Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/139ff2-f5d0-49be-910b-b5c945a0ca16/1/MZtnnBRoEIny0HeG3wT3eddBwRo.mft
File: MZtnnBRoEIny0HeG3wT3eddBwRo.mft (raw, json)
Hash identifier: HOlTgOldxQ30NHDQaqMGkBYSmlCwDcwUu7uxay5X2v0=
Subject key identifier: C6:0A:13:2B:6E:D7:A0:AB:A0:56:38:5E:DA:8F:25:17:EF:35:1E:CF
Authority key identifier: 31:9B:67:9C:14:68:10:89:F2:D0:77:86:DF:04:F7:79:D7:41:C1:1A
Certificate issuer: /CN=319b679c14681089f2d07786df04f779d741c11a
Certificate serial: 0194BD17978283EC84A25918E6E4F70BEEFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MZtnnBRoEIny0HeG3wT3eddBwRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/139ff2-f5d0-49be-910b-b5c945a0ca16/1/MZtnnBRoEIny0HeG3wT3eddBwRo.mft
Manifest number: 0E25
Signing time: Fri 31 Jan 2025 16:00:27 +0000
Manifest this update: Fri 31 Jan 2025 16:00:27 +0000
Manifest next update: Sat 01 Feb 2025 16:00:27 +0000
Files and hashes: 1: MZtnnBRoEIny0HeG3wT3eddBwRo.crl (hash: S+OmB+nk6pObqRtHaamSftsIIIGpCbAW5kOTKeD6grg=)
2: ieLSuIB6mXBKJCQeWp_N4zpRwwc.roa (hash: nbmCndcHBfvvgTeoIuhU4ac4+KNWQuh73nRAwrBR57A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:97:82:83:ec:84:a2:59:18:e6:e4:f7:0b:ee:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=319b679c14681089f2d07786df04f779d741c11a
Validity
Not Before: Jan 31 16:00:27 2025 GMT
Not After : Feb 1 16:00:27 2025 GMT
Subject: CN=c60a132b6ed7a0aba056385eda8f2517ef351ecf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:7e:ee:c5:14:88:3a:a3:31:ba:d6:f4:0f:db:
64:40:89:80:df:4e:66:d4:5d:c6:e1:1a:05:f1:a3:
34:e8:a1:7d:a4:5e:8a:34:96:b2:fe:08:69:fe:08:
09:8a:44:e0:eb:24:83:be:ab:9e:1d:68:19:dc:2f:
95:05:02:d7:ca:7a:5e:ba:6c:6b:9e:9b:a8:2e:7b:
bc:a0:ae:99:1c:68:8a:19:5a:9a:cd:f1:16:f9:ff:
05:20:c7:7e:ce:3f:b5:d3:5f:84:eb:33:da:e7:fc:
0b:07:08:23:41:77:87:93:70:13:1f:5e:5d:b0:cf:
27:f1:19:e1:52:02:c5:6b:be:35:73:d4:a1:24:18:
5c:54:3e:66:85:71:96:5a:a3:2e:92:05:fd:86:34:
54:ee:66:dc:9a:25:f3:16:04:cc:5b:7e:8b:8e:28:
90:16:57:14:aa:b5:a6:87:c0:9f:6f:01:27:a5:3b:
91:14:98:08:49:ef:dc:f8:bd:c3:07:fb:12:ef:df:
56:fd:b2:62:3b:f1:75:e5:e3:a5:5a:a8:65:37:23:
46:fc:aa:7e:35:f4:17:23:12:b6:c4:3b:d6:b0:10:
4f:34:e7:16:ba:2a:96:b6:01:8b:ba:f7:78:5f:e3:
15:3e:40:c4:eb:85:aa:16:63:f4:a1:a7:3f:c6:31:
3d:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:0A:13:2B:6E:D7:A0:AB:A0:56:38:5E:DA:8F:25:17:EF:35:1E:CF
X509v3 Authority Key Identifier:
keyid:31:9B:67:9C:14:68:10:89:F2:D0:77:86:DF:04:F7:79:D7:41:C1:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MZtnnBRoEIny0HeG3wT3eddBwRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/139ff2-f5d0-49be-910b-b5c945a0ca16/1/MZtnnBRoEIny0HeG3wT3eddBwRo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/139ff2-f5d0-49be-910b-b5c945a0ca16/1/MZtnnBRoEIny0HeG3wT3eddBwRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:d4:ba:88:22:4a:a7:01:d1:16:6c:07:b5:70:b2:35:1e:cd:
d8:67:21:fc:8c:fe:48:14:ce:48:f2:f5:92:6f:09:62:46:21:
f8:a1:11:d1:b4:33:47:47:10:16:58:29:00:a6:9d:84:ff:80:
66:c9:ad:41:e2:b1:af:16:08:16:32:75:d0:64:15:79:35:5b:
7d:94:d7:b6:53:cd:19:24:a7:f6:8d:9c:b5:17:1c:b5:69:8f:
96:1b:69:bc:92:14:19:01:40:98:f3:53:8e:99:10:91:67:23:
cd:18:44:ea:bf:bd:81:e6:07:a7:43:b3:9b:d4:53:70:ad:58:
88:bc:19:55:b4:26:b6:da:99:f7:50:a1:32:5e:0d:44:24:4e:
dd:66:64:05:52:74:7d:cb:85:36:57:8e:0f:a6:d7:36:ed:5b:
6f:f6:22:2d:f4:6f:d0:11:44:69:fd:a8:01:af:8b:82:ac:36:
e1:42:56:9a:06:a8:74:b5:02:41:35:c4:de:5c:2d:f6:2c:b4:
4d:73:28:d9:8d:97:72:86:6d:78:02:27:64:e1:05:68:64:66:
8b:44:90:9e:f8:d2:fe:a8:c4:85:ed:ec:3e:44:bb:d0:cf:40:
9d:e7:11:39:54:90:71:5b:b6:15:05:ea:ab:03:af:d1:80:a4:
9c:8a:4b:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:06:18 2025 by rpki-client