Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/bab0e5-ebe8-4e0a-a649-6ac1aff36c07/1/MusrUeN0jCUnQC5oYBqIkSiDoFg.mft
File: MusrUeN0jCUnQC5oYBqIkSiDoFg.mft (raw, json)
Hash identifier: YLam7k9U6MD6PT/CkSEqfeUJgKQ/HYgyzhM1M4itGeY=
Subject key identifier: FA:B1:E1:85:40:4B:4E:2A:D1:B2:2A:B2:0A:E7:BF:71:CE:DE:7F:60
Authority key identifier: 32:EB:2B:51:E3:74:8C:25:27:40:2E:68:60:1A:88:91:28:83:A0:58
Certificate issuer: /CN=32eb2b51e3748c2527402e68601a88912883a058
Certificate serial: 0194BBCDB0DDD57692B3DA17A74151E36157
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MusrUeN0jCUnQC5oYBqIkSiDoFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/bab0e5-ebe8-4e0a-a649-6ac1aff36c07/1/MusrUeN0jCUnQC5oYBqIkSiDoFg.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 10:00:06 +0000
Manifest this update: Fri 31 Jan 2025 10:00:06 +0000
Manifest next update: Sat 01 Feb 2025 10:00:06 +0000
Files and hashes: 1: KhlRzejfpvDxwhcPEcTkW8z6UJk.roa (hash: OH1bpS6azjDuSrz2eDsCxiLR1IWtc/vamDUbBv4QJmc=)
2: MusrUeN0jCUnQC5oYBqIkSiDoFg.crl (hash: 3VXsTktqBCwn/VteN4nRzVpu7kbYF3fP+otC4/P5Hf4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:b0:dd:d5:76:92:b3:da:17:a7:41:51:e3:61:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32eb2b51e3748c2527402e68601a88912883a058
Validity
Not Before: Jan 31 10:00:06 2025 GMT
Not After : Feb 1 10:00:06 2025 GMT
Subject: CN=fab1e185404b4e2ad1b22ab20ae7bf71cede7f60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:29:b2:fe:6e:f9:0e:59:ec:40:fb:07:47:91:
ac:82:81:96:c3:5a:2b:78:80:c3:a2:b5:df:05:6a:
6a:be:76:2c:79:1b:e5:1d:88:d7:61:92:eb:bb:fa:
1e:33:64:12:37:a2:53:9a:0e:bf:29:f0:75:10:8d:
cf:d2:43:38:cc:b5:58:5f:47:e3:6e:46:ec:c8:ea:
ef:79:73:c5:77:f7:c9:06:f2:ba:d1:ad:96:44:3f:
c5:4d:89:14:cd:c9:16:65:b7:91:61:8f:7d:20:80:
ad:ab:1f:70:e3:97:ed:9a:29:83:45:de:b5:57:7c:
e6:a1:87:b0:ca:b0:88:ed:53:0a:0f:26:c8:fe:a8:
04:d7:84:7e:42:c6:c4:85:13:76:06:f4:57:27:74:
43:f3:8b:53:bf:80:32:75:a7:b8:e0:21:e1:e6:8b:
18:3e:53:b1:6f:e6:9b:4c:63:89:fa:d0:5f:53:4d:
cd:9b:da:c6:e2:4d:97:e0:b6:70:2e:fc:d5:b0:e6:
0d:7a:24:a4:e0:00:57:42:30:79:fc:d4:12:5f:f9:
37:e9:ab:68:f3:71:07:21:a1:ae:2e:63:3b:2d:d4:
0f:66:dc:b9:c5:3d:35:58:de:66:00:f9:28:2a:4a:
6e:2a:53:f3:bc:6c:e3:dc:cd:bb:3f:22:21:b0:b6:
fa:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:B1:E1:85:40:4B:4E:2A:D1:B2:2A:B2:0A:E7:BF:71:CE:DE:7F:60
X509v3 Authority Key Identifier:
keyid:32:EB:2B:51:E3:74:8C:25:27:40:2E:68:60:1A:88:91:28:83:A0:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MusrUeN0jCUnQC5oYBqIkSiDoFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/bab0e5-ebe8-4e0a-a649-6ac1aff36c07/1/MusrUeN0jCUnQC5oYBqIkSiDoFg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/bab0e5-ebe8-4e0a-a649-6ac1aff36c07/1/MusrUeN0jCUnQC5oYBqIkSiDoFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:6f:1a:9a:ad:96:48:52:a4:f5:8c:82:2b:10:2e:03:43:fb:
55:8f:06:97:f1:54:da:bd:d2:5b:e5:da:84:be:0c:10:02:3e:
62:4e:69:35:7c:b5:02:13:54:9b:02:a7:a8:64:4b:b7:22:a6:
49:82:43:15:15:8c:d0:ee:05:66:29:03:8c:89:43:8a:45:38:
76:cd:90:fe:c3:26:34:56:3c:6f:7a:59:61:88:de:a8:91:2d:
2f:5e:2e:68:de:0f:d4:db:58:4a:26:06:9f:f5:73:aa:31:33:
73:f1:4f:d4:13:5f:09:a6:7a:dd:c4:2a:96:fc:37:74:b8:37:
72:97:fd:80:1d:63:fe:7f:0f:3e:a5:df:de:72:9f:8a:8c:68:
0a:c2:48:f0:34:30:bd:04:30:cf:48:3e:72:16:6d:7b:41:31:
71:50:35:dc:50:03:a1:34:65:89:07:5b:b7:bd:6c:5f:fc:41:
a3:ea:0c:cc:bc:ad:15:64:86:f5:67:ff:56:91:8c:34:4d:85:
91:db:74:cb:19:8f:1c:b8:d9:3f:0c:fb:23:7e:f3:d4:12:f7:
05:71:de:71:14:6d:66:bf:42:04:99:c2:0a:38:ac:20:f2:9b:
1f:b6:80:f7:b3:b0:19:bf:7a:f4:2b:3d:c2:61:d3:c5:90:47:
73:91:87:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 09:24:13 2025 by rpki-client