Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/MvrPXQJzAmjTsedslrD4WI2Zi08.mft
File: MvrPXQJzAmjTsedslrD4WI2Zi08.mft (raw, json)
Hash identifier: IAWXtAeEls76iaFyQpcVXYiisFtPGcI/30WyMC8b48M=
Subject key identifier: B0:39:59:0B:C7:E4:B1:07:3B:45:47:45:51:D1:D8:D1:3B:1E:C4:8D
Authority key identifier: 32:FA:CF:5D:02:73:02:68:D3:B1:E7:6C:96:B0:F8:58:8D:99:8B:4F
Certificate issuer: /CN=32facf5d02730268d3b1e76c96b0f8588d998b4f
Certificate serial: 0194BC0513E6AC76FCC263D1BF201545323A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MvrPXQJzAmjTsedslrD4WI2Zi08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/MvrPXQJzAmjTsedslrD4WI2Zi08.mft
Manifest number: 1179
Signing time: Fri 31 Jan 2025 11:00:36 +0000
Manifest this update: Fri 31 Jan 2025 11:00:36 +0000
Manifest next update: Sat 01 Feb 2025 11:00:36 +0000
Files and hashes: 1: MvrPXQJzAmjTsedslrD4WI2Zi08.crl (hash: LpwnN8k5oUuilP8/pJNSaRFwGMmFt6tURnxH8iTDgaI=)
2: kZhmU11AcLMU9j0H5R4zLY4tMkU.roa (hash: 4zjf1YfmBA/3a2ksRPti6rOa+1AdjV5zlhfDUSPHUS4=)
3: macgBtbCg5Mxhslrz0OHJiQKlew.roa (hash: GBS8E51Gp7YKQrT0Z2MAz5xnX4MGpebSlxO7yoAgVFo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:13:e6:ac:76:fc:c2:63:d1:bf:20:15:45:32:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32facf5d02730268d3b1e76c96b0f8588d998b4f
Validity
Not Before: Jan 31 11:00:36 2025 GMT
Not After : Feb 1 11:00:36 2025 GMT
Subject: CN=b039590bc7e4b1073b45474551d1d8d13b1ec48d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:73:0f:a3:a0:6d:72:e9:ac:c3:ca:91:ee:10:
6c:a3:5b:bc:8e:08:98:56:94:52:ac:4f:95:d2:bb:
e6:18:49:5a:04:4b:7c:7c:c1:9c:11:45:82:cd:9a:
85:63:32:92:17:1a:42:ec:df:bd:1f:42:e8:41:54:
cd:36:36:38:1b:15:1e:4a:f5:1b:2f:5c:af:27:f7:
97:4e:ae:11:6f:71:7b:27:36:c2:5f:8c:19:79:5e:
b6:b0:43:26:d9:c7:b3:d7:5b:00:b2:88:79:ae:33:
8a:20:7b:14:82:af:ac:dd:5e:4e:aa:fb:34:7c:e3:
b4:02:31:c0:e9:cd:1f:13:69:f7:f3:38:81:e7:b8:
ca:38:7d:b9:08:61:ff:6c:a8:ea:13:aa:8f:6d:f5:
1f:a9:55:cc:6d:3d:48:b0:31:22:5f:68:40:67:a4:
07:2f:7e:3b:c5:0a:99:c9:27:46:c6:ba:fe:32:e2:
6f:78:c9:d8:be:71:48:0a:a6:d2:70:24:40:53:24:
ae:8d:37:7b:9d:dd:9b:49:0f:48:21:25:f1:30:46:
8e:89:78:fa:bf:9b:a2:57:54:6c:9d:0d:14:e6:70:
33:c2:83:20:d9:b5:c3:36:b3:2b:0b:fd:ea:92:29:
87:10:9f:b2:05:19:74:a1:8a:e8:ea:11:5d:c7:d4:
35:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:39:59:0B:C7:E4:B1:07:3B:45:47:45:51:D1:D8:D1:3B:1E:C4:8D
X509v3 Authority Key Identifier:
keyid:32:FA:CF:5D:02:73:02:68:D3:B1:E7:6C:96:B0:F8:58:8D:99:8B:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MvrPXQJzAmjTsedslrD4WI2Zi08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/MvrPXQJzAmjTsedslrD4WI2Zi08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/MvrPXQJzAmjTsedslrD4WI2Zi08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:c7:6a:7f:27:d8:a8:53:71:42:8d:bb:1f:9f:0e:d3:05:6a:
54:e0:64:e3:4c:9a:94:ec:99:21:63:b1:6c:42:a1:af:96:f0:
16:0d:8c:a5:04:44:2d:95:4e:d0:3f:09:f9:a3:40:2b:d4:4e:
43:db:ed:6a:e4:35:78:55:21:ea:dc:d2:73:94:b0:fb:bd:31:
6f:76:a1:d7:5a:2e:21:2e:42:03:34:22:7f:1b:70:56:67:c6:
13:56:c5:c2:f3:2b:cd:fd:4e:60:14:bf:98:8b:5d:9c:8d:4e:
c5:bd:f9:56:20:dc:83:d7:68:f8:fa:90:57:35:3c:c6:de:f7:
37:4a:a6:5a:15:cd:6e:66:02:3a:e1:d5:ca:42:84:26:36:9f:
fb:45:d3:5b:fe:22:24:a7:52:67:77:83:b3:c4:93:c7:10:a8:
a0:50:55:d1:3f:87:0e:06:69:04:89:4c:0b:19:db:93:42:f9:
b3:9d:f1:57:a0:12:21:e4:02:ac:2a:51:48:e7:26:7c:73:c3:
61:51:93:5d:b8:d5:79:3d:25:50:25:a7:14:04:8a:d4:92:5e:
ea:b0:5d:6f:8a:d8:08:88:2a:ff:93:16:56:ff:53:3e:d9:1d:
15:b9:9e:06:0a:12:9e:a5:00:0f:f2:c6:a6:ec:ca:a3:51:c9:
0d:9b:ef:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:24:22 2025 by rpki-client