Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/f69c42-6f9d-490e-b132-67f8e7d1137c/1/MuZYUVseanK5nzMmaeBp5hVPcN0.mft
File: MuZYUVseanK5nzMmaeBp5hVPcN0.mft (raw, json)
Hash identifier: oUPBSfg6ar54SRMHvf85HNVFCQY0eVJl4BHeV3YWM+w=
Subject key identifier: 70:A3:28:73:C8:FF:96:B1:CA:3C:C8:BD:CD:4C:09:3C:17:38:FB:5C
Authority key identifier: 32:E6:58:51:5B:1E:6A:72:B9:9F:33:26:69:E0:69:E6:15:4F:70:DD
Certificate issuer: /CN=32e658515b1e6a72b99f332669e069e6154f70dd
Certificate serial: 0194BC3C1923D6C5C9FD3158A6E49B344D13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MuZYUVseanK5nzMmaeBp5hVPcN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/f69c42-6f9d-490e-b132-67f8e7d1137c/1/MuZYUVseanK5nzMmaeBp5hVPcN0.mft
Manifest number: 0F04
Signing time: Fri 31 Jan 2025 12:00:42 +0000
Manifest this update: Fri 31 Jan 2025 12:00:42 +0000
Manifest next update: Sat 01 Feb 2025 12:00:42 +0000
Files and hashes: 1: IP2TA110bw-H4O1wamCYoNbCcjM.roa (hash: hPPZWdSxmIy27LNJGRF/m5E6I6iPJVLPz81w8YZa7M4=)
2: MuZYUVseanK5nzMmaeBp5hVPcN0.crl (hash: h1J0T5wQp3mGAEJ8ii6vrsZthAQzDzxxOsevn0Smj4k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:19:23:d6:c5:c9:fd:31:58:a6:e4:9b:34:4d:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32e658515b1e6a72b99f332669e069e6154f70dd
Validity
Not Before: Jan 31 12:00:42 2025 GMT
Not After : Feb 1 12:00:42 2025 GMT
Subject: CN=70a32873c8ff96b1ca3cc8bdcd4c093c1738fb5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:25:72:74:c6:ca:ed:df:69:ad:6a:e8:45:82:
fc:47:21:f2:47:3c:47:f7:29:45:0f:8f:64:f9:76:
63:76:b4:64:f2:44:28:8c:17:95:3f:bc:26:12:35:
b9:34:51:1f:b2:95:a4:5a:55:18:23:9f:2a:63:35:
a3:3c:c7:99:9f:3e:27:49:99:43:cb:12:32:8a:48:
9c:94:42:c5:b6:80:58:56:4b:4a:8f:a6:a2:fe:e9:
83:c1:8b:47:e1:5d:f6:92:ad:5e:3c:ed:f0:2c:b2:
7d:2c:48:95:a6:42:8d:54:97:4d:9a:65:7d:b7:ac:
8f:0b:4e:51:83:b4:58:63:87:89:92:16:f2:b4:70:
de:88:f1:ed:f2:77:17:2c:9d:15:e1:aa:04:72:d1:
8f:76:69:7b:a2:2e:21:aa:c9:7c:a0:e9:5c:26:97:
80:c7:af:0f:62:60:ce:23:d2:9f:24:e4:02:6b:82:
89:23:93:04:f0:7f:a2:fd:6d:f2:cd:c4:a9:e9:3a:
7a:d7:29:67:85:bc:6f:4a:0a:14:ae:72:49:ad:7f:
a5:92:15:ee:eb:7a:e5:35:32:1f:64:1b:11:64:8f:
0e:8f:4c:62:50:c7:82:48:fe:c2:17:cd:4a:08:9d:
51:c2:1a:93:54:a2:78:ed:bb:45:c6:0d:3d:bb:fb:
42:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:A3:28:73:C8:FF:96:B1:CA:3C:C8:BD:CD:4C:09:3C:17:38:FB:5C
X509v3 Authority Key Identifier:
keyid:32:E6:58:51:5B:1E:6A:72:B9:9F:33:26:69:E0:69:E6:15:4F:70:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MuZYUVseanK5nzMmaeBp5hVPcN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/f69c42-6f9d-490e-b132-67f8e7d1137c/1/MuZYUVseanK5nzMmaeBp5hVPcN0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/f69c42-6f9d-490e-b132-67f8e7d1137c/1/MuZYUVseanK5nzMmaeBp5hVPcN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:6f:a9:c6:35:b8:47:51:a9:ac:4a:6c:3b:3e:01:0d:71:3e:
40:54:e8:6b:7c:8b:24:ca:1a:32:2b:47:51:ba:21:b6:66:4d:
f5:3f:bb:13:6a:de:eb:17:04:53:98:5c:05:6b:b1:3d:3d:85:
95:d2:7d:da:1a:e4:75:f1:30:53:97:1a:f8:c5:3d:d8:86:b1:
67:9d:55:b3:b5:5c:18:a1:6d:fb:96:e1:f1:77:d2:5c:3f:78:
37:10:cb:ea:a5:dd:77:74:67:40:3b:61:f9:36:6c:7b:bd:19:
f1:87:61:46:0f:ae:8b:dd:de:ed:bc:11:03:cc:e1:5e:f1:79:
7a:fd:99:81:f9:08:88:56:da:21:2f:e3:5b:12:bb:77:7a:e1:
2e:de:cc:fe:88:34:9b:78:ca:e0:e4:8f:80:99:57:a9:9f:f3:
ea:ce:01:51:c7:2e:e0:b7:67:4d:31:c9:d0:99:53:45:32:a6:
11:80:92:86:69:ca:e0:54:9a:3d:2d:28:25:37:ac:4e:b0:43:
d5:c6:80:2d:45:5f:1d:e7:92:e5:75:c4:85:e3:2c:38:10:86:
b5:6d:c5:a0:7d:f5:ac:79:ab:43:7b:df:6c:54:c1:a4:d6:48:
24:0a:a2:16:75:86:06:e5:5b:1f:80:6e:79:49:11:7a:e0:cb:
d8:50:75:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:22 2025 by rpki-client