Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/M7GzE5YIPOntUeRiiY4pTtghWuc.mft
File: M7GzE5YIPOntUeRiiY4pTtghWuc.mft (raw, json)
Hash identifier: CGRNeg4HIeVF0oUQgkoUg2ibltkGjUJQNqpOwubl0MQ=
Subject key identifier: 39:EB:23:CF:06:36:3D:5A:A7:DF:BA:7E:CE:45:D7:6D:FD:4D:02:1F
Authority key identifier: 33:B1:B3:13:96:08:3C:E9:ED:51:E4:62:89:8E:29:4E:D8:21:5A:E7
Certificate issuer: /CN=33b1b31396083ce9ed51e462898e294ed8215ae7
Certificate serial: 0194BCAA01A99B2C7490EA68F9383A57905F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M7GzE5YIPOntUeRiiY4pTtghWuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/M7GzE5YIPOntUeRiiY4pTtghWuc.mft
Manifest number: 06CB
Signing time: Fri 31 Jan 2025 14:00:45 +0000
Manifest this update: Fri 31 Jan 2025 14:00:45 +0000
Manifest next update: Sat 01 Feb 2025 14:00:45 +0000
Files and hashes: 1: M7GzE5YIPOntUeRiiY4pTtghWuc.crl (hash: +fVbhyfhNeXLr9yiudJURy1GRueUpCUgyBjReWG1/bs=)
2: VQEhZHRI_51L-qPYAqsPHPNhngo.roa (hash: x+W3XCRbSsqe5EAx2dK2PnCFHJSGnsA8p+6YOIwEtcI=)
3: yZau-DwfbVfRH1H5nBnznu-Gh04.roa (hash: u7wjmjDpMKVCur/XQ8T5dAncaG/iDqX0/1UwHJhY4Us=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:01:a9:9b:2c:74:90:ea:68:f9:38:3a:57:90:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33b1b31396083ce9ed51e462898e294ed8215ae7
Validity
Not Before: Jan 31 14:00:45 2025 GMT
Not After : Feb 1 14:00:45 2025 GMT
Subject: CN=39eb23cf06363d5aa7dfba7ece45d76dfd4d021f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:69:77:06:86:0b:66:5f:57:3f:54:53:41:1a:
57:d7:e3:a0:a1:36:eb:6a:6e:8e:75:37:6f:58:a8:
e9:7f:b9:83:5e:16:37:0b:87:06:66:3c:cc:80:a7:
ba:56:49:c3:fd:6f:c1:17:c5:0a:a7:17:04:13:09:
02:4c:af:ee:03:42:48:cf:de:0f:86:fe:18:92:a2:
19:e7:03:92:72:9c:81:16:f1:73:9d:71:e8:23:27:
81:0e:53:bc:0d:f7:29:45:d7:66:80:4f:c0:68:b2:
2e:ab:f2:a1:2d:1a:12:bd:a2:f9:ec:c4:f3:4d:f7:
5e:e6:81:75:06:c2:1f:8a:25:e9:57:28:32:84:cf:
b5:28:35:a9:e6:ed:64:f2:aa:57:67:d7:d4:c2:81:
09:81:37:2c:16:b9:a9:6c:46:82:7e:19:04:2e:57:
5d:d6:69:93:b0:17:05:01:10:82:c4:96:f6:ba:e4:
cc:b3:de:46:12:f6:5d:6f:82:19:fe:d3:1e:c8:01:
3d:b2:dc:2b:bd:cb:c0:f8:10:83:41:2c:35:f0:1b:
79:37:cc:d5:ad:c6:c9:e5:86:d6:67:51:1a:37:ac:
fa:9c:98:4a:76:b9:6a:09:53:28:76:24:76:0e:0b:
a5:23:dd:5f:6e:a0:e6:7d:b2:6e:3b:90:00:66:96:
4a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:EB:23:CF:06:36:3D:5A:A7:DF:BA:7E:CE:45:D7:6D:FD:4D:02:1F
X509v3 Authority Key Identifier:
keyid:33:B1:B3:13:96:08:3C:E9:ED:51:E4:62:89:8E:29:4E:D8:21:5A:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M7GzE5YIPOntUeRiiY4pTtghWuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/M7GzE5YIPOntUeRiiY4pTtghWuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/M7GzE5YIPOntUeRiiY4pTtghWuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:a1:31:c3:64:e4:c2:4e:49:6c:c7:95:83:8b:dc:5d:9f:53:
a4:61:0f:83:43:34:14:a2:7b:12:8c:7b:a0:47:71:74:f4:f6:
3f:64:be:2e:25:c4:40:50:64:3c:9a:26:41:d0:49:88:f4:8e:
c7:52:ca:ca:4f:6f:1b:2c:e5:53:c7:71:e1:4d:ee:d1:2f:44:
72:4f:70:2a:69:20:ed:8d:97:62:33:04:19:33:07:0b:0c:95:
3c:f6:9c:8c:a3:39:ce:16:18:24:c1:96:4b:46:8d:1d:f4:12:
26:8b:84:55:ba:22:c4:9b:be:7c:e4:df:72:9f:fb:0c:96:e9:
bf:77:8f:89:f7:c2:7b:eb:a9:b4:af:7f:18:5c:96:8f:f2:f4:
9d:f0:dd:3d:a2:84:ec:70:b0:8d:6b:66:37:b6:92:44:84:18:
82:77:3f:ee:e5:45:92:c4:8d:aa:dd:20:30:d0:85:d5:61:58:
6e:00:3d:c8:24:2a:d2:e1:eb:c1:00:83:7b:fc:1d:0f:b4:fa:
82:7a:b3:6c:e7:30:2e:73:be:e2:81:be:a0:3e:c2:9c:b5:74:
18:10:9f:66:db:8e:97:e1:1f:9b:bf:37:fa:fe:eb:c4:e3:e8:
8a:a6:77:91:02:86:1e:01:dc:1b:37:c2:f5:02:76:c3:17:ee:
e3:b1:6f:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:44:19 2025 by rpki-client