Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/21c61a-d6b1-4aca-9782-97348336f33a/1/MVlVxK8-sajTQAqGYl42XCYpjWo.mft
File: MVlVxK8-sajTQAqGYl42XCYpjWo.mft (raw, json)
Hash identifier: vMsgWhRXSeTQv+29xuzKmi1l6v9Z1XC0ytwcV7dh6EY=
Subject key identifier: B8:60:29:FD:E7:FF:30:69:8F:9D:B8:01:53:88:D4:75:DC:35:6A:C3
Authority key identifier: 31:59:55:C4:AF:3E:B1:A8:D3:40:0A:86:62:5E:36:5C:26:29:8D:6A
Certificate issuer: /CN=315955c4af3eb1a8d3400a86625e365c26298d6a
Certificate serial: 0194BC3CC25199C448B8EE2722B327EF1B4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MVlVxK8-sajTQAqGYl42XCYpjWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/21c61a-d6b1-4aca-9782-97348336f33a/1/MVlVxK8-sajTQAqGYl42XCYpjWo.mft
Manifest number: 11D1
Signing time: Fri 31 Jan 2025 12:01:25 +0000
Manifest this update: Fri 31 Jan 2025 12:01:25 +0000
Manifest next update: Sat 01 Feb 2025 12:01:25 +0000
Files and hashes: 1: Hj5kUpz7xdoLzekUyLjxpjXny5A.roa (hash: YsFkP4ivDT8n97lWUkymibL7niehHmCc1xfqSbnlCHw=)
2: MVlVxK8-sajTQAqGYl42XCYpjWo.crl (hash: HPwRxMBNZln/g0Lc//duo+mWnbb8OmGBK5Anxin09mA=)
3: w_D9zm0G6d-xgLYZDk_6k0Fdo0Y.roa (hash: uNakKZ5cInU4w53MHNcs8H1FEfnS50QeJJ6h44hvoXU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:c2:51:99:c4:48:b8:ee:27:22:b3:27:ef:1b:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=315955c4af3eb1a8d3400a86625e365c26298d6a
Validity
Not Before: Jan 31 12:01:25 2025 GMT
Not After : Feb 1 12:01:25 2025 GMT
Subject: CN=b86029fde7ff30698f9db8015388d475dc356ac3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:39:67:1c:7b:07:35:9b:37:64:f4:b2:80:5c:
a8:aa:28:5e:5c:8d:28:b2:8d:f7:f9:02:8b:6f:41:
a7:14:08:7d:a5:af:cf:8d:17:67:66:9e:22:8e:9c:
6d:00:66:e2:d1:1a:dc:ea:c8:37:24:5e:7a:8b:ca:
8c:8d:e2:4f:de:8a:af:09:89:8e:b5:1a:2a:66:13:
51:b1:ff:a1:b9:8a:fb:2a:e7:51:63:ca:cd:ff:b6:
fa:c5:1f:46:fe:66:25:73:e3:46:05:ba:79:8f:be:
34:65:6c:e8:5e:f3:7b:ff:b6:48:d7:dd:08:c4:e8:
ab:07:88:ba:29:ff:b1:b5:be:2f:93:63:62:76:b6:
cc:b2:89:ae:c0:7a:e7:0c:d5:ac:86:03:dd:8c:c5:
a3:77:1b:f6:54:2a:f0:c3:ea:8c:31:3e:fd:22:8f:
ca:55:80:58:9a:fc:8c:02:05:48:d9:62:3a:a2:6e:
4b:52:19:62:3d:0f:67:e4:2f:ae:ee:0b:39:24:5a:
2b:2c:1f:05:4b:8d:e2:d6:8d:a2:2c:f8:c9:08:dd:
18:e8:aa:49:75:36:92:d4:4d:c3:03:17:31:b6:18:
b7:29:56:9e:e8:4e:95:f0:d7:ed:46:cd:9d:6a:d3:
52:5f:e4:f6:6d:36:e9:93:f5:a7:f0:38:24:34:f7:
69:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:60:29:FD:E7:FF:30:69:8F:9D:B8:01:53:88:D4:75:DC:35:6A:C3
X509v3 Authority Key Identifier:
keyid:31:59:55:C4:AF:3E:B1:A8:D3:40:0A:86:62:5E:36:5C:26:29:8D:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MVlVxK8-sajTQAqGYl42XCYpjWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/21c61a-d6b1-4aca-9782-97348336f33a/1/MVlVxK8-sajTQAqGYl42XCYpjWo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/21c61a-d6b1-4aca-9782-97348336f33a/1/MVlVxK8-sajTQAqGYl42XCYpjWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:cf:79:51:68:16:ef:2c:40:86:20:e8:0f:a0:64:78:bc:cf:
9c:8d:99:88:b7:9d:9e:d1:b8:9a:44:95:34:f9:36:cb:17:93:
bc:aa:f5:69:0a:7c:dd:ba:fe:96:27:fb:5d:68:ee:a1:13:b2:
49:a5:20:61:c0:cc:21:8f:df:c5:4c:5c:da:75:9c:04:b2:76:
f7:dc:e1:0e:dc:1c:95:29:41:50:1f:5c:83:66:6d:69:92:5f:
97:45:8f:96:d5:0e:c6:35:d8:05:32:12:b3:08:9e:d7:2e:48:
d0:68:d6:85:f6:04:7a:a8:26:4a:9c:21:04:35:99:72:e2:8e:
da:6d:89:c7:19:67:db:7a:21:a0:36:2f:af:28:26:12:a2:55:
b8:4d:27:9f:84:1d:66:bc:0b:fa:b1:35:a8:74:41:86:59:af:
3c:9b:13:a9:d0:b3:d2:15:de:16:dc:5f:a2:24:39:c5:43:5f:
b6:a7:39:b7:0a:1f:b6:ec:ee:20:1f:5c:d6:f9:22:48:b4:73:
0c:2d:dd:98:7d:34:7b:43:98:e5:5e:2e:45:29:a7:e9:c5:f2:
c5:95:94:3f:c8:0c:bd:af:29:38:6b:56:f3:9d:2f:1f:62:3e:
1f:21:8c:a1:ee:51:90:f1:1e:f7:0c:c1:81:a6:cc:8d:fe:59:
51:3c:b8:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:16 2025 by rpki-client