Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/c90ef8-cc7f-45df-8eac-e8604439407f/1/mcoxPONE16H95lvEpDIZoLN2Egw.mft
File: mcoxPONE16H95lvEpDIZoLN2Egw.mft (raw, json)
Hash identifier: A9/97jjUAN7aAXZPrxxS9WTKgbcdmfuPrrSKyMy1JGA=
Subject key identifier: B6:B5:A8:09:1F:8B:12:9E:E1:5E:49:96:69:74:F4:DF:BB:E8:A2:05
Authority key identifier: 99:CA:31:3C:E3:44:D7:A1:FD:E6:5B:C4:A4:32:19:A0:B3:76:12:0C
Certificate issuer: /CN=99ca313ce344d7a1fde65bc4a43219a0b376120c
Certificate serial: 0194BD17B222BC6C8162911F328245D0A66D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mcoxPONE16H95lvEpDIZoLN2Egw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/c90ef8-cc7f-45df-8eac-e8604439407f/1/mcoxPONE16H95lvEpDIZoLN2Egw.mft
Manifest number: 0BD1
Signing time: Fri 31 Jan 2025 16:00:34 +0000
Manifest this update: Fri 31 Jan 2025 16:00:34 +0000
Manifest next update: Sat 01 Feb 2025 16:00:34 +0000
Files and hashes: 1: mcoxPONE16H95lvEpDIZoLN2Egw.crl (hash: WdTk87FX3IPPaR6tCRDU5oy4suzLRJSsAEXwkDr9yMo=)
2: tEi5vuv1eLPj-3VnZOBDfOuaqlo.roa (hash: 8uihYN23ifte2oFPdIuQAy0N/nJNzlURQ/IFD78Lv/8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:b2:22:bc:6c:81:62:91:1f:32:82:45:d0:a6:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99ca313ce344d7a1fde65bc4a43219a0b376120c
Validity
Not Before: Jan 31 16:00:34 2025 GMT
Not After : Feb 1 16:00:34 2025 GMT
Subject: CN=b6b5a8091f8b129ee15e49966974f4dfbbe8a205
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a3:d5:90:b6:e5:65:22:f0:ae:99:83:00:ab:
b8:0a:d3:84:8f:07:4f:b6:c3:b9:5d:3f:c5:04:ad:
6e:3b:c2:5b:c0:c8:fc:1d:a8:09:e8:16:f0:92:e7:
be:1c:b6:80:4d:5c:57:d7:0e:47:c2:02:4a:12:50:
dc:54:04:4c:90:0e:fe:18:e7:3e:26:ed:d7:b2:af:
8f:33:0d:37:20:8f:a4:f3:da:73:30:0d:29:91:8d:
6a:e8:89:9b:0e:3d:56:90:22:a7:de:71:70:16:e1:
c4:67:bf:7c:13:a5:ef:58:2e:cc:55:a4:07:e3:da:
bf:f7:2d:49:2b:4a:3c:b6:68:b7:c9:c2:5a:19:fb:
c8:62:8b:c9:36:ad:18:60:a3:b9:c1:19:22:e1:2a:
c9:77:eb:da:fe:d9:e6:2b:a3:0a:23:57:a8:6e:b2:
dc:ad:9c:08:09:78:01:bf:3c:e9:12:8d:1e:da:cf:
09:ea:b0:54:cf:09:00:b3:7e:21:78:c8:a8:df:e1:
ba:cb:3c:df:dd:13:9a:d5:94:52:be:f4:18:4b:0b:
a9:83:ac:48:82:4e:00:9d:73:ef:c5:22:9e:04:03:
c0:18:76:4b:a2:75:40:d6:b7:89:91:67:26:2e:b5:
f3:60:8a:b1:0c:4a:5b:ae:3a:85:f4:32:bf:63:87:
08:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:B5:A8:09:1F:8B:12:9E:E1:5E:49:96:69:74:F4:DF:BB:E8:A2:05
X509v3 Authority Key Identifier:
keyid:99:CA:31:3C:E3:44:D7:A1:FD:E6:5B:C4:A4:32:19:A0:B3:76:12:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mcoxPONE16H95lvEpDIZoLN2Egw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c90ef8-cc7f-45df-8eac-e8604439407f/1/mcoxPONE16H95lvEpDIZoLN2Egw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c90ef8-cc7f-45df-8eac-e8604439407f/1/mcoxPONE16H95lvEpDIZoLN2Egw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:a7:62:7b:c8:1f:72:35:75:e2:46:88:e9:4d:af:7c:d7:b8:
b4:66:4d:4d:f7:df:4d:40:9a:ef:bf:0b:8f:73:45:8d:2a:6c:
d0:6c:cf:16:74:09:98:92:9d:a6:11:e5:01:d7:b8:26:d5:7a:
a2:31:b1:72:80:57:26:af:3e:85:9d:d3:cd:39:a0:fd:f7:a9:
4a:d2:dd:71:ef:8d:40:70:ec:ed:63:31:82:dc:f6:7c:51:e8:
ad:92:98:be:5f:93:68:b2:2b:a8:64:90:ad:ce:85:17:28:7a:
c9:aa:13:56:68:0c:91:e7:f9:5a:96:95:70:ad:73:ae:20:9d:
5a:a2:98:a5:36:dc:80:2b:aa:cd:d5:00:47:c5:7a:57:f9:c7:
f5:79:eb:01:cf:d3:9d:d4:de:96:7d:2e:ce:b5:d5:f1:40:51:
9b:fb:41:ea:3f:07:73:48:e6:5a:b2:95:4b:ae:a6:8d:52:73:
4d:2b:e9:98:9c:b6:b6:8e:3a:52:57:d9:38:ab:56:26:97:2f:
ed:3b:d9:45:da:9d:ea:75:05:c0:62:f2:7f:a1:2f:45:22:00:
34:7a:99:97:d5:35:d2:12:c6:9a:68:f1:2f:66:b6:ab:43:3d:
4d:7d:c4:02:21:75:ff:7f:26:31:44:9e:41:90:a1:ef:24:d2:
db:5f:11:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:43:40 2025 by rpki-client