Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/51d4b5-c27d-4b7c-9070-721175d65eb8/1/MVGMe1S0QScIP2JtPhUY9EVM4FU.mft
File: MVGMe1S0QScIP2JtPhUY9EVM4FU.mft (raw, json)
Hash identifier: B1yllt8jvhIBgWU1IWaS8k2idelRqZ2kgm2E25M2wsQ=
Subject key identifier: 4C:33:7F:92:77:34:FB:70:03:EC:DF:01:AD:E9:AC:4D:F0:4D:8E:7B
Authority key identifier: 31:51:8C:7B:54:B4:41:27:08:3F:62:6D:3E:15:18:F4:45:4C:E0:55
Certificate issuer: /CN=31518c7b54b44127083f626d3e1518f4454ce055
Certificate serial: 0194BD17F88A0023835D76DED163A5A2A15C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MVGMe1S0QScIP2JtPhUY9EVM4FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/51d4b5-c27d-4b7c-9070-721175d65eb8/1/MVGMe1S0QScIP2JtPhUY9EVM4FU.mft
Manifest number: FB
Signing time: Fri 31 Jan 2025 16:00:52 +0000
Manifest this update: Fri 31 Jan 2025 16:00:52 +0000
Manifest next update: Sat 01 Feb 2025 16:00:52 +0000
Files and hashes: 1: MVGMe1S0QScIP2JtPhUY9EVM4FU.crl (hash: pUVj1Lq/c8ffLbNUpOJWw316OYe+aqUXteBQBgyA4ZU=)
2: Z8_72VViKIEya-8jYQ4foPa8uyM.roa (hash: VfRJSQVqCqPZi9LVFFlh6oeMG2gSmAPtA9TzAjDBjm8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:f8:8a:00:23:83:5d:76:de:d1:63:a5:a2:a1:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31518c7b54b44127083f626d3e1518f4454ce055
Validity
Not Before: Jan 31 16:00:52 2025 GMT
Not After : Feb 1 16:00:52 2025 GMT
Subject: CN=4c337f927734fb7003ecdf01ade9ac4df04d8e7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:1c:b8:af:dc:48:c3:fe:a4:fa:08:17:d8:b9:
27:fb:7b:e1:d4:af:a0:1f:2f:22:0f:a3:41:4d:45:
55:69:de:80:04:41:f8:29:24:3d:51:e2:b9:0a:1e:
f5:b9:5b:d4:f3:69:f3:61:71:ca:22:fe:63:e6:61:
1c:7e:80:11:1b:d8:6d:46:cc:68:91:26:2a:34:1c:
0a:39:14:eb:6d:f6:e6:b8:4a:fa:1f:6c:65:57:05:
75:6c:da:d2:3a:88:13:25:6a:cd:be:85:c6:de:d9:
3d:64:6a:c7:fd:5d:80:c5:bc:0a:ea:b5:c8:ba:19:
90:0f:85:e6:fb:4b:1f:2b:b8:8d:9f:94:da:2e:7f:
75:f8:d3:d6:c3:35:86:b2:2b:8d:30:cf:f0:4d:12:
18:f3:f3:38:82:5f:5b:05:ce:ee:d6:9e:54:e7:37:
d4:5f:86:90:57:c1:5c:e9:4b:68:0e:4b:8a:ba:19:
16:6e:fe:27:28:bf:9f:f7:6d:f6:63:2f:12:3c:c3:
c3:b7:40:d4:2a:6e:36:95:9f:6b:b2:74:83:55:01:
26:3f:31:d4:5e:48:c5:bd:95:b2:d2:43:a0:ae:fa:
3b:84:bd:d8:79:94:98:ad:e1:61:ae:69:4f:60:82:
da:f7:12:18:5b:e4:c3:e1:86:2d:e1:5c:49:fc:3e:
84:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:33:7F:92:77:34:FB:70:03:EC:DF:01:AD:E9:AC:4D:F0:4D:8E:7B
X509v3 Authority Key Identifier:
keyid:31:51:8C:7B:54:B4:41:27:08:3F:62:6D:3E:15:18:F4:45:4C:E0:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MVGMe1S0QScIP2JtPhUY9EVM4FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/51d4b5-c27d-4b7c-9070-721175d65eb8/1/MVGMe1S0QScIP2JtPhUY9EVM4FU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/51d4b5-c27d-4b7c-9070-721175d65eb8/1/MVGMe1S0QScIP2JtPhUY9EVM4FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:69:ba:36:37:f7:3a:bf:df:ce:a5:58:79:bd:ea:ef:32:c3:
9e:84:78:a3:5b:22:94:b1:a4:dd:fb:58:24:4b:55:f2:21:c1:
39:ed:27:c3:54:25:ec:f0:75:a3:24:63:bf:a4:07:7d:97:ef:
ab:4f:12:45:26:b5:df:e1:51:5a:18:74:8c:7b:12:2c:d8:9b:
4d:c1:58:ed:5a:42:1d:dd:f8:ed:88:c2:4a:f3:2b:4c:54:ac:
fe:01:43:67:f9:c9:d1:20:78:ca:23:24:65:b7:46:c3:57:32:
53:86:c1:19:1c:a7:2e:7e:be:88:b7:a7:7a:f6:c8:1e:6a:8d:
64:d7:cc:38:a4:f4:4e:07:95:e7:6b:7d:1e:c4:f9:fb:24:29:
3e:b7:5b:e5:2a:52:27:e5:7e:2e:d1:3c:8b:2c:4a:08:0c:85:
dd:9d:af:41:b9:ec:de:d9:e4:87:b4:d7:68:5b:05:20:8d:e4:
6b:6a:63:6c:06:26:1f:9b:e3:68:66:ae:17:ee:80:7e:13:65:
42:7e:7e:de:51:7a:3a:e5:f3:f6:39:37:fd:a4:4f:36:55:dc:
e5:34:68:a9:7a:cb:73:a8:17:17:13:9c:0a:3b:fd:c1:6a:fb:
2b:b2:45:12:10:89:e0:c5:b5:e3:57:43:c4:5f:b2:ed:31:5a:
81:98:eb:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:48 2025 by rpki-client