Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/269363-b35f-422c-b076-93f486b8b961/1/mpGNfRgPNudlEqQWEaCyiotAxS4.mft
File: mpGNfRgPNudlEqQWEaCyiotAxS4.mft (raw, json)
Hash identifier: 3dkOU/CCcG2BzmY8yBpGEdM4ltR0UBTvq0u/f81QXpI=
Subject key identifier: CC:7A:2A:91:5E:8D:39:7B:97:7B:79:2F:74:A1:2B:EA:18:12:B6:16
Authority key identifier: 9A:91:8D:7D:18:0F:36:E7:65:12:A4:16:11:A0:B2:8A:8B:40:C5:2E
Certificate issuer: /CN=9a918d7d180f36e76512a41611a0b28a8b40c52e
Certificate serial: 0194BBCE797AFF94CD0DE056AC69F4A79582
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mpGNfRgPNudlEqQWEaCyiotAxS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/269363-b35f-422c-b076-93f486b8b961/1/mpGNfRgPNudlEqQWEaCyiotAxS4.mft
Manifest number: 0E25
Signing time: Fri 31 Jan 2025 10:00:58 +0000
Manifest this update: Fri 31 Jan 2025 10:00:58 +0000
Manifest next update: Sat 01 Feb 2025 10:00:58 +0000
Files and hashes: 1: NEqj8BvBPOtkH45qzmLazZkmCpA.roa (hash: 1CSuBVjeUix6GCeWhV3QFu5H8gx07d5za8DUe8nOaxY=)
2: mpGNfRgPNudlEqQWEaCyiotAxS4.crl (hash: G1QRe6ym9ubOcKM/EdDQzjm86sKZt1qw5bV8yhmGCkE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:79:7a:ff:94:cd:0d:e0:56:ac:69:f4:a7:95:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a918d7d180f36e76512a41611a0b28a8b40c52e
Validity
Not Before: Jan 31 10:00:58 2025 GMT
Not After : Feb 1 10:00:58 2025 GMT
Subject: CN=cc7a2a915e8d397b977b792f74a12bea1812b616
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:00:49:2c:95:78:8b:2b:e2:5b:d8:ef:e6:a9:
a5:3e:7b:e0:1b:20:f8:c2:32:b4:52:32:9e:f6:aa:
43:58:5b:f8:5b:aa:0b:26:38:47:f8:07:18:08:30:
99:28:50:18:42:64:aa:6b:06:97:52:b0:e3:4f:f8:
29:f1:53:40:90:b0:ec:56:60:43:a9:22:8e:aa:98:
c8:ec:2a:3f:81:1b:b4:3b:94:47:12:66:aa:35:22:
37:03:fa:ce:02:79:81:46:77:42:5a:74:a4:4f:9e:
a2:58:0b:b6:9b:4d:7d:b0:d7:f1:bd:60:33:0f:de:
80:53:ff:aa:bd:6c:7b:df:13:6a:25:ea:45:14:bc:
09:a5:de:a9:09:a0:a0:4f:42:7a:75:73:b4:16:24:
53:b8:41:6e:71:82:c6:f5:27:f5:7a:4a:ac:8f:9c:
8c:2c:61:49:62:1f:00:4a:24:6d:59:38:bc:8f:64:
43:4d:ad:77:d7:5b:18:43:3f:20:0f:4d:23:47:e6:
7e:13:82:28:c5:04:eb:00:5e:66:6d:5e:c7:77:5c:
0c:8c:43:47:9a:23:75:51:e4:7e:ca:64:31:7c:23:
8a:97:6f:a0:fc:a0:25:b0:47:72:30:1e:90:a0:12:
53:e4:a5:f3:cf:18:35:b3:1f:ad:04:29:07:a5:04:
cb:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:7A:2A:91:5E:8D:39:7B:97:7B:79:2F:74:A1:2B:EA:18:12:B6:16
X509v3 Authority Key Identifier:
keyid:9A:91:8D:7D:18:0F:36:E7:65:12:A4:16:11:A0:B2:8A:8B:40:C5:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mpGNfRgPNudlEqQWEaCyiotAxS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/269363-b35f-422c-b076-93f486b8b961/1/mpGNfRgPNudlEqQWEaCyiotAxS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/269363-b35f-422c-b076-93f486b8b961/1/mpGNfRgPNudlEqQWEaCyiotAxS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:ef:68:8e:d0:9b:92:54:7b:39:ae:8b:9c:fa:04:62:d6:4a:
ac:fc:70:ea:5b:7f:43:03:a7:3a:b2:90:46:eb:c8:a3:09:6d:
ef:a0:b0:5a:a7:fd:67:b4:d3:45:6b:fc:11:90:8e:ad:45:2b:
56:79:df:2f:96:76:6b:0d:53:2d:43:fb:bb:fc:16:1a:1d:d1:
5d:c1:12:03:55:d2:b8:74:c1:6f:a9:a2:a2:ac:dc:f6:0e:ae:
2d:fa:09:7b:d7:5b:04:d8:d1:f7:7f:29:ae:0a:72:ce:7c:30:
64:5c:b8:8d:5a:7b:28:4f:fe:04:e1:ab:97:f4:d2:18:c2:70:
ca:0e:81:18:69:fa:e4:cf:e2:aa:03:c6:ae:f5:0d:b7:d9:eb:
f3:9b:ea:da:01:0a:c9:df:c9:31:15:bf:7a:36:f0:37:58:e7:
c4:9a:fc:f9:3a:0e:fd:fd:f6:09:c6:54:50:ef:af:74:fc:f4:
b5:c8:f9:78:43:89:af:ad:9f:6b:6e:6c:72:01:8c:ed:cd:e3:
74:75:41:3a:2f:6b:32:48:2e:72:53:c8:4a:d8:4d:54:cb:f0:
35:c5:e2:2b:59:b5:8c:b1:da:d5:7c:d8:db:e7:90:61:4a:0c:
57:d7:ba:9f:8e:48:6c:f5:93:0c:a2:c3:c0:f9:92:82:f4:ba:
c7:cf:8d:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:16:04 2025 by rpki-client