Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/225bcb-6d3d-4c0e-824f-2f1c8e408b64/1/MseO7vestFH8N1df65EU38zBzfs.mft
File: MseO7vestFH8N1df65EU38zBzfs.mft (raw, json)
Hash identifier: PHAteRmeuwQJf+AprGjjFYws/pP5iFxxIgn2+ojt8aA=
Subject key identifier: C1:76:CA:03:01:1A:BF:9A:35:BA:A9:A9:FE:74:86:AE:FC:77:4D:A5
Authority key identifier: 32:C7:8E:EE:F7:AC:B4:51:FC:37:57:5F:EB:91:14:DF:CC:C1:CD:FB
Certificate issuer: /CN=32c78eeef7acb451fc37575feb9114dfccc1cdfb
Certificate serial: 0194BD85BE157D087B23C8E075C82A06CBED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MseO7vestFH8N1df65EU38zBzfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/225bcb-6d3d-4c0e-824f-2f1c8e408b64/1/MseO7vestFH8N1df65EU38zBzfs.mft
Manifest number: 0F6C
Signing time: Fri 31 Jan 2025 18:00:46 +0000
Manifest this update: Fri 31 Jan 2025 18:00:46 +0000
Manifest next update: Sat 01 Feb 2025 18:00:46 +0000
Files and hashes: 1: GbEyk8ZWl0vqgj_sPWLMTAGno6s.roa (hash: JzRbeYoWUwlRVaKgJmm7hD8H9CYTCwAivI+PSmgKwME=)
2: M6U6dkH9DSHzE2ElXf3ZUgv-gao.roa (hash: gyUWfn2VEKn6DTTZDCrSAEanNDrzsmaWPFOYycLgJ88=)
3: MseO7vestFH8N1df65EU38zBzfs.crl (hash: G+n3DxwOb/D3ox/GPXddfD0qjhw/2/aCmmQcO8AbOUE=)
4: qcE5lMt-ta8yQgK_A4TOf_qcnKk.roa (hash: mHbw87Bhgg5orJBSCEF9YhID6w2GXs/pHd+LaovXweg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:be:15:7d:08:7b:23:c8:e0:75:c8:2a:06:cb:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32c78eeef7acb451fc37575feb9114dfccc1cdfb
Validity
Not Before: Jan 31 18:00:46 2025 GMT
Not After : Feb 1 18:00:46 2025 GMT
Subject: CN=c176ca03011abf9a35baa9a9fe7486aefc774da5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:90:84:5c:5c:14:8b:20:df:0b:69:45:4c:17:
cf:42:c8:b2:1e:3f:4c:48:b2:7a:f5:02:72:a6:a2:
e4:21:3a:de:b7:31:6a:aa:db:c1:3f:e4:a4:a0:31:
54:4e:61:44:6d:00:42:be:12:8b:85:41:c8:ae:4c:
5a:61:22:44:95:21:94:02:23:c4:8a:68:ea:84:59:
2e:da:da:da:80:ff:7c:5f:47:ee:b5:d9:76:0f:61:
5f:30:e2:7d:11:e5:00:f3:d5:01:69:e4:4a:ec:f2:
4b:2e:2d:84:e9:a3:72:96:d4:de:48:4e:b4:82:a4:
fc:5b:04:6d:05:28:97:03:f6:73:71:00:dc:b7:2a:
d1:cd:db:b4:5b:00:1f:85:f5:37:3b:b3:31:4e:8d:
4f:cf:71:7c:48:e5:a5:80:e1:b5:2d:6c:8d:55:72:
90:5c:18:8f:b4:5b:9e:43:4b:f4:fb:61:cd:eb:36:
cb:fc:ec:ed:94:af:a2:24:c6:cb:aa:89:31:ae:3f:
ec:bc:be:23:cd:16:0a:e1:ae:05:9a:54:cb:53:05:
43:2b:81:0f:37:fc:75:3c:ae:9d:ab:95:be:d0:08:
76:b5:7a:a7:c4:0e:83:ca:db:8c:e7:7f:04:85:69:
37:36:f5:3f:5e:5b:69:01:69:b4:81:66:ab:82:4b:
4f:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:76:CA:03:01:1A:BF:9A:35:BA:A9:A9:FE:74:86:AE:FC:77:4D:A5
X509v3 Authority Key Identifier:
keyid:32:C7:8E:EE:F7:AC:B4:51:FC:37:57:5F:EB:91:14:DF:CC:C1:CD:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MseO7vestFH8N1df65EU38zBzfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/225bcb-6d3d-4c0e-824f-2f1c8e408b64/1/MseO7vestFH8N1df65EU38zBzfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/225bcb-6d3d-4c0e-824f-2f1c8e408b64/1/MseO7vestFH8N1df65EU38zBzfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:9d:53:b0:57:40:61:aa:4f:25:f4:3e:b7:10:1d:d6:70:c8:
72:76:62:b8:55:22:e0:55:e7:98:08:62:7d:d0:2d:3a:ea:f8:
66:83:32:9a:37:f1:5f:24:ba:5f:ce:53:6b:df:9a:46:e0:24:
7b:40:cc:95:36:bc:2d:8f:90:b9:56:d3:dd:17:14:45:02:f6:
65:bc:19:cc:5b:10:80:db:b0:c7:01:d5:6e:af:fc:a7:38:8b:
21:da:a0:77:04:8d:7b:dd:22:99:e8:5b:07:33:2e:3f:b7:d7:
e4:04:7a:a9:ca:3a:b2:1e:70:c4:1f:aa:f6:aa:42:ca:fc:ee:
d1:f4:33:b5:2b:f1:d7:10:6f:cb:6b:03:e8:4d:25:09:f5:33:
9c:c2:b6:03:3b:8a:31:21:64:99:d7:53:ff:f0:f7:f0:e1:af:
a1:87:83:98:7a:18:68:cc:18:12:e7:33:2f:1e:0b:6e:67:54:
9b:b4:ab:13:97:87:72:e6:25:21:02:f0:aa:9e:cf:af:4b:4f:
da:e1:2f:bb:83:6e:42:c3:af:1b:b9:da:20:49:70:83:1d:28:
d5:99:56:9b:61:c8:68:ed:f3:d7:ba:78:b9:7b:2d:9f:39:2e:
0b:b5:3e:d1:71:5c:3d:3b:6a:76:c0:ce:2c:15:6b:9c:0d:04:
77:0e:91:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:30:06 2025 by rpki-client