Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/bf3528-a131-4f51-a59d-31c9313f9f66/1/rMUN9rAd_29U64A5skl6p_TvEs0.mft
File: rMUN9rAd_29U64A5skl6p_TvEs0.mft (raw, json)
Hash identifier: 3F7gKqFS/2wltPtIIeRHNgNeCAyPnYnkzZCPGbiRSxo=
Subject key identifier: 0C:53:48:8F:DB:5B:42:75:9F:AB:02:C4:40:DE:9F:00:53:A9:5E:40
Authority key identifier: AC:C5:0D:F6:B0:1D:FF:6F:54:EB:80:39:B2:49:7A:A7:F4:EF:12:CD
Certificate issuer: /CN=acc50df6b01dff6f54eb8039b2497aa7f4ef12cd
Certificate serial: 0194BC7293F848E7E02C5B57073F5B462183
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rMUN9rAd_29U64A5skl6p_TvEs0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/bf3528-a131-4f51-a59d-31c9313f9f66/1/rMUN9rAd_29U64A5skl6p_TvEs0.mft
Manifest number: 0275
Signing time: Fri 31 Jan 2025 13:00:12 +0000
Manifest this update: Fri 31 Jan 2025 13:00:12 +0000
Manifest next update: Sat 01 Feb 2025 13:00:12 +0000
Files and hashes: 1: VNZ2uED23ISvSNUvT20r4GsH7oo.roa (hash: rxCWfcG9ljPfy4GNB4ws8osuxRP7WV5ZXyCpBXvN7MU=)
2: rMUN9rAd_29U64A5skl6p_TvEs0.crl (hash: F+5N/PltAOTH6CeXch+ck2Ya50B4ALAYoO6jnXrJmro=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:93:f8:48:e7:e0:2c:5b:57:07:3f:5b:46:21:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acc50df6b01dff6f54eb8039b2497aa7f4ef12cd
Validity
Not Before: Jan 31 13:00:12 2025 GMT
Not After : Feb 1 13:00:12 2025 GMT
Subject: CN=0c53488fdb5b42759fab02c440de9f0053a95e40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:29:df:fe:14:d6:1f:74:62:01:c4:f7:99:af:
37:3b:e1:9a:75:c7:dc:ff:6f:b1:9a:33:92:5a:5b:
27:dd:c7:df:91:64:20:0b:61:22:92:91:94:f0:0e:
91:5c:ab:f7:0e:f8:e4:84:d8:36:df:44:b0:f1:f2:
c9:44:97:f4:0b:1f:c6:26:c8:6b:60:01:2e:4f:64:
09:ca:c9:b9:f4:52:5d:30:83:a2:98:fa:88:22:d6:
a9:fa:7e:6f:93:a0:98:45:84:bc:cb:d6:c8:73:a4:
f3:74:65:49:e8:60:84:15:9e:b5:7c:77:e6:00:40:
cd:20:d7:00:ab:9c:14:97:31:d5:2e:1f:9a:54:22:
c3:4f:e0:04:3b:a2:95:93:48:60:4a:ef:5b:19:87:
21:fc:c6:c0:f8:1c:57:37:20:a2:66:a7:5d:28:23:
5b:61:a7:98:d9:f7:a8:e1:f7:37:40:7b:e4:12:a1:
28:f0:d0:d2:a3:66:8e:81:ce:da:b5:40:48:fe:77:
e7:c7:f0:90:61:70:03:fe:1f:ec:5d:91:dd:d7:3c:
17:88:80:1a:66:3c:45:28:be:a0:50:23:96:82:9c:
1b:01:b5:b0:b4:34:83:7d:52:b3:02:1c:98:5a:fb:
35:91:44:1d:c5:77:96:c3:52:3d:14:d2:f1:b7:92:
2e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:53:48:8F:DB:5B:42:75:9F:AB:02:C4:40:DE:9F:00:53:A9:5E:40
X509v3 Authority Key Identifier:
keyid:AC:C5:0D:F6:B0:1D:FF:6F:54:EB:80:39:B2:49:7A:A7:F4:EF:12:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rMUN9rAd_29U64A5skl6p_TvEs0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/bf3528-a131-4f51-a59d-31c9313f9f66/1/rMUN9rAd_29U64A5skl6p_TvEs0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/bf3528-a131-4f51-a59d-31c9313f9f66/1/rMUN9rAd_29U64A5skl6p_TvEs0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:57:70:8f:69:c1:b0:6f:6b:5e:2e:23:5b:ee:08:a9:f6:3e:
d7:1e:73:7e:d7:6a:81:38:3d:96:87:ba:e9:5b:b5:bd:7b:a0:
a0:f3:c2:c9:89:35:35:d8:82:fe:e7:b0:bf:b0:bd:1b:b1:19:
54:f6:50:53:6c:d7:36:65:8d:5a:ad:7a:f6:da:29:2a:bc:59:
3b:b9:f3:a4:11:7d:ea:35:06:c0:f0:fc:6b:9f:13:92:2d:a1:
91:a6:67:66:18:3c:e5:6e:6c:a2:b4:54:63:f1:8a:97:45:06:
62:ce:73:8f:3d:ac:d4:84:19:13:d1:c3:9a:8d:92:1f:4f:bb:
b6:1d:73:00:85:cd:d9:0e:41:76:ce:b3:93:e7:38:e8:1a:29:
87:0b:ad:29:34:8b:c0:e1:93:10:62:a4:84:fc:c8:7b:51:2b:
f6:03:3a:bc:8f:a0:ca:18:75:de:a8:e0:50:ca:95:43:61:cc:
3f:7b:ed:47:c8:82:14:96:0c:6d:21:d7:f5:fe:d5:7d:22:59:
ef:92:d1:15:a5:57:95:cb:10:c9:95:d2:88:40:58:66:58:cc:
35:78:c3:80:6c:50:ee:11:e6:19:94:4d:3d:ad:eb:b2:6a:be:
58:ed:21:06:32:4f:eb:71:0f:5b:67:f8:47:e8:c9:6c:4b:f1:
40:2c:a8:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:32:52 2025 by rpki-client