Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/0c954a-ac3f-4860-8cf4-d99ba44db595/1/MwY72VuJG_MxFVfITf6H7PQrGQY.mft
File: MwY72VuJG_MxFVfITf6H7PQrGQY.mft (raw, json)
Hash identifier: c3mODQgszyDuk1+/fDN5+D6NQ2CNw/xnoOOgC9ciMqY=
Subject key identifier: 1F:13:3E:C8:FD:13:02:CF:A8:31:12:54:DF:54:C8:92:C3:58:E7:EC
Authority key identifier: 33:06:3B:D9:5B:89:1B:F3:31:15:57:C8:4D:FE:87:EC:F4:2B:19:06
Certificate issuer: /CN=33063bd95b891bf3311557c84dfe87ecf42b1906
Certificate serial: 0194BD17B7638CBD1D8B83FA9307053F03C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MwY72VuJG_MxFVfITf6H7PQrGQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/0c954a-ac3f-4860-8cf4-d99ba44db595/1/MwY72VuJG_MxFVfITf6H7PQrGQY.mft
Manifest number: 2D
Signing time: Fri 31 Jan 2025 16:00:35 +0000
Manifest this update: Fri 31 Jan 2025 16:00:35 +0000
Manifest next update: Sat 01 Feb 2025 16:00:35 +0000
Files and hashes: 1: MwY72VuJG_MxFVfITf6H7PQrGQY.crl (hash: L5YOAFB8vWeFCy1oJIiZc3KMEMuovGmOQKrBo46AkEw=)
2: z1aTRBewSJhzUfWWJD41OIsIBo0.roa (hash: qD0OIe2RSaDdKkAmPZcT/wnJhlY0jqIIohwD44CcvP0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:b7:63:8c:bd:1d:8b:83:fa:93:07:05:3f:03:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33063bd95b891bf3311557c84dfe87ecf42b1906
Validity
Not Before: Jan 31 16:00:35 2025 GMT
Not After : Feb 1 16:00:35 2025 GMT
Subject: CN=1f133ec8fd1302cfa8311254df54c892c358e7ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:11:09:62:5e:5d:36:eb:49:b0:56:45:da:dd:
30:22:60:73:a5:48:97:cc:9b:0a:74:7d:7a:1f:fe:
3b:a1:43:c3:08:97:5f:49:35:17:53:a6:81:53:3c:
96:c0:fc:ca:65:3f:2f:00:96:91:73:55:89:3f:44:
4b:42:93:02:1b:21:33:c2:c4:c4:06:df:78:ea:e9:
d6:3d:90:27:61:28:b4:07:51:df:63:47:a5:ac:68:
4f:9e:66:a7:03:2d:54:53:29:09:6b:ae:43:f2:c3:
a3:e2:23:8a:5d:62:cf:a4:87:ea:20:32:d0:59:0e:
8c:58:d2:a0:57:a8:e5:e5:2d:32:fd:23:36:87:84:
3d:80:1c:ee:98:0b:6b:b0:15:36:bd:39:19:3d:8c:
39:f2:d9:70:22:84:ad:e4:5b:0b:f3:59:1c:03:ac:
b3:f3:bd:9d:ce:f0:70:4d:5a:5a:46:b6:06:0d:39:
3a:2b:b3:92:49:f8:ac:24:17:e7:79:69:96:b2:fd:
07:bd:48:f2:1b:1a:86:96:48:d1:97:c1:32:80:ac:
23:df:73:2b:31:9b:fe:3d:da:dc:e9:42:d2:fb:29:
ef:48:ae:c9:58:5b:d6:a6:1e:ec:b5:f7:ff:be:e6:
c7:b9:f3:60:f2:be:4e:de:bb:84:fe:7d:d3:3d:45:
2b:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:13:3E:C8:FD:13:02:CF:A8:31:12:54:DF:54:C8:92:C3:58:E7:EC
X509v3 Authority Key Identifier:
keyid:33:06:3B:D9:5B:89:1B:F3:31:15:57:C8:4D:FE:87:EC:F4:2B:19:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MwY72VuJG_MxFVfITf6H7PQrGQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/0c954a-ac3f-4860-8cf4-d99ba44db595/1/MwY72VuJG_MxFVfITf6H7PQrGQY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/0c954a-ac3f-4860-8cf4-d99ba44db595/1/MwY72VuJG_MxFVfITf6H7PQrGQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:35:3d:2b:eb:f4:6d:66:21:07:8a:91:4e:03:e6:63:1b:d8:
e7:54:49:c9:77:3a:56:23:c9:bd:85:76:d6:14:f2:a0:25:15:
86:d6:a4:9c:93:b1:34:7f:cd:0b:04:55:4d:98:d5:cb:70:6f:
5e:bf:de:fb:dd:35:16:8f:d6:d2:5f:df:0f:3e:08:7f:70:0f:
b4:33:63:ed:fa:60:cc:0c:15:3f:89:33:89:4b:80:81:79:6d:
86:fd:90:1a:d3:28:bb:27:63:35:e6:75:89:0b:21:d7:4e:77:
16:79:b9:00:c2:3c:77:75:c5:21:4b:e9:8f:75:a7:b0:ca:bd:
81:d6:a3:c9:e6:7f:1b:de:e0:07:c4:21:1b:24:ea:5a:c3:b6:
e3:b4:4b:e7:77:39:91:41:b8:cb:de:5c:29:6c:f2:27:e2:f5:
29:f8:53:ce:7e:34:fc:aa:6f:f3:e6:db:d8:87:52:92:67:27:
5a:e2:7e:0e:5e:c2:c6:bc:67:33:20:46:fd:d1:2d:76:f6:8b:
6f:85:64:0f:9a:60:8d:8f:55:12:39:a6:36:e6:44:c5:c4:38:
af:f9:91:53:f3:de:c6:9d:d5:1c:ea:ff:a9:f6:d1:02:77:26:
31:9b:45:92:cb:5a:dc:87:36:ff:68:57:96:95:1a:9c:2a:8c:
9b:02:4b:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:28:12 2025 by rpki-client