Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/084f71-927a-4fa8-bea5-cd87ee970e6f/1/MhS0ivRv_G1W3QurOzGH3lPp6yM.mft
File: MhS0ivRv_G1W3QurOzGH3lPp6yM.mft (raw, json)
Hash identifier: QVHBEf9CtsHAgZIpFeiDjCZv7EFonRCkICF3f13oJsM=
Subject key identifier: 7A:3D:E1:6C:5C:CB:AA:B4:48:EC:4F:7E:93:92:A9:B3:F1:6B:FF:34
Authority key identifier: 32:14:B4:8A:F4:6F:FC:6D:56:DD:0B:AB:3B:31:87:DE:53:E9:EB:23
Certificate issuer: /CN=3214b48af46ffc6d56dd0bab3b3187de53e9eb23
Certificate serial: 0194BCE05A993406716A9B9B9C37650F0C21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MhS0ivRv_G1W3QurOzGH3lPp6yM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/084f71-927a-4fa8-bea5-cd87ee970e6f/1/MhS0ivRv_G1W3QurOzGH3lPp6yM.mft
Manifest number: 029A
Signing time: Fri 31 Jan 2025 15:00:07 +0000
Manifest this update: Fri 31 Jan 2025 15:00:07 +0000
Manifest next update: Sat 01 Feb 2025 15:00:07 +0000
Files and hashes: 1: MhS0ivRv_G1W3QurOzGH3lPp6yM.crl (hash: qVsN9ivkEkgWf7CGk8J1iHLVR6L1qYVvNjUBOtLICHk=)
2: xjdC4ob7aRS2Ev-O6nidCaBCpZg.roa (hash: SBgN/gihku+/q5pAC+Vic8NfDHBeeV+OVc/nVKV8Vm4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:5a:99:34:06:71:6a:9b:9b:9c:37:65:0f:0c:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3214b48af46ffc6d56dd0bab3b3187de53e9eb23
Validity
Not Before: Jan 31 15:00:07 2025 GMT
Not After : Feb 1 15:00:07 2025 GMT
Subject: CN=7a3de16c5ccbaab448ec4f7e9392a9b3f16bff34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:96:e3:17:31:21:cd:23:e0:cf:fc:91:2f:4a:
ed:d1:42:9c:f5:ad:b1:23:8c:29:03:7d:70:53:09:
f5:2c:f8:be:86:ec:82:8f:03:7a:bb:0f:a3:52:2e:
ab:8f:8b:4d:5e:b3:e1:ff:22:a7:0b:08:06:a0:47:
61:57:db:f8:7b:2f:1e:a0:e7:ed:ed:c6:9c:ca:60:
95:70:21:7e:b0:63:b6:19:79:43:1d:9d:15:46:2f:
6b:c5:3d:e8:09:99:a4:ee:ca:59:85:38:66:f5:5e:
5c:aa:85:11:d5:37:9d:b3:dc:0d:d0:c5:00:65:9c:
b2:ef:fc:5f:b9:68:d6:77:d2:1c:8e:f6:08:70:d1:
f3:1a:55:16:20:5e:c7:f0:35:a6:dd:60:30:ca:c2:
05:e5:4e:15:51:f5:ed:13:02:12:3b:f1:73:38:c4:
a5:68:fc:3a:cf:23:77:94:ee:29:5b:23:bd:59:d5:
5c:76:d4:bd:f9:94:27:63:f7:3d:5e:1e:00:09:18:
dc:8e:48:d6:47:bb:91:dc:a1:c1:97:a4:78:60:88:
b4:ec:a8:81:33:a0:42:32:f5:fc:98:42:7f:5f:e1:
2e:1b:fd:b4:6a:28:55:69:4e:8c:ba:b3:4a:08:1d:
be:cc:80:c3:a6:bd:c7:64:12:7b:55:2c:f1:db:e4:
a3:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:3D:E1:6C:5C:CB:AA:B4:48:EC:4F:7E:93:92:A9:B3:F1:6B:FF:34
X509v3 Authority Key Identifier:
keyid:32:14:B4:8A:F4:6F:FC:6D:56:DD:0B:AB:3B:31:87:DE:53:E9:EB:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MhS0ivRv_G1W3QurOzGH3lPp6yM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/084f71-927a-4fa8-bea5-cd87ee970e6f/1/MhS0ivRv_G1W3QurOzGH3lPp6yM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/084f71-927a-4fa8-bea5-cd87ee970e6f/1/MhS0ivRv_G1W3QurOzGH3lPp6yM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:9e:57:7b:63:58:c4:11:c2:7a:4f:52:0c:b7:85:c8:9f:a1:
dc:f3:30:36:82:0f:5c:e5:43:a2:2e:5d:08:c7:4b:e0:a7:8f:
a5:66:7e:bd:9d:b0:2b:b1:b2:f5:52:9f:5e:14:84:d8:d3:f0:
f9:ae:05:fa:a6:a3:68:a1:3c:ed:40:c3:e5:f8:64:53:f7:44:
c9:28:aa:b5:43:8a:3c:2b:97:f2:51:ff:c8:b8:53:01:21:8a:
10:d4:a6:c3:fd:f9:39:67:ed:d7:6b:4c:4b:8b:1f:5f:52:a8:
5d:8f:37:90:b3:c7:09:84:3b:f9:04:11:2a:88:ff:d6:75:cb:
8e:8c:d3:10:fe:bf:c5:1f:49:6b:c1:05:1c:cd:82:54:4e:c3:
19:35:22:5a:2a:75:90:6e:44:f3:4d:82:d4:7c:22:a9:3b:11:
bb:18:dd:ce:ab:9b:06:6d:d0:0e:73:e1:cb:2e:3f:20:a7:0c:
3b:d6:95:fc:a2:be:f6:aa:79:1f:c9:2b:7b:20:19:c9:d1:24:
9a:f6:a4:aa:69:6e:ab:9c:a0:63:2c:82:49:54:b0:42:3a:7b:
85:53:8f:be:ed:95:13:37:11:81:da:59:3e:30:11:18:f3:9a:
ee:08:54:10:5d:2f:b5:7b:d3:f1:75:94:13:4e:e7:4b:43:88:
89:bd:78:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:13 2025 by rpki-client