Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/122129-2226-4e97-b0a7-1aa500b9948a/1/MqA_7V3HoMNOTYV3T_cAXTPm7xM.mft
File: MqA_7V3HoMNOTYV3T_cAXTPm7xM.mft (raw, json)
Hash identifier: pRMjuxhXN7sSNmx9CYb5y9M6VgtjuR/e601enCISqMo=
Subject key identifier: 2C:79:48:66:93:2F:7F:9C:A0:90:00:19:9B:A3:97:1A:59:C7:C6:D1
Authority key identifier: 32:A0:3F:ED:5D:C7:A0:C3:4E:4D:85:77:4F:F7:00:5D:33:E6:EF:13
Certificate issuer: /CN=32a03fed5dc7a0c34e4d85774ff7005d33e6ef13
Certificate serial: 0194BC7293F5E8F93E5D9ED9A591B92A1656
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MqA_7V3HoMNOTYV3T_cAXTPm7xM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/122129-2226-4e97-b0a7-1aa500b9948a/1/MqA_7V3HoMNOTYV3T_cAXTPm7xM.mft
Manifest number: 0B87
Signing time: Fri 31 Jan 2025 13:00:13 +0000
Manifest this update: Fri 31 Jan 2025 13:00:13 +0000
Manifest next update: Sat 01 Feb 2025 13:00:13 +0000
Files and hashes: 1: MqA_7V3HoMNOTYV3T_cAXTPm7xM.crl (hash: Yd9QjSXT78PDlmTJLlrDvfTj35CWAAnzVvw1J6cYLvM=)
2: n7xOAF9JLEuxF4PJQhQbDSl7UJE.roa (hash: aqnlDGIUWDjeSw56rbOxl68/tZN2XXXLT/oEGZEp9F4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:93:f5:e8:f9:3e:5d:9e:d9:a5:91:b9:2a:16:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32a03fed5dc7a0c34e4d85774ff7005d33e6ef13
Validity
Not Before: Jan 31 13:00:13 2025 GMT
Not After : Feb 1 13:00:13 2025 GMT
Subject: CN=2c794866932f7f9ca09000199ba3971a59c7c6d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ca:08:0f:ee:91:c6:52:4c:1c:9c:b5:f4:26:
cb:7f:a5:f2:34:db:35:59:58:8d:b8:d2:b1:a3:0d:
5a:d4:c0:7e:03:91:e7:b6:21:a2:be:89:44:9f:6a:
56:eb:3a:47:24:89:08:2a:1f:70:a2:55:a6:b1:b7:
33:3d:44:33:a8:84:6b:3e:80:75:b6:e4:45:a8:9c:
fc:c7:d4:d1:5f:32:e5:27:87:dc:27:24:8d:6a:a9:
e5:93:89:2a:28:bd:8f:7c:1c:de:8d:3c:c2:0f:b3:
d6:00:8f:17:4d:5f:24:23:67:bd:68:2c:7f:2d:62:
98:c1:b9:76:a3:47:ff:44:d8:97:f4:81:3d:70:b5:
a9:ef:f2:1e:e0:38:36:59:69:54:53:7c:0c:44:78:
46:ca:f4:9a:4e:0d:8a:36:c9:dd:e9:3f:ed:f6:2e:
40:cb:8f:14:7a:f1:9a:d4:57:fb:05:58:ee:fc:70:
f6:4d:3f:72:14:96:76:f7:df:ba:3b:ef:4a:b0:4d:
c3:16:d9:b6:92:0a:20:e4:32:29:11:fc:b0:5c:f8:
cd:f3:7b:0f:2a:eb:62:f4:f9:49:d2:68:72:07:4e:
da:2e:bc:53:15:10:69:4d:a8:e2:2c:a9:c2:2b:5f:
ea:2a:12:db:2b:66:36:ab:ec:49:42:a7:80:58:30:
1f:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:79:48:66:93:2F:7F:9C:A0:90:00:19:9B:A3:97:1A:59:C7:C6:D1
X509v3 Authority Key Identifier:
keyid:32:A0:3F:ED:5D:C7:A0:C3:4E:4D:85:77:4F:F7:00:5D:33:E6:EF:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MqA_7V3HoMNOTYV3T_cAXTPm7xM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/122129-2226-4e97-b0a7-1aa500b9948a/1/MqA_7V3HoMNOTYV3T_cAXTPm7xM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/122129-2226-4e97-b0a7-1aa500b9948a/1/MqA_7V3HoMNOTYV3T_cAXTPm7xM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:87:af:60:8a:66:ee:3e:6e:28:72:c2:65:66:d3:7c:78:03:
b2:59:68:bc:8c:65:0a:2d:a6:fe:3f:61:a0:d0:74:28:e8:6c:
7f:06:85:c3:1b:93:4c:df:31:6d:98:55:09:a6:bb:16:03:09:
16:49:12:e6:dc:f5:e7:69:ad:d0:4a:3c:03:fd:6a:6f:d2:d0:
36:02:9f:f9:a1:76:d7:22:d2:89:d8:85:77:a7:e5:be:61:c7:
ee:22:97:1e:9a:06:62:9e:d2:63:21:6e:0f:bc:01:d3:32:3d:
1e:2b:2d:a6:37:04:f3:43:74:b2:03:4b:3d:02:b4:24:4e:f6:
be:de:32:d7:60:8a:99:14:e3:92:03:18:41:e5:a6:55:71:6f:
30:dd:83:b4:2b:1f:1e:cb:e2:fb:27:58:66:77:82:1e:28:82:
bf:42:b2:5b:1a:26:c7:5f:17:e5:be:1f:b4:58:fb:4b:bc:93:
7a:25:e4:31:41:1e:e8:0a:15:86:9d:0a:e8:48:4a:81:e6:5e:
c7:1a:dd:d4:6a:f6:c1:a7:05:07:a1:ae:49:ff:52:09:0f:01:
2d:21:6c:b3:a8:0d:3f:b7:ac:20:6c:57:6a:92:fc:e3:9a:87:
ec:43:34:98:ff:d8:e4:5c:b2:45:d6:e9:30:21:02:82:d3:9e:
52:6e:6a:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:28 2025 by rpki-client