Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/5b373e-d314-4459-b858-cf1d1f007a36/1/mxKd6eumtHUW8KFVc0IFq7uYt8I.mft
File: mxKd6eumtHUW8KFVc0IFq7uYt8I.mft (raw, json)
Hash identifier: guCEPe6y7aZgJzfxjY5PS8XpG3Vl5FRIoOVb8MPBRQA=
Subject key identifier: 68:32:C8:6B:10:51:84:2C:F9:70:5A:B7:F9:25:D2:D7:72:14:F4:DC
Authority key identifier: 9B:12:9D:E9:EB:A6:B4:75:16:F0:A1:55:73:42:05:AB:BB:98:B7:C2
Certificate issuer: /CN=9b129de9eba6b47516f0a155734205abbb98b7c2
Certificate serial: 0194BD179B990781F9CD67C17A98FCCE1680
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mxKd6eumtHUW8KFVc0IFq7uYt8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/5b373e-d314-4459-b858-cf1d1f007a36/1/mxKd6eumtHUW8KFVc0IFq7uYt8I.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 16:00:28 +0000
Manifest this update: Fri 31 Jan 2025 16:00:28 +0000
Manifest next update: Sat 01 Feb 2025 16:00:28 +0000
Files and hashes: 1: Kd7_5vl2w2YSR6oDwH4ZLSBCJg4.roa (hash: EwnV+wUuaOySMH9KRvnlNbPyo/46xzUnRyjwxeytk6w=)
2: mxKd6eumtHUW8KFVc0IFq7uYt8I.crl (hash: GLC1q8XlcsrrduxzEa9TS+mfR1X+LGnhol8GfDZIvwE=)
3: wmU9vLlEZyocLQ741PHIufr10v0.roa (hash: PwSdmNeGC1GPxHMJkBQhH54QcJIdpfP5NSJA3xMbqZI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:9b:99:07:81:f9:cd:67:c1:7a:98:fc:ce:16:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b129de9eba6b47516f0a155734205abbb98b7c2
Validity
Not Before: Jan 31 16:00:28 2025 GMT
Not After : Feb 1 16:00:28 2025 GMT
Subject: CN=6832c86b1051842cf9705ab7f925d2d77214f4dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:22:28:78:5b:1f:be:b8:1e:95:5d:48:43:33:
04:48:60:de:4c:6a:e3:43:77:f2:c3:db:9e:2c:89:
04:18:c3:38:75:ee:f0:e2:bc:62:12:1c:d7:1c:fa:
af:7f:d1:d0:ae:50:28:4d:cb:90:71:1f:55:b5:70:
91:8a:24:54:7d:b8:fa:9a:f1:0d:0b:0d:99:2d:30:
f4:5a:84:b0:74:44:7f:14:63:cb:10:93:b3:6c:a2:
f2:fd:a7:0e:86:f8:45:a5:50:92:23:cc:9b:1e:ed:
13:96:2a:7f:1e:e8:e3:34:08:fd:5a:a1:67:67:26:
f5:8e:05:a9:13:23:d1:cf:ac:c1:b1:3b:ce:3d:d3:
59:81:5d:60:81:03:32:d9:c9:df:3b:e2:d0:b8:76:
1f:1e:bc:f3:72:f5:f6:46:55:57:69:3d:6c:b4:ac:
32:4f:6b:b0:3c:8a:f8:32:18:7c:92:4a:15:4f:4a:
7a:0a:88:ad:33:ca:ac:16:cc:23:9c:34:8c:ff:b5:
0a:0e:a0:5e:0f:8a:d8:0f:6d:ae:d5:b6:2d:f1:b2:
52:9d:19:f9:66:21:d9:fd:e5:92:d2:c8:d1:00:b7:
bc:9e:42:51:19:06:f7:92:ec:43:6a:b0:25:c4:97:
8f:dc:68:b9:c4:f5:ea:09:8c:92:9b:8a:c7:35:d5:
7b:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:32:C8:6B:10:51:84:2C:F9:70:5A:B7:F9:25:D2:D7:72:14:F4:DC
X509v3 Authority Key Identifier:
keyid:9B:12:9D:E9:EB:A6:B4:75:16:F0:A1:55:73:42:05:AB:BB:98:B7:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mxKd6eumtHUW8KFVc0IFq7uYt8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5b373e-d314-4459-b858-cf1d1f007a36/1/mxKd6eumtHUW8KFVc0IFq7uYt8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5b373e-d314-4459-b858-cf1d1f007a36/1/mxKd6eumtHUW8KFVc0IFq7uYt8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:b3:33:e8:6c:8d:74:43:41:d5:87:73:fb:4c:8c:df:12:26:
56:94:66:d2:95:20:26:d7:91:b1:ca:c3:fc:d1:41:85:80:c7:
2b:b5:19:52:0d:c9:ab:60:5e:19:3c:ae:95:b5:69:dc:08:93:
18:ee:cd:a0:17:57:50:91:3d:b0:c5:f5:64:82:b0:95:c5:40:
44:dc:d4:24:88:a8:e1:64:f5:c5:6e:11:6a:12:32:d7:d7:16:
b0:1e:02:c4:ce:31:57:9d:9c:1c:e6:7c:4d:d3:4e:02:4f:48:
40:30:3d:61:f1:3e:42:52:02:0d:3f:a8:36:a9:c3:ad:a8:be:
20:7a:7c:ed:db:78:2a:94:2c:1d:f5:59:12:74:54:30:82:7d:
80:a2:33:f6:57:5c:7f:b6:0a:8e:62:df:a7:f5:33:5c:d6:31:
3f:8e:f8:80:4f:40:fb:ae:a2:6d:c7:f9:b6:14:bf:d8:54:d2:
21:d8:a8:eb:86:97:eb:75:c7:de:7d:56:97:a8:ea:08:2b:22:
ef:61:32:b3:25:46:a4:57:42:ca:90:05:5f:9d:6e:a0:8e:27:
91:53:02:a6:2f:19:cc:bb:de:78:63:1c:e5:f4:e2:0f:c6:83:
9d:fc:6a:9e:02:2f:8a:07:d4:b2:32:fb:31:f0:c3:ec:76:46:
07:0f:0c:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:16:55 2025 by rpki-client