Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/c66bc8-f206-43d0-94be-18aadd659566/1/Mg58DOtLoqb0uW_EuuGruFMDWro.mft
File: Mg58DOtLoqb0uW_EuuGruFMDWro.mft (raw, json)
Hash identifier: EMM1oglJwCCG8EnFS/9eNO8M4FVoIMur19IYsMFh57w=
Subject key identifier: 81:1C:CF:AC:71:52:FA:13:62:F2:00:94:7C:D9:A8:C3:BA:F7:38:10
Authority key identifier: 32:0E:7C:0C:EB:4B:A2:A6:F4:B9:6F:C4:BA:E1:AB:B8:53:03:5A:BA
Certificate issuer: /CN=320e7c0ceb4ba2a6f4b96fc4bae1abb853035aba
Certificate serial: 0194BBCDBFDC249E28852F4EF6D8D9B1870D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mg58DOtLoqb0uW_EuuGruFMDWro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/c66bc8-f206-43d0-94be-18aadd659566/1/Mg58DOtLoqb0uW_EuuGruFMDWro.mft
Manifest number: 13BD
Signing time: Fri 31 Jan 2025 10:00:10 +0000
Manifest this update: Fri 31 Jan 2025 10:00:10 +0000
Manifest next update: Sat 01 Feb 2025 10:00:10 +0000
Files and hashes: 1: IqkEA-rqe3obsi9U0tATjcGiORw.roa (hash: pdv/Uop5nT0xWWcfbMOXH1ucooA/J/I4hHoF5p2oy/A=)
2: Mg58DOtLoqb0uW_EuuGruFMDWro.crl (hash: lkV91jX9/bVi8576XFy6PhTr/h4jyVy3PINnlQYq5DA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:bf:dc:24:9e:28:85:2f:4e:f6:d8:d9:b1:87:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=320e7c0ceb4ba2a6f4b96fc4bae1abb853035aba
Validity
Not Before: Jan 31 10:00:10 2025 GMT
Not After : Feb 1 10:00:10 2025 GMT
Subject: CN=811ccfac7152fa1362f200947cd9a8c3baf73810
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:c6:63:1f:fc:2b:27:27:0c:17:fa:15:ae:5f:
30:89:5f:ac:1d:60:a7:1c:91:73:6b:23:6a:74:52:
51:13:6c:4a:a1:65:09:92:50:01:66:c1:27:79:7c:
10:73:68:64:46:b4:04:0d:03:75:59:2c:5f:ac:42:
a3:2b:1a:5f:6e:7c:b6:69:87:ba:5f:fe:0e:52:8b:
1d:4e:13:3c:af:92:11:87:f2:8b:bc:9f:e3:42:9f:
9b:7b:9f:8c:e5:b9:51:1b:66:01:f9:51:e8:66:8b:
27:e7:61:85:22:36:1a:a6:d2:e0:2c:50:97:fa:30:
5d:ce:6c:46:50:fb:19:3f:07:87:69:d1:ca:40:83:
0d:dd:c1:3c:7e:6c:bf:12:81:8a:ad:a3:fb:4f:ad:
6f:4a:63:09:29:7f:cb:d8:20:2e:36:1a:0f:ac:94:
1b:19:44:d3:27:c5:fc:0b:ca:6b:29:25:f8:5e:89:
bf:4e:dd:8d:c8:25:70:be:60:6b:92:2f:45:5c:8e:
2c:e4:b9:47:ce:3b:9b:69:09:91:fb:0a:6f:c6:0c:
bb:8a:df:c1:a4:05:37:69:09:0c:98:34:92:21:e2:
1f:f0:09:f8:65:44:b9:e2:6a:13:54:14:5b:19:64:
09:96:20:83:ce:4a:1c:42:10:fe:0b:b3:96:ab:be:
d0:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:1C:CF:AC:71:52:FA:13:62:F2:00:94:7C:D9:A8:C3:BA:F7:38:10
X509v3 Authority Key Identifier:
keyid:32:0E:7C:0C:EB:4B:A2:A6:F4:B9:6F:C4:BA:E1:AB:B8:53:03:5A:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mg58DOtLoqb0uW_EuuGruFMDWro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/c66bc8-f206-43d0-94be-18aadd659566/1/Mg58DOtLoqb0uW_EuuGruFMDWro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/c66bc8-f206-43d0-94be-18aadd659566/1/Mg58DOtLoqb0uW_EuuGruFMDWro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:ff:98:b2:84:88:cb:4f:b6:c2:3b:23:e0:ac:59:91:d6:83:
50:5a:c5:76:9f:5b:e0:11:98:db:47:7a:f0:d5:1f:a9:c7:dd:
25:43:81:a2:a2:51:2b:66:27:4e:ca:e6:6c:20:cb:86:c3:4f:
08:74:7d:38:44:db:69:9e:eb:b2:96:86:28:c1:7f:b5:e8:32:
0d:bf:b5:e0:ab:1f:0b:0a:1c:6a:99:40:d2:e0:97:a0:9b:36:
70:4a:3a:8a:35:76:bf:2f:76:d2:e2:3c:f6:ff:02:cb:d5:ff:
d2:52:a7:d4:0f:25:61:55:bf:34:ba:c1:fc:ad:c8:6a:f4:20:
b2:3f:33:28:3d:73:dc:33:3b:ef:4b:02:bd:d3:a3:ec:35:dc:
8e:be:29:40:e8:ea:c8:1c:f4:bd:c8:97:0e:9f:d0:fb:93:de:
00:fb:82:d6:e4:1d:04:46:52:45:e8:b6:82:2e:28:0e:16:bb:
9f:92:d4:fb:72:bf:8a:a9:ad:5a:0f:75:a8:65:c5:38:8d:b3:
76:2c:36:c2:27:7c:48:b8:ce:89:26:46:38:f5:0b:1f:23:31:
77:4f:24:6a:ae:4b:6d:3c:e9:6b:41:fa:87:18:99:20:73:b4:
9a:c7:ea:06:85:89:3d:9c:9e:26:08:6b:05:20:cc:08:23:1b:
a2:8b:3e:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:01:57 2025 by rpki-client