Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/416a80-dc56-4514-8bc0-27f9c823edea/1/MhV9a4wSwFtBvEEkHQYVBAryQeE.mft
File: MhV9a4wSwFtBvEEkHQYVBAryQeE.mft (raw, json)
Hash identifier: IO1b70oqQJrf4u37SYCYdXVx8OAziaRc98GWBqASrZs=
Subject key identifier: 5F:B7:39:FC:4A:06:FA:EC:B2:D9:8B:F4:FF:F1:DB:40:D6:7A:74:F3
Authority key identifier: 32:15:7D:6B:8C:12:C0:5B:41:BC:41:24:1D:06:15:04:0A:F2:41:E1
Certificate issuer: /CN=32157d6b8c12c05b41bc41241d0615040af241e1
Certificate serial: 0194BD178E850A208BC1EDFCFB9258821FAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MhV9a4wSwFtBvEEkHQYVBAryQeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/416a80-dc56-4514-8bc0-27f9c823edea/1/MhV9a4wSwFtBvEEkHQYVBAryQeE.mft
Manifest number: 0145
Signing time: Fri 31 Jan 2025 16:00:25 +0000
Manifest this update: Fri 31 Jan 2025 16:00:25 +0000
Manifest next update: Sat 01 Feb 2025 16:00:25 +0000
Files and hashes: 1: GXrNny7tuwzWiq-Z-LE5U24vo4k.roa (hash: xQ3KfJWrZ/Oh+PMOxbU8NX4YVFe6LbTJ05dku52B6s0=)
2: MhV9a4wSwFtBvEEkHQYVBAryQeE.crl (hash: lUxi4L+qu9jKYGZ8J2KWBhXlMD5VmYcoaKsywrt2o88=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:8e:85:0a:20:8b:c1:ed:fc:fb:92:58:82:1f:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32157d6b8c12c05b41bc41241d0615040af241e1
Validity
Not Before: Jan 31 16:00:25 2025 GMT
Not After : Feb 1 16:00:25 2025 GMT
Subject: CN=5fb739fc4a06faecb2d98bf4fff1db40d67a74f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e7:7c:8d:ad:13:08:35:78:65:bf:ff:a9:18:
91:ba:e4:a0:a8:5b:e5:b6:9d:18:7d:c5:4f:14:49:
0c:79:98:5f:60:f4:98:08:ac:5a:87:c9:60:28:df:
29:1e:74:74:78:0c:55:0f:46:be:4f:52:2c:9d:5e:
9c:1f:dd:26:f0:fe:81:cd:51:21:64:f3:63:76:da:
0d:4c:2c:2d:7f:54:06:7a:be:4b:1f:89:7d:0f:eb:
84:10:d8:c6:1f:be:97:23:7b:bd:66:04:d9:c3:6b:
ad:38:25:0f:52:85:84:d5:f0:13:19:32:c5:10:17:
82:50:d1:20:fe:9c:3d:86:8d:e1:3b:bf:10:7f:fb:
48:89:10:c0:49:f1:0b:e2:6e:44:12:e8:09:e9:9b:
9c:81:58:05:e3:08:1a:10:ec:2d:96:c0:e4:54:ce:
91:b9:92:ba:ab:2e:53:d3:53:6e:b5:7b:92:fb:f1:
49:0a:26:7c:34:d4:b8:0d:ae:53:53:d2:39:40:05:
14:24:4e:3d:d9:43:50:3f:63:d0:80:f2:d0:f2:eb:
97:df:39:ec:bd:31:af:d6:48:ea:25:db:64:8e:aa:
ed:f0:bd:09:8b:99:51:f0:fd:f3:54:fb:43:44:8b:
c6:63:4a:59:54:b4:8b:d5:b1:9f:e3:6c:29:fb:8d:
ae:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:B7:39:FC:4A:06:FA:EC:B2:D9:8B:F4:FF:F1:DB:40:D6:7A:74:F3
X509v3 Authority Key Identifier:
keyid:32:15:7D:6B:8C:12:C0:5B:41:BC:41:24:1D:06:15:04:0A:F2:41:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MhV9a4wSwFtBvEEkHQYVBAryQeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/416a80-dc56-4514-8bc0-27f9c823edea/1/MhV9a4wSwFtBvEEkHQYVBAryQeE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/416a80-dc56-4514-8bc0-27f9c823edea/1/MhV9a4wSwFtBvEEkHQYVBAryQeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:5e:4e:b6:82:d2:81:07:6c:ce:eb:3f:d8:5b:f8:df:fa:86:
9e:93:00:58:38:13:96:0d:0e:35:1c:db:e2:46:e2:8b:19:18:
81:55:eb:31:75:63:bb:7a:5e:69:8b:54:8c:f3:20:c2:84:aa:
7d:14:81:0c:ec:45:36:a7:7a:e8:ce:ef:50:dd:3b:60:16:38:
0f:52:df:67:98:88:e4:6c:0f:35:d8:e0:41:6d:37:68:74:a2:
8f:65:47:f0:3b:3a:c7:7e:ca:b0:73:48:58:25:46:c5:a4:71:
d4:e0:68:2c:2f:0c:e9:04:ae:db:5f:56:91:1c:f5:47:5c:31:
33:7d:8e:cf:39:6d:ea:27:8e:ea:bc:40:7b:b5:9f:ff:87:ee:
97:8c:b4:86:1f:a6:09:20:ad:9a:40:e9:90:f2:47:11:62:55:
98:6c:6b:e5:f8:6e:d9:d2:32:1d:3f:85:6c:22:ff:14:e3:83:
f0:83:2a:f7:74:e2:c6:21:5f:22:a4:1e:c2:fb:14:35:a3:9e:
9b:d6:67:54:ac:1f:a5:a7:c9:79:b9:03:5c:c9:0f:28:e3:d8:
0c:19:da:26:8b:9c:0b:89:32:89:d0:94:af:ce:ce:79:69:08:
21:a1:a9:af:82:c5:49:5f:f6:79:77:35:c0:b8:11:66:a1:f4:
6b:37:dd:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:44:39 2025 by rpki-client