Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/ce043e-2ddb-48a7-8983-9d7a8872b454/1/MZIbb_GsRJuj5_iSzwgy0c631GQ.mft
File: MZIbb_GsRJuj5_iSzwgy0c631GQ.mft (raw, json)
Hash identifier: fBPQY1ew6eqYgVVlFmQfTJCNMXh6bFxTBAOt+BFfit8=
Subject key identifier: 9B:7F:59:0F:F8:9C:8B:D4:C2:88:FA:61:2A:61:FC:BA:04:4C:63:0B
Authority key identifier: 31:92:1B:6F:F1:AC:44:9B:A3:E7:F8:92:CF:08:32:D1:CE:B7:D4:64
Certificate issuer: /CN=31921b6ff1ac449ba3e7f892cf0832d1ceb7d464
Certificate serial: 0194BCE08988C0F9A0ACB20553C7CA70569D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MZIbb_GsRJuj5_iSzwgy0c631GQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/ce043e-2ddb-48a7-8983-9d7a8872b454/1/MZIbb_GsRJuj5_iSzwgy0c631GQ.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 15:00:19 +0000
Manifest this update: Fri 31 Jan 2025 15:00:19 +0000
Manifest next update: Sat 01 Feb 2025 15:00:19 +0000
Files and hashes: 1: MZIbb_GsRJuj5_iSzwgy0c631GQ.crl (hash: xdsjzYcNCtI1jGkjBHnD9wkxydaWmPRPAVkO6uvJbJM=)
2: XByggxBGqV43CvyUdzIIt6a45i0.roa (hash: +ahxNaqpYRIqcavaBqUNzPyEswHxojATT5doqQzic0g=)
3: jq2ROJQEklFg1qQcuXVZSg9rwTs.roa (hash: Kgf0TYs59UZnAuan2m+ClrKpKvyb0NT02OMtNpm3Mcs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:89:88:c0:f9:a0:ac:b2:05:53:c7:ca:70:56:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31921b6ff1ac449ba3e7f892cf0832d1ceb7d464
Validity
Not Before: Jan 31 15:00:19 2025 GMT
Not After : Feb 1 15:00:19 2025 GMT
Subject: CN=9b7f590ff89c8bd4c288fa612a61fcba044c630b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:38:27:6e:b8:e6:34:8a:8f:cd:ee:ef:dd:f1:
6d:fd:6b:34:e1:32:07:6a:c9:97:6d:62:77:8b:22:
1e:32:1e:cc:fe:e1:01:92:34:9f:d0:3c:3c:df:b2:
60:d3:ae:e3:df:bc:06:14:ce:fd:ad:ab:24:d6:e5:
ea:d3:b5:fd:90:d1:d8:ce:7a:7f:25:12:85:03:dc:
b5:1f:c5:42:35:65:b5:8a:7d:60:24:37:42:af:d2:
f5:01:73:b6:a2:c8:c8:de:2f:8d:a5:45:36:7f:b7:
ef:f6:c8:b2:c3:63:df:bc:20:a3:cb:65:76:22:7d:
8e:d4:9c:86:d0:e8:75:09:77:e0:d8:04:54:cb:5d:
7a:5c:9b:1c:88:84:d5:0b:b0:f2:2a:5d:99:a2:92:
f6:c7:5c:52:0c:39:f8:a4:d5:97:9d:c2:ab:61:04:
91:93:85:9f:b7:df:5a:50:cf:d7:c8:df:4d:9d:e3:
1c:7c:cd:7d:7a:8f:bb:4c:6d:cb:70:a8:4f:60:b1:
50:ab:9a:ee:cb:6d:83:bf:bf:88:93:26:d4:59:6b:
82:a3:2e:4e:e8:c2:93:1e:17:cb:51:dc:df:a1:77:
46:37:7a:5a:5e:56:c2:62:19:fc:63:6b:80:c3:9b:
e1:0e:5d:f4:8e:4b:39:90:ab:df:83:a6:74:80:0c:
0f:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:7F:59:0F:F8:9C:8B:D4:C2:88:FA:61:2A:61:FC:BA:04:4C:63:0B
X509v3 Authority Key Identifier:
keyid:31:92:1B:6F:F1:AC:44:9B:A3:E7:F8:92:CF:08:32:D1:CE:B7:D4:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MZIbb_GsRJuj5_iSzwgy0c631GQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ce043e-2ddb-48a7-8983-9d7a8872b454/1/MZIbb_GsRJuj5_iSzwgy0c631GQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ce043e-2ddb-48a7-8983-9d7a8872b454/1/MZIbb_GsRJuj5_iSzwgy0c631GQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:2c:03:a5:e3:8f:c3:10:b4:bf:43:85:8d:bd:77:f1:d1:2d:
54:f5:d1:e4:44:b5:57:05:82:a3:7e:b1:20:ff:bc:d0:ac:90:
a6:56:8a:9c:92:70:91:13:d2:eb:81:0c:7e:6f:20:ef:5c:77:
a9:2d:bf:06:53:6e:f5:91:d2:dd:ab:19:3b:61:21:34:64:19:
35:1f:b4:9d:01:b9:ea:b7:cf:65:a7:67:68:18:3d:bb:55:25:
bb:f3:a2:e7:1e:92:03:f3:b8:0c:7c:ea:32:fd:79:41:cc:73:
be:a2:c0:d7:b8:88:d8:bd:8e:e0:e6:9f:4d:ae:40:79:41:2e:
af:16:c0:c2:78:d6:37:57:22:48:60:7c:ed:f2:10:b8:d3:1f:
f1:5a:95:f9:d7:57:cb:7e:b5:16:c0:5b:d3:48:1a:aa:2b:5b:
d3:ad:9c:07:c7:b2:6f:b8:1d:d6:9b:52:78:3b:64:69:9a:44:
0e:9a:2f:de:98:38:f1:73:b2:a0:68:55:a2:6b:69:4d:f0:20:
82:74:e2:0c:05:65:c8:78:48:e1:bb:0d:3f:22:34:65:e8:64:
21:31:27:11:15:cc:e1:fd:1b:3b:76:2b:af:a4:06:a2:5d:5a:
e2:f1:dd:21:9d:96:16:b7:98:27:34:53:e3:ed:b7:34:f3:b2:
3c:27:41:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 03:18:40 2025 by rpki-client