Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/f0358f-0d50-4704-85cf-262da883c8e2/1/MjFs1IgVYto785JbSRi24R12UUw.mft
File: MjFs1IgVYto785JbSRi24R12UUw.mft (raw, json)
Hash identifier: itO3SfI7PsR91ZURlsgjgidjscLkIIvgMKq4VhRmGR8=
Subject key identifier: 78:FC:8E:30:9B:75:C9:14:61:FA:92:8C:2D:1D:8F:00:51:CA:B6:8A
Authority key identifier: 32:31:6C:D4:88:15:62:DA:3B:F3:92:5B:49:18:B6:E1:1D:76:51:4C
Certificate issuer: /CN=32316cd4881562da3bf3925b4918b6e11d76514c
Certificate serial: 0194BD852789F5E0DB3F219CD76796473CF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MjFs1IgVYto785JbSRi24R12UUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/f0358f-0d50-4704-85cf-262da883c8e2/1/MjFs1IgVYto785JbSRi24R12UUw.mft
Manifest number: 0B87
Signing time: Fri 31 Jan 2025 18:00:07 +0000
Manifest this update: Fri 31 Jan 2025 18:00:07 +0000
Manifest next update: Sat 01 Feb 2025 18:00:07 +0000
Files and hashes: 1: MjFs1IgVYto785JbSRi24R12UUw.crl (hash: mmy/6p2/NXDpjAPLRkj84rr+f38y/QEMyJIYdVdU+nU=)
2: O3osI0EMQ6lE3X_ye8aviCt4iTA.roa (hash: 9DOrDt/vfxy297yCahpwE4Xa/8MH6AlQc6vnFQ987B0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:27:89:f5:e0:db:3f:21:9c:d7:67:96:47:3c:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32316cd4881562da3bf3925b4918b6e11d76514c
Validity
Not Before: Jan 31 18:00:07 2025 GMT
Not After : Feb 1 18:00:07 2025 GMT
Subject: CN=78fc8e309b75c91461fa928c2d1d8f0051cab68a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:00:3c:d2:75:28:e3:f1:87:e8:c2:22:6d:54:
2a:97:d0:35:04:7b:fc:27:03:c8:49:6e:34:f0:67:
58:ed:c4:8e:85:c4:6b:98:8d:c9:eb:29:79:ef:db:
0b:03:b6:eb:19:ab:4a:83:2d:92:11:74:6b:07:9f:
16:fe:f0:81:cc:d8:f6:7e:45:21:7e:c8:e5:5b:3d:
69:25:a7:b3:15:00:79:78:2a:05:b7:15:03:e4:76:
9f:12:59:bb:3b:0c:d1:64:35:5e:4f:1a:87:ce:51:
fc:1a:05:7a:1a:f7:8d:48:42:8f:25:d0:bb:9b:58:
da:37:ce:35:03:b8:19:7e:ee:65:b7:4e:94:a8:67:
aa:69:66:4a:b4:81:26:5a:ac:87:3f:0b:8e:49:5d:
8d:12:48:7f:bd:18:cc:33:bf:18:f0:dc:a0:1e:83:
68:31:cf:51:a7:44:f8:36:42:7e:ea:dd:86:dd:93:
4e:1e:c9:88:fa:e1:8b:b9:fa:0c:a5:7a:31:6e:de:
8c:bb:79:97:a3:f7:db:82:6b:2f:29:76:5f:3a:32:
6a:91:ba:b1:dc:6c:06:b2:5d:c5:f7:8b:de:f8:dc:
9b:65:b3:a5:a5:59:9b:44:cf:2d:60:61:b7:bc:09:
11:82:8b:90:9a:6f:2b:ba:27:0b:47:bb:74:dd:48:
8b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:FC:8E:30:9B:75:C9:14:61:FA:92:8C:2D:1D:8F:00:51:CA:B6:8A
X509v3 Authority Key Identifier:
keyid:32:31:6C:D4:88:15:62:DA:3B:F3:92:5B:49:18:B6:E1:1D:76:51:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MjFs1IgVYto785JbSRi24R12UUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f0358f-0d50-4704-85cf-262da883c8e2/1/MjFs1IgVYto785JbSRi24R12UUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f0358f-0d50-4704-85cf-262da883c8e2/1/MjFs1IgVYto785JbSRi24R12UUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:e7:f6:1a:ad:f8:64:35:8f:34:68:88:e7:7b:49:a6:cb:ba:
a7:37:9e:75:f9:df:be:41:07:ce:aa:fc:2e:77:3f:d7:5c:07:
32:66:0e:9c:0f:3b:4b:4b:f4:7f:ed:dd:92:7a:ca:c4:b2:3e:
72:35:b5:16:27:ea:4e:ee:bd:87:3a:ee:76:05:7f:f6:a2:4a:
fd:e8:4e:cb:15:d0:fd:7e:b2:c3:ae:7e:7b:30:6c:e5:15:64:
40:30:57:84:bb:3a:d0:c4:94:01:60:fa:1d:9c:b0:06:9d:cf:
a4:83:07:e0:b5:80:46:8f:96:a8:92:eb:db:c1:ad:40:e8:01:
5e:74:db:cd:20:17:b9:a2:e5:f8:a9:2b:e2:7c:f3:d9:36:41:
2c:4f:7f:14:89:99:6a:ab:51:2f:d2:6d:f2:e7:94:dc:b1:12:
4f:bf:8d:7c:d4:91:6a:88:c7:11:f0:d6:39:fb:43:a1:a5:c9:
e6:c3:29:b2:e8:81:6d:86:78:d4:2e:1f:ad:a1:c8:8d:d5:b7:
06:8f:8c:08:fe:a0:c8:37:b5:88:31:16:3c:4d:ac:57:67:f0:
8c:c7:82:93:e1:d4:f8:bd:f4:48:78:ea:b7:bb:e7:86:4e:32:
9f:a1:2d:78:ae:47:7e:ed:d4:b3:f8:7c:ee:c1:35:5d:45:27:
1f:bf:98:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 14:45:40 2025 by rpki-client