B59F6AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M5VDMDSfV1Aqdq5umZh-_D47gQk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/0f19e9-1b2b-4812-ab5a-fdf84f83a274/1/M5VDMDSfV1Aqdq5umZh-_D47gQk.mft
Manifest number: 1432
Signing time: Fri 31 Jan 2025 14:00:54 +0000
Manifest this update: Fri 31 Jan 2025 14:00:54 +0000
Manifest next update: Sat 01 Feb 2025 14:00:54 +0000
Files and hashes: 1: M5VDMDSfV1Aqdq5umZh-_D47gQk.crl (hash: U9Uoj8POaruerlow84D57xq6ndA7OWZhXzM5neMe1Ts=)
2: dZXpVyrQ8VbKvAp5COr0Cumw1Ew.roa (hash: tReFkDEyNqbnnxeZucnGGCRzuWm3mLRotTGRZWTwBCk=)
3: lq6yBpxyj8mQu1pcN8Yet01eUsA.roa (hash: jOVFBLabQ2MHZZoWNADP7Z+CInLcq/pubwpgW9d7+lE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:26:8c:80:8b:b9:c2:56:e1:d5:3b:8b:59:f6:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33954330349f57502a76ae6e99987efc3e3b8109
Validity
Not Before: Jan 31 14:00:54 2025 GMT
Not After : Feb 1 14:00:54 2025 GMT
Subject: CN=cb88b491d606855371a7a01dba47591b03c40eb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:33:58:38:7e:46:a4:67:26:19:e3:d0:f1:f5:
c7:d0:82:8c:be:f8:ce:ec:66:0d:47:ec:95:88:0d:
b5:1f:06:39:6f:23:71:5b:96:c5:69:e1:3a:35:d8:
6c:0b:c1:96:cc:6f:fd:8b:6e:93:91:16:30:0a:92:
43:5e:9f:77:ae:7a:2a:ab:ed:17:98:1b:02:e2:24:
fa:c7:b1:6a:2b:60:34:6f:4e:e6:11:2e:6c:b8:4e:
c8:cc:1d:1e:17:d1:80:58:80:bb:9f:56:c7:b5:a1:
ea:ac:7c:19:34:ea:eb:b5:2d:bd:1b:2f:fa:27:6b:
93:a3:61:9d:6e:5d:70:de:36:e1:ba:8d:37:8a:81:
37:b8:91:cc:8a:cf:a5:83:74:cb:81:de:95:ae:5e:
5a:bd:c0:48:12:1c:0b:cb:b5:a6:44:f7:3a:ee:81:
af:9b:a6:d6:7b:f8:8d:5e:30:d9:8c:d5:63:35:03:
c5:2d:d6:fb:cc:d9:b6:5a:bb:19:bd:a7:aa:af:83:
71:56:01:87:8b:69:f1:47:f2:f9:da:60:e1:cd:bc:
9b:97:2b:fc:50:60:f6:c6:2e:29:12:59:68:d1:4e:
90:e3:12:a3:55:38:f1:8d:01:35:0b:f8:bb:4a:da:
05:37:9a:d1:33:28:49:c9:62:75:b5:7c:cb:fa:36:
b2:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:88:B4:91:D6:06:85:53:71:A7:A0:1D:BA:47:59:1B:03:C4:0E:B7
X509v3 Authority Key Identifier:
keyid:33:95:43:30:34:9F:57:50:2A:76:AE:6E:99:98:7E:FC:3E:3B:81:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M5VDMDSfV1Aqdq5umZh-_D47gQk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/0f19e9-1b2b-4812-ab5a-fdf84f83a274/1/M5VDMDSfV1Aqdq5umZh-_D47gQk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/0f19e9-1b2b-4812-ab5a-fdf84f83a274/1/M5VDMDSfV1Aqdq5umZh-_D47gQk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:cf:39:41:13:b2:84:29:29:07:7a:01:59:74:75:09:86:78:
49:6e:16:de:f4:5f:5f:1a:8f:9a:62:af:98:10:a7:81:3d:fd:
10:83:e8:5b:8d:bd:78:ad:91:a4:d7:a0:17:5a:35:e8:a1:98:
8a:50:08:9b:01:f8:fd:2b:8e:83:6d:76:58:ec:db:1e:a5:5a:
e3:02:0a:19:08:ca:ce:a0:a6:06:c4:0d:7e:ed:83:b3:3b:54:
3a:6d:57:4b:27:f5:da:3e:af:88:36:b4:0e:9f:72:47:55:98:
2a:f8:77:2c:82:6a:df:f4:e8:c2:25:34:f6:ea:df:49:c6:44:
de:eb:f5:86:fa:91:0d:46:ec:d2:75:c2:16:cb:93:1e:69:b5:
ab:d0:95:95:6a:c4:0e:ff:d5:df:a6:d9:15:f3:77:1c:0c:58:
3e:c9:54:23:31:15:b4:3d:be:55:c7:79:18:85:1e:80:9f:9b:
2a:9c:e2:7c:30:20:49:69:c5:3f:81:20:a4:59:79:15:e4:c0:
b1:12:45:2c:f7:f4:d6:17:d5:43:53:cb:6d:fa:13:b5:cb:1b:
ea:32:e0:88:39:cf:19:1d:d1:2c:c4:52:53:01:bc:78:ea:e8:
bc:bf:75:65:41:bb:5a:eb:b0:d8:12:79:bb:be:0b:1d:82:ba:
e8:92:93:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:05:07 2025 by rpki-client