Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/7e0b13-ec91-483d-b96a-659b4ccd7f4a/1/mvGIoEu0XU7nTETcdtcf_73AT2A.mft
File: mvGIoEu0XU7nTETcdtcf_73AT2A.mft (raw, json)
Hash identifier: sU8E7RIGw/5034okFv+NqFZlCko1xv8Y69z2AugYbuY=
Subject key identifier: 81:F7:8C:19:20:16:5A:9A:8E:C6:F3:AF:19:44:8D:0A:E2:9A:1D:E1
Authority key identifier: 9A:F1:88:A0:4B:B4:5D:4E:E7:4C:44:DC:76:D7:1F:FF:BD:C0:4F:60
Certificate issuer: /CN=9af188a04bb45d4ee74c44dc76d71fffbdc04f60
Certificate serial: 0194BD853ED2DB7D37F3C4FA3FBC95AFC7D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mvGIoEu0XU7nTETcdtcf_73AT2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/7e0b13-ec91-483d-b96a-659b4ccd7f4a/1/mvGIoEu0XU7nTETcdtcf_73AT2A.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 18:00:13 +0000
Manifest this update: Fri 31 Jan 2025 18:00:13 +0000
Manifest next update: Sat 01 Feb 2025 18:00:13 +0000
Files and hashes: 1: CfUrafygYGSePjcIej3rxMGbJDI.roa (hash: X6AZHbughYjpJFwaVsupdcP3UOvik8OA/b5qiG++R3Q=)
2: mvGIoEu0XU7nTETcdtcf_73AT2A.crl (hash: RGRU2FM4528dx1y/KWrjcadf0EYC1ZsQDaNszCllnqA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:3e:d2:db:7d:37:f3:c4:fa:3f:bc:95:af:c7:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9af188a04bb45d4ee74c44dc76d71fffbdc04f60
Validity
Not Before: Jan 31 18:00:13 2025 GMT
Not After : Feb 1 18:00:13 2025 GMT
Subject: CN=81f78c1920165a9a8ec6f3af19448d0ae29a1de1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:89:b5:c8:94:c0:00:86:a2:b8:87:82:f0:21:
52:7b:fa:d6:7b:e8:51:5a:5f:9a:49:ce:a3:2d:ff:
12:4a:4a:37:7e:34:6e:2c:44:f6:a7:4a:4e:91:5f:
55:d1:ed:08:e2:f8:64:a3:89:23:d9:26:4a:6e:97:
66:5e:6d:23:4b:c4:7b:de:b5:52:22:02:e6:a3:2f:
98:53:6a:a1:80:d0:d1:c2:81:e0:10:c5:3d:7d:b4:
1c:30:de:59:c2:59:a1:0f:0c:cd:03:cf:c7:c3:57:
d0:57:5b:a5:86:f2:72:3d:47:53:7a:ba:5f:ed:46:
b2:53:28:6e:04:02:db:49:f7:61:06:7f:1d:6d:1d:
5a:f1:65:cb:e1:6d:86:c7:02:7d:4a:f9:3a:8a:81:
00:d0:7a:dd:90:1f:e8:e9:4f:b7:74:7b:6f:2d:74:
0c:c5:bd:d2:aa:75:bf:21:e8:fa:34:05:17:ca:bb:
76:c1:a8:86:51:e4:5b:ba:50:bd:b4:00:26:45:19:
1f:fb:36:be:19:0f:77:8a:7d:01:f7:6a:75:ec:1b:
fa:e4:ad:0e:55:c8:9d:b8:d1:c9:8d:7d:15:46:33:
fe:87:2d:ae:3e:71:ba:27:08:2b:07:09:0a:d5:60:
fb:fc:c6:d0:5b:27:63:86:52:6b:5f:9c:d1:59:22:
11:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:F7:8C:19:20:16:5A:9A:8E:C6:F3:AF:19:44:8D:0A:E2:9A:1D:E1
X509v3 Authority Key Identifier:
keyid:9A:F1:88:A0:4B:B4:5D:4E:E7:4C:44:DC:76:D7:1F:FF:BD:C0:4F:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mvGIoEu0XU7nTETcdtcf_73AT2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/7e0b13-ec91-483d-b96a-659b4ccd7f4a/1/mvGIoEu0XU7nTETcdtcf_73AT2A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/7e0b13-ec91-483d-b96a-659b4ccd7f4a/1/mvGIoEu0XU7nTETcdtcf_73AT2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:78:c6:86:44:4c:6a:d6:46:14:65:16:f9:ef:99:81:61:51:
3f:39:3e:a2:4d:f9:3c:95:82:2f:f3:13:56:3f:97:99:33:d9:
3e:fd:f4:38:3c:76:22:60:4e:7f:fb:71:f6:95:b0:d4:88:d1:
07:08:39:87:ed:3d:ea:39:c3:4c:c5:99:57:11:8d:7d:68:90:
15:d5:33:f0:4a:6d:ac:79:9a:50:d5:70:1a:4c:f3:4d:54:5e:
09:d4:09:7a:8f:b3:61:9b:1f:33:c7:7a:76:2e:b6:b1:03:85:
69:9a:12:ce:d0:c1:35:76:64:b7:64:9e:d5:d9:ff:4b:b0:a0:
3e:1b:fd:92:ad:72:bb:4f:ad:ba:0a:b4:a3:d0:59:5f:d8:c4:
2e:66:21:01:c7:cd:6c:8e:e0:4a:cb:5d:b7:f9:5f:38:43:3a:
14:d4:f9:08:f0:7f:30:dc:d5:63:a7:db:6e:4c:63:c2:ea:b7:
f9:73:e3:e4:61:a5:73:d9:e9:03:72:b8:7c:f8:95:aa:1b:7c:
7a:1f:4e:0d:f5:20:ab:7b:f6:ca:e4:c6:aa:54:eb:e8:46:a7:
a5:27:2a:b3:49:ed:69:9f:51:5c:30:4e:a6:c1:82:b3:ec:6f:
38:6f:19:89:66:ac:6a:a7:96:bb:f1:20:ee:e9:6b:68:6f:4b:
ce:f3:ab:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:59:55 2025 by rpki-client