Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/0a206e-1788-436b-9728-bed4b99a7bb4/1/MrG5Swc8VHmRwg-ELq3sFn7BnjQ.mft
File: MrG5Swc8VHmRwg-ELq3sFn7BnjQ.mft (raw, json)
Hash identifier: 5Gs8y6WdCRB5yuVNUaDupm47sfYx+7PkM4HUuauQyms=
Subject key identifier: 52:07:0C:27:72:5A:E4:70:B9:D6:74:5B:87:C9:A0:FD:A6:5A:FC:90
Authority key identifier: 32:B1:B9:4B:07:3C:54:79:91:C2:0F:84:2E:AD:EC:16:7E:C1:9E:34
Certificate issuer: /CN=32b1b94b073c547991c20f842eadec167ec19e34
Certificate serial: 0194BBCE02285629DD5C1935BD7A2BC589BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MrG5Swc8VHmRwg-ELq3sFn7BnjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/0a206e-1788-436b-9728-bed4b99a7bb4/1/MrG5Swc8VHmRwg-ELq3sFn7BnjQ.mft
Manifest number: A0
Signing time: Fri 31 Jan 2025 10:00:27 +0000
Manifest this update: Fri 31 Jan 2025 10:00:27 +0000
Manifest next update: Sat 01 Feb 2025 10:00:27 +0000
Files and hashes: 1: HTiETFMnseisEeoALFIWItsK6gc.roa (hash: iulklaFZv7FQZ4kyFEEaoOlUffIGv7CCXTbtxR93AS4=)
2: MrG5Swc8VHmRwg-ELq3sFn7BnjQ.crl (hash: /wq51EbTGtTWJjLUZJ9nKYCjhdFGMZh54dnIIt5FHjw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:02:28:56:29:dd:5c:19:35:bd:7a:2b:c5:89:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32b1b94b073c547991c20f842eadec167ec19e34
Validity
Not Before: Jan 31 10:00:27 2025 GMT
Not After : Feb 1 10:00:27 2025 GMT
Subject: CN=52070c27725ae470b9d6745b87c9a0fda65afc90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c5:7d:75:15:c5:09:c0:a8:e0:18:07:d6:14:
11:19:42:f8:b0:af:c0:2b:d0:9d:5f:89:8c:60:40:
a7:04:ff:6d:2e:43:95:99:41:bd:ba:80:84:b4:39:
07:4b:9c:b6:79:67:b2:8c:a4:00:2b:7a:ca:98:03:
19:69:a7:f6:ff:34:e2:49:dc:cc:ff:b5:d2:74:86:
3a:1e:4b:dc:08:d5:a1:36:3f:29:f9:f6:1c:8b:22:
fa:78:f3:f7:6f:43:03:80:76:41:23:11:9d:a6:cf:
05:40:ec:d8:b1:ce:48:06:68:39:d4:08:43:da:2f:
1f:f6:0e:8c:91:99:88:45:04:94:7e:51:e4:5a:ee:
98:eb:f3:6b:99:74:1e:bf:87:b1:a9:92:1f:93:7e:
c4:24:0f:35:ec:45:2b:43:c3:f4:79:ec:93:2c:84:
69:cd:b5:11:c5:02:db:f4:c3:ab:d0:b6:10:64:29:
74:cc:4c:1e:8a:25:bc:0b:d7:6b:8d:d9:27:60:25:
b6:9b:82:f9:6c:ef:16:f0:b3:7c:01:39:e3:0b:9e:
57:df:11:b5:e7:02:21:72:81:60:1b:c2:f0:9b:54:
d3:65:44:0e:ba:2c:cc:d9:cf:40:98:bc:cf:86:69:
f6:c9:b1:1c:62:5b:a5:0b:90:02:09:3d:9a:86:c1:
4c:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:07:0C:27:72:5A:E4:70:B9:D6:74:5B:87:C9:A0:FD:A6:5A:FC:90
X509v3 Authority Key Identifier:
keyid:32:B1:B9:4B:07:3C:54:79:91:C2:0F:84:2E:AD:EC:16:7E:C1:9E:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MrG5Swc8VHmRwg-ELq3sFn7BnjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/0a206e-1788-436b-9728-bed4b99a7bb4/1/MrG5Swc8VHmRwg-ELq3sFn7BnjQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/0a206e-1788-436b-9728-bed4b99a7bb4/1/MrG5Swc8VHmRwg-ELq3sFn7BnjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:2b:05:03:8a:38:d9:0b:22:e1:dc:ac:7b:79:e5:14:c4:a7:
55:b9:3e:4a:64:3f:e0:c9:8f:68:b4:b7:a8:a9:aa:f4:bc:bf:
fa:09:d4:80:ad:74:07:f9:48:05:95:28:1a:9a:c2:ec:10:d6:
be:fe:d4:20:69:de:22:28:08:71:cb:a1:cf:db:cd:4f:ab:0b:
9d:7c:4c:80:a6:18:3c:0d:f5:05:db:ab:84:ce:9c:92:e4:a1:
89:6e:6c:99:87:e7:0b:7f:8a:62:90:04:65:38:02:59:41:14:
00:78:cf:f0:2d:cc:bf:c1:fc:2a:86:ea:e0:1d:03:34:05:81:
68:2f:30:1a:83:78:8d:2d:6c:c6:d9:dd:4c:fa:06:0a:12:77:
03:14:02:b3:39:25:e0:f5:7c:b7:cb:6b:24:ce:b4:32:2a:58:
0a:d1:a6:76:2d:5a:89:0c:be:f6:d5:6b:7c:8b:00:a8:49:36:
88:98:05:9a:b8:9b:1f:57:4f:fb:c6:d9:35:9b:47:1e:01:52:
13:8d:2c:a5:b4:93:f1:ca:ca:1f:8b:bc:8f:14:08:6a:68:fb:
52:be:f5:f6:c9:c9:90:af:ac:65:eb:86:c1:73:a2:51:65:28:
57:73:37:00:89:a4:55:83:b7:dc:57:92:00:ac:6a:aa:87:6d:
fd:75:f4:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:08:29 2025 by rpki-client