Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/32ef5a-e2b9-4999-bfb2-6e8ed3c7307e/1/MSbg1dN79m8-nYh-rq2cpjwYlIk.mft
File: MSbg1dN79m8-nYh-rq2cpjwYlIk.mft (raw, json)
Hash identifier: Nd31SrsYbf1vBWie1i5pxobbNrf9AUePHWl3Af2F8ls=
Subject key identifier: 4B:5C:7B:EC:5B:CF:58:CA:81:27:CA:3E:67:1E:CA:49:5B:97:29:2B
Authority key identifier: 31:26:E0:D5:D3:7B:F6:6F:3E:9D:88:7E:AE:AD:9C:A6:3C:18:94:89
Certificate issuer: /CN=3126e0d5d37bf66f3e9d887eaead9ca63c189489
Certificate serial: 0194BCA992BA3CD9EEF4ACCF752E210522CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MSbg1dN79m8-nYh-rq2cpjwYlIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/32ef5a-e2b9-4999-bfb2-6e8ed3c7307e/1/MSbg1dN79m8-nYh-rq2cpjwYlIk.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 14:00:17 +0000
Manifest this update: Fri 31 Jan 2025 14:00:17 +0000
Manifest next update: Sat 01 Feb 2025 14:00:17 +0000
Files and hashes: 1: MSbg1dN79m8-nYh-rq2cpjwYlIk.crl (hash: nP20s0eYllTGUzDSs+XR2uMLhXniR0ZSpcJLFN8DL7s=)
2: UmPwqKyARZqa-K92MHrGqC9QyYg.roa (hash: j/qBkJJtXcMUmDoWtmsXwP9m2yfPn26NNyaQXDeqLdE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:92:ba:3c:d9:ee:f4:ac:cf:75:2e:21:05:22:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3126e0d5d37bf66f3e9d887eaead9ca63c189489
Validity
Not Before: Jan 31 14:00:17 2025 GMT
Not After : Feb 1 14:00:17 2025 GMT
Subject: CN=4b5c7bec5bcf58ca8127ca3e671eca495b97292b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b8:89:94:27:45:a3:26:58:83:69:43:e7:7a:
9b:d2:8a:74:f0:16:a2:67:41:1d:64:cc:5b:c8:9b:
d1:6b:4b:33:30:08:88:e1:86:a2:e7:7d:0a:97:1a:
9b:41:d5:93:6a:87:6a:f8:14:01:55:79:e7:ed:94:
7e:bf:5f:ec:32:bc:43:0e:03:4a:1d:99:99:2f:66:
cc:a6:bc:64:2e:e6:d3:5a:eb:e0:73:ee:ec:89:73:
f7:fb:96:e1:68:6d:0e:8f:a2:89:09:68:4d:48:8a:
80:0d:ea:4f:bc:e3:d9:28:32:bd:e4:36:e8:bc:50:
95:99:c0:06:87:fe:b2:be:c4:a9:ae:e7:c1:52:49:
08:46:e5:ee:fc:0c:b0:f4:d0:be:47:7d:19:04:d2:
c9:48:f3:51:fd:07:2d:84:09:74:18:a7:44:4b:d0:
78:03:2a:8d:d0:06:e0:9f:e2:48:8a:92:bf:b9:84:
99:41:8d:95:6b:2b:f6:37:d9:10:49:24:0f:59:3e:
20:80:57:86:23:07:19:14:0a:4b:9a:6b:85:3c:e1:
18:e5:76:7d:84:e8:6e:ca:59:2c:80:47:53:0b:ee:
40:f0:55:52:bd:d4:c1:a3:16:75:52:31:c7:39:4b:
08:6f:77:99:19:fd:4d:49:e1:fe:e2:ff:f2:42:5c:
3c:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:5C:7B:EC:5B:CF:58:CA:81:27:CA:3E:67:1E:CA:49:5B:97:29:2B
X509v3 Authority Key Identifier:
keyid:31:26:E0:D5:D3:7B:F6:6F:3E:9D:88:7E:AE:AD:9C:A6:3C:18:94:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MSbg1dN79m8-nYh-rq2cpjwYlIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/32ef5a-e2b9-4999-bfb2-6e8ed3c7307e/1/MSbg1dN79m8-nYh-rq2cpjwYlIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/32ef5a-e2b9-4999-bfb2-6e8ed3c7307e/1/MSbg1dN79m8-nYh-rq2cpjwYlIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:b4:96:67:a0:3f:1a:93:d5:2f:55:aa:6b:4a:4b:ea:0e:2d:
e2:bb:df:cc:b4:a1:9c:2e:33:52:58:e6:f1:e6:16:a6:8e:51:
f9:31:3d:8f:7f:b6:cf:5d:a2:7a:b5:70:dc:16:7b:52:48:75:
54:b9:94:67:c7:94:76:1f:36:d8:4a:2c:ff:9f:8e:b7:18:7f:
9f:b4:be:dd:ee:bb:66:0d:60:fc:41:29:4a:a4:38:b5:bc:3c:
cc:78:53:d0:eb:26:97:6a:2e:02:9f:2d:75:5c:3e:9a:ef:c7:
9a:84:95:b0:9b:ea:71:55:3e:6a:50:d8:fb:58:24:23:6f:0b:
d0:d0:b5:a9:f9:d6:f0:37:c3:e0:0c:07:75:ba:fe:66:7e:32:
b8:82:94:b9:59:4d:21:7a:3e:11:38:40:ec:3b:c9:92:bd:d0:
c1:33:6e:09:10:f9:49:a2:eb:4d:70:a6:b2:3f:81:79:b6:0d:
9a:b2:af:7e:7e:30:a8:ab:37:68:71:8a:f9:bb:1e:80:3f:e2:
86:7b:32:da:33:9b:1c:e4:36:28:44:72:d0:d9:ba:1c:bb:99:
0d:04:45:e4:16:06:99:48:0c:44:7c:28:4f:34:84:51:26:bf:
a5:cc:1a:aa:f8:73:7e:6d:8d:40:08:90:34:1b:5d:db:e4:2f:
58:9b:86:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:27 2025 by rpki-client