Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/3dbd39-5f9f-48fb-9c01-bd6e3b026c37/1/MduEfR2x4LLCwlUCIQ_1pxmWehk.mft
File: MduEfR2x4LLCwlUCIQ_1pxmWehk.mft (raw, json)
Hash identifier: DTqD9mtmtdHDDquTStCDLqXlbvHt8Sq9VojALv0Ip9k=
Subject key identifier: F8:9C:71:7F:3D:9A:3D:C2:10:4F:B9:85:BD:31:C6:65:DE:13:82:DC
Authority key identifier: 31:DB:84:7D:1D:B1:E0:B2:C2:C2:55:02:21:0F:F5:A7:19:96:7A:19
Certificate issuer: /CN=31db847d1db1e0b2c2c25502210ff5a719967a19
Certificate serial: 0194BD17763A0C7BD9AD7F23C4658B24D7C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MduEfR2x4LLCwlUCIQ_1pxmWehk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/3dbd39-5f9f-48fb-9c01-bd6e3b026c37/1/MduEfR2x4LLCwlUCIQ_1pxmWehk.mft
Manifest number: 0CB2
Signing time: Fri 31 Jan 2025 16:00:18 +0000
Manifest this update: Fri 31 Jan 2025 16:00:18 +0000
Manifest next update: Sat 01 Feb 2025 16:00:18 +0000
Files and hashes: 1: 0IHmyTelW8zpO-_QdR9UfSEkXAI.roa (hash: UlYSOxczUbkdfKJ9miYaE+QEa9fb9mQhLOlffEgcsoY=)
2: MduEfR2x4LLCwlUCIQ_1pxmWehk.crl (hash: WVHzUSNotcsA4RKa2pS5r93Mmr7iC3LyVN5zTloxkoQ=)
3: PQvHlqxPOZ5EcVf6KsUmqrHycoQ.roa (hash: 3ksFdFv/Fa3gpXmdL0Lg1ZLkcfv0kVJRQQQ2mO5ywLk=)
4: ahJNP8kQoasOGfOn59FuyopzzTg.roa (hash: 6vRaJqB5sPcJZ3/fvcKuSD1RiGeRJgHPqC0FIBy6qGg=)
5: al6s6WgAHfcCaxm7dnRoKhGccgc.roa (hash: dELh70vEBgRpyjJwV+u67ZFF6OWlxJRy1hJNSwq3TqA=)
6: cz_i6inXtcUIjcIN9oJWb2HinvM.roa (hash: PQ0BLB4sI2B91vehL/dzDGr3GUpFGQqMElA5h/dx7n8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:76:3a:0c:7b:d9:ad:7f:23:c4:65:8b:24:d7:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31db847d1db1e0b2c2c25502210ff5a719967a19
Validity
Not Before: Jan 31 16:00:18 2025 GMT
Not After : Feb 1 16:00:18 2025 GMT
Subject: CN=f89c717f3d9a3dc2104fb985bd31c665de1382dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:6e:61:64:97:41:8f:e6:ac:6d:f8:b1:05:92:
34:82:4f:2f:1b:32:25:65:2d:00:ea:05:17:5f:87:
3e:fb:1d:16:f2:1c:7c:e2:3d:85:97:1a:5b:82:77:
7e:eb:de:b8:22:35:d0:30:b6:b6:96:7d:97:30:55:
b0:28:f8:54:aa:0b:5f:65:b9:e3:a0:dd:39:e1:38:
75:f6:d3:05:b3:05:4c:e4:fd:83:e7:31:0f:10:92:
44:5d:c5:35:c6:f1:28:9c:4c:51:af:1b:cc:35:5f:
31:e1:89:c0:89:fe:31:fd:d1:a6:1e:25:11:f4:a8:
3e:ce:15:7f:f3:2c:de:c1:90:80:69:c3:e7:54:aa:
76:15:69:fe:4a:42:47:93:b4:1f:23:b7:a1:2c:c6:
e0:4d:b4:32:09:30:19:a8:d0:6c:c7:0b:13:07:94:
77:51:f9:c9:2b:9c:45:8b:e9:e3:32:3c:26:b6:2f:
d3:29:cf:68:96:a5:4f:6b:09:76:45:4f:ee:e8:5e:
83:5b:fa:a9:61:d0:eb:36:1f:4f:1f:6a:a4:56:7c:
27:65:f5:23:92:62:0e:0d:b5:ed:78:80:f3:21:11:
90:d3:e7:ee:ae:59:bf:ca:5b:26:3d:9d:b9:b8:ab:
48:c8:c3:f7:25:06:82:0d:52:a6:04:cd:58:bc:0a:
80:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:9C:71:7F:3D:9A:3D:C2:10:4F:B9:85:BD:31:C6:65:DE:13:82:DC
X509v3 Authority Key Identifier:
keyid:31:DB:84:7D:1D:B1:E0:B2:C2:C2:55:02:21:0F:F5:A7:19:96:7A:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MduEfR2x4LLCwlUCIQ_1pxmWehk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/3dbd39-5f9f-48fb-9c01-bd6e3b026c37/1/MduEfR2x4LLCwlUCIQ_1pxmWehk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/3dbd39-5f9f-48fb-9c01-bd6e3b026c37/1/MduEfR2x4LLCwlUCIQ_1pxmWehk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:4a:fe:39:88:07:77:e9:76:bc:31:5a:6a:9a:9a:74:5e:8b:
cd:79:41:c9:0c:1a:c6:c2:80:b4:de:84:85:96:e8:9c:a8:de:
b0:1c:ef:3f:b8:76:ed:6d:3f:66:a8:01:6f:5c:af:21:14:4d:
5e:58:e7:1a:47:9c:d5:3d:cd:90:bc:a6:7c:4d:0e:ef:cc:bc:
f2:fd:f2:81:c5:05:66:4b:05:cc:62:5e:c6:54:81:3c:2d:4e:
5c:1f:3d:f8:ad:ea:be:a9:85:24:d3:42:e7:8f:72:45:9d:ec:
bb:d8:05:6d:d8:a4:0a:8a:86:64:69:59:e0:5f:83:7d:69:05:
30:73:ce:45:fb:3e:76:15:f9:0c:23:eb:a9:e9:5d:dc:8c:9d:
17:b4:05:f7:d2:04:15:31:73:3f:8e:5f:b2:75:03:38:b7:5b:
4f:a1:31:f8:52:f2:f5:43:52:1f:67:b3:d0:72:87:7a:de:4e:
c8:14:04:15:b7:1f:08:62:fc:4f:44:0a:f0:f5:cd:48:e6:c7:
0b:1e:a6:34:ef:e6:c8:de:85:4b:44:63:ee:04:91:7b:33:99:
60:b7:89:80:6f:35:69:08:0a:e8:e5:a9:cd:e3:58:fb:6e:d1:
71:e5:bd:64:86:3f:c8:9a:37:4d:e4:ba:19:c1:6e:1f:9a:eb:
e1:42:42:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:41:42 2025 by rpki-client