Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bc1828-3536-4d0f-952b-9d27091784cc/1/MvG4X6XeV6X-Ej3jqQXzyzariv4.mft
File: MvG4X6XeV6X-Ej3jqQXzyzariv4.mft (raw, json)
Hash identifier: rEyITnNr8iGMnqg1osjHgLYJf0CjDNAtgCkYRkVleFM=
Subject key identifier: 71:38:DE:CA:FB:37:F9:D6:DF:CA:6C:D7:CD:DF:DF:31:1E:22:7D:4B
Authority key identifier: 32:F1:B8:5F:A5:DE:57:A5:FE:12:3D:E3:A9:05:F3:CB:36:AB:8A:FE
Certificate issuer: /CN=32f1b85fa5de57a5fe123de3a905f3cb36ab8afe
Certificate serial: 0194BCE0F25EC98DA4A0EB1FA63E222CF8F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MvG4X6XeV6X-Ej3jqQXzyzariv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bc1828-3536-4d0f-952b-9d27091784cc/1/MvG4X6XeV6X-Ej3jqQXzyzariv4.mft
Manifest number: 033B
Signing time: Fri 31 Jan 2025 15:00:46 +0000
Manifest this update: Fri 31 Jan 2025 15:00:46 +0000
Manifest next update: Sat 01 Feb 2025 15:00:46 +0000
Files and hashes: 1: 6_6aszZyp8SMXQXxbcRlY9OzEp0.roa (hash: ZpSCW2orH40kWdy7qjBS6/cwd0XChgeSKq4b9UXMouQ=)
2: MvG4X6XeV6X-Ej3jqQXzyzariv4.crl (hash: L6I+7Z2EMwC57FPJx0VpNFUxMecR1aYMz+2X9JOCQOM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:f2:5e:c9:8d:a4:a0:eb:1f:a6:3e:22:2c:f8:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32f1b85fa5de57a5fe123de3a905f3cb36ab8afe
Validity
Not Before: Jan 31 15:00:46 2025 GMT
Not After : Feb 1 15:00:46 2025 GMT
Subject: CN=7138decafb37f9d6dfca6cd7cddfdf311e227d4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:6f:a7:49:c2:27:49:1a:f4:c2:d3:e4:3f:23:
05:fe:ea:5e:ed:92:8b:c4:c5:18:f8:42:64:7a:69:
ee:24:80:97:6a:45:62:4f:04:fd:b4:09:87:d2:04:
34:2d:12:ac:52:fb:23:b9:73:1f:03:fb:de:67:dc:
94:35:89:99:d2:54:f5:49:50:5f:1a:e6:9a:90:95:
ac:d3:2d:9b:2e:b9:d1:fc:f0:39:42:13:7a:56:47:
04:7d:67:4b:9d:7b:3c:be:d3:d4:79:fa:11:c2:4b:
a5:99:77:e8:f4:b7:12:cf:b2:f4:71:f4:f9:fd:ab:
4f:52:6d:a9:b7:a2:3d:5c:05:2b:c1:dc:80:97:48:
e1:0b:55:68:21:20:51:ef:75:1c:ea:11:03:97:09:
12:22:8a:f4:33:05:e0:c5:bb:fe:95:e2:cd:5d:1e:
aa:61:c9:6c:63:e4:e4:0c:a3:e1:96:39:78:3b:79:
cd:7e:31:ac:a4:33:d9:a9:6f:fe:c5:9c:f1:f6:cf:
1d:4e:35:9e:1f:2e:1f:05:50:70:fe:1c:4d:0c:43:
1d:2e:15:90:ab:e4:c1:b3:6a:36:0a:12:39:73:6c:
4c:a1:4a:a2:29:75:98:96:93:09:90:48:f2:5a:02:
6d:04:4b:b8:21:10:2a:f9:a5:93:2f:90:56:27:b9:
9c:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:38:DE:CA:FB:37:F9:D6:DF:CA:6C:D7:CD:DF:DF:31:1E:22:7D:4B
X509v3 Authority Key Identifier:
keyid:32:F1:B8:5F:A5:DE:57:A5:FE:12:3D:E3:A9:05:F3:CB:36:AB:8A:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MvG4X6XeV6X-Ej3jqQXzyzariv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bc1828-3536-4d0f-952b-9d27091784cc/1/MvG4X6XeV6X-Ej3jqQXzyzariv4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bc1828-3536-4d0f-952b-9d27091784cc/1/MvG4X6XeV6X-Ej3jqQXzyzariv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:c9:04:bc:77:4b:c7:90:12:93:1d:9f:7e:52:d1:08:ef:b9:
a6:a5:2e:1c:34:ba:10:3b:dd:4d:14:13:90:5a:77:a2:74:d8:
25:a4:3f:31:cd:24:81:a4:67:b3:0c:dd:70:c9:37:f0:50:15:
2b:a3:6b:f8:58:93:77:fd:56:b6:35:66:60:08:3d:e0:02:79:
51:64:49:d1:a4:bc:c1:65:b4:cd:0f:59:1d:53:34:e6:2e:26:
a7:d2:1f:c9:1b:b6:9d:84:45:12:4d:4a:ab:e0:1d:d5:42:c2:
7d:11:79:c0:bd:7b:91:32:94:3b:f2:c3:be:18:4e:ba:27:aa:
7d:0a:d1:b6:c7:85:1a:82:cd:b0:d7:d0:a6:9b:53:71:db:66:
33:b4:24:7b:46:0b:db:24:41:a9:c4:75:2f:43:f9:f6:e9:1e:
65:55:78:63:6d:fa:44:a9:fe:6a:bd:85:55:9b:d1:b6:69:ab:
c9:d9:77:7b:33:e9:70:9a:a5:4a:39:5a:39:32:2a:38:ef:89:
9e:74:35:a1:72:c2:ea:cf:c8:23:1d:c7:77:00:74:db:51:9b:
b5:db:18:d4:43:05:95:fd:2f:5c:b0:f0:76:14:fd:5f:8c:a6:
4e:33:07:1c:ff:9f:fe:88:52:4a:2a:92:a6:70:e5:39:e1:79:
d3:62:2d:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:48:09 2025 by rpki-client