Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/5f9b8b-5c39-45eb-a3f2-395141a6cffd/1/mwpFcttA2K06pRQevZHpAo51NjE.mft
File: mwpFcttA2K06pRQevZHpAo51NjE.mft (raw, json)
Hash identifier: FMSgMnBvu4TFlxps63cZIQ9G3eLkqs4L37OLvf2jHrk=
Subject key identifier: 46:C6:4B:A2:83:5E:D5:54:1B:9A:6B:FB:66:40:9F:33:5E:58:85:E9
Authority key identifier: 9B:0A:45:72:DB:40:D8:AD:3A:A5:14:1E:BD:91:E9:02:8E:75:36:31
Certificate issuer: /CN=9b0a4572db40d8ad3aa5141ebd91e9028e753631
Certificate serial: 0194BBCE6A6DA24F106B2E6CAC12A6A567E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwpFcttA2K06pRQevZHpAo51NjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/5f9b8b-5c39-45eb-a3f2-395141a6cffd/1/mwpFcttA2K06pRQevZHpAo51NjE.mft
Manifest number: 05B0
Signing time: Fri 31 Jan 2025 10:00:54 +0000
Manifest this update: Fri 31 Jan 2025 10:00:54 +0000
Manifest next update: Sat 01 Feb 2025 10:00:54 +0000
Files and hashes: 1: LHiCbbUQ3ZJ_Cn3tRQllJOcd4bU.roa (hash: 0hquK8SkvqQbNfKEbYjZG0icP/g4QwK+sH8IO5xeaXI=)
2: mwpFcttA2K06pRQevZHpAo51NjE.crl (hash: 2L7WR4q4a21LqkVj7Rp2bKps6xxu7Lnnh+G2XfOPcoA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:6a:6d:a2:4f:10:6b:2e:6c:ac:12:a6:a5:67:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0a4572db40d8ad3aa5141ebd91e9028e753631
Validity
Not Before: Jan 31 10:00:54 2025 GMT
Not After : Feb 1 10:00:54 2025 GMT
Subject: CN=46c64ba2835ed5541b9a6bfb66409f335e5885e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:23:83:36:b4:5f:12:66:88:0e:44:35:2e:13:
59:9e:d3:8b:fd:5f:75:77:7c:2f:8a:4e:a4:72:12:
97:2e:dd:e9:ba:88:6c:ef:e2:da:10:fa:44:9b:96:
0b:76:0a:b3:5b:40:10:c9:71:78:42:d6:5f:cb:30:
8d:fb:77:48:7b:48:c3:83:dd:96:09:a0:dd:8a:22:
5f:c5:d6:83:d8:52:55:6c:6a:f8:0e:e2:0d:f2:e8:
f0:d3:ff:ee:0f:8e:6d:e2:4c:ff:20:55:c2:3d:e8:
3c:94:c4:68:1c:77:d2:24:c2:af:27:a9:aa:37:64:
00:d6:05:cb:24:1a:f5:e8:ce:97:4c:0b:f9:9a:35:
f9:61:2f:0f:53:85:06:55:80:93:f6:f4:5c:f2:fc:
fb:55:57:97:56:40:d7:08:ba:84:6f:f3:f0:96:70:
c2:08:f3:3c:76:f4:52:d2:aa:71:ed:29:b0:b1:48:
7a:2a:13:ae:d9:e1:15:ac:9f:2a:0f:db:3b:2d:77:
11:69:a0:ac:85:04:00:4d:0d:91:91:df:f7:aa:32:
e9:f6:fd:6e:ba:98:03:9c:ec:ed:e0:ae:13:18:f9:
a7:dd:e8:8e:8e:92:7d:cf:75:04:3f:bd:d1:e6:b8:
fb:d9:b2:39:55:b1:c9:d2:77:c3:3c:23:24:b1:1b:
6c:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:C6:4B:A2:83:5E:D5:54:1B:9A:6B:FB:66:40:9F:33:5E:58:85:E9
X509v3 Authority Key Identifier:
keyid:9B:0A:45:72:DB:40:D8:AD:3A:A5:14:1E:BD:91:E9:02:8E:75:36:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwpFcttA2K06pRQevZHpAo51NjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/5f9b8b-5c39-45eb-a3f2-395141a6cffd/1/mwpFcttA2K06pRQevZHpAo51NjE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/5f9b8b-5c39-45eb-a3f2-395141a6cffd/1/mwpFcttA2K06pRQevZHpAo51NjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:0a:b5:f9:56:9e:ec:22:90:fe:14:66:18:bf:94:9e:52:05:
06:1b:4c:74:70:e8:f4:9e:d3:60:ab:6f:74:46:08:f8:fa:d0:
73:17:fd:7c:06:ed:b6:4f:81:60:f9:14:7b:e3:62:1e:27:80:
90:f3:bf:e1:d5:04:ec:d8:ee:4a:56:38:72:e9:bd:13:49:54:
75:34:b9:96:0f:1b:1b:0a:cb:9d:9a:bd:69:ae:16:27:a0:08:
4b:b2:0d:70:82:cf:e3:ea:42:68:8f:d0:60:38:a0:4d:99:fd:
7a:89:eb:c7:bb:47:ba:4a:50:06:44:66:ed:dd:0f:ef:41:c7:
53:47:a3:07:dd:2d:cc:54:02:e6:66:74:9f:2b:d9:eb:c9:5b:
6e:2e:42:2d:9d:bd:cf:2c:55:0a:f0:e5:63:26:dc:41:b3:a3:
e0:33:05:4f:39:a1:b9:41:d5:21:05:df:8e:64:8d:49:00:4e:
8d:26:53:e0:2d:13:95:4f:62:95:6c:37:92:85:33:b9:a8:49:
32:86:cc:5e:9c:c7:0e:18:bb:d4:ab:89:0a:6a:4c:c4:9c:c0:
1d:54:4f:0a:36:e7:91:f5:98:d4:da:3b:19:d0:4d:76:f5:3b:
2e:d4:fc:b0:e1:ff:21:af:99:77:ec:82:34:72:61:33:59:2c:
2b:fd:6e:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:36 2025 by rpki-client