Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/899344-87c5-4aa2-b1a3-204d2587d81f/1/MQn1aVqJER0PO9a10rGHearBAt4.mft
File: MQn1aVqJER0PO9a10rGHearBAt4.mft (raw, json)
Hash identifier: Nmtt9tDmqPLK6HyRTzJQOHbUvgf+0PCRpAgkXbVy+hI=
Subject key identifier: EC:7E:A9:82:5C:EE:B3:AE:F9:E5:DD:F9:A2:BE:90:12:F4:90:E6:92
Authority key identifier: 31:09:F5:69:5A:89:11:1D:0F:3B:D6:B5:D2:B1:87:79:AA:C1:02:DE
Certificate issuer: /CN=3109f5695a89111d0f3bd6b5d2b18779aac102de
Certificate serial: 0189AA9CD2C047BB9E1CD2709F0C1279BACD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MQn1aVqJER0PO9a10rGHearBAt4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/899344-87c5-4aa2-b1a3-204d2587d81f/1/MQn1aVqJER0PO9a10rGHearBAt4.mft
Manifest number: 0326
Signing time: Mon 31 Jul 2023 06:22:31 +0000
Manifest this update: Mon 31 Jul 2023 06:22:31 +0000
Manifest next update: Tue 01 Aug 2023 06:22:31 +0000
Files and hashes: 1: MQn1aVqJER0PO9a10rGHearBAt4.crl (hash: IkVsq+fTwWm9G0qGT2yPw+KPpm601wo6kSpR1YpfuZ8=)
2: yJYZhXJHsUUoCLeZH4f9dW6NVMc.roa (hash: QJbYmzyAvXy/C+KhXeq62vYgjO8Thq5M8vmcF0zW0sw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:aa:9c:d2:c0:47:bb:9e:1c:d2:70:9f:0c:12:79:ba:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3109f5695a89111d0f3bd6b5d2b18779aac102de
Validity
Not Before: Jul 31 06:22:31 2023 GMT
Not After : Aug 1 06:22:31 2023 GMT
Subject: CN=ec7ea9825ceeb3aef9e5ddf9a2be9012f490e692
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:1d:95:35:b0:da:aa:d2:1f:7b:55:af:f1:dc:
1a:cc:ba:0b:4c:e6:8b:74:c5:c1:b8:b0:36:d7:90:
e7:57:0d:64:65:3a:a3:e0:3d:bb:e3:9a:9d:0f:fd:
a8:84:eb:d5:f6:bc:40:4e:e6:0f:0f:5e:41:bc:0e:
f4:0d:b3:88:ad:34:d6:58:b2:4e:16:70:82:0e:a8:
f4:87:99:99:b6:2b:0e:7b:f9:5e:e2:79:c0:55:1c:
70:89:ea:44:d4:0f:0e:64:79:ec:dc:8b:70:85:50:
c4:7c:c4:0c:43:97:03:5b:03:83:54:61:74:07:75:
87:f1:6e:09:b6:29:30:62:d1:78:06:9c:33:e9:b1:
d2:b0:c2:9d:6d:c3:1a:70:ce:45:aa:de:8d:71:c0:
0c:e7:19:00:bd:78:6c:97:dd:8a:f7:5f:ce:8e:e5:
dd:9c:94:0c:30:72:ff:bc:5f:01:e3:7e:a9:23:97:
bb:61:75:5a:64:5e:99:34:7e:c4:f0:91:57:bd:f6:
59:79:99:4e:19:89:5c:cc:8e:47:e9:83:3d:51:26:
a2:a7:5f:fa:56:d9:27:52:eb:b0:66:70:8a:59:36:
ce:04:ed:91:46:f9:4a:4d:6d:1b:3c:55:e5:42:15:
49:53:41:f1:7a:13:9c:87:70:bc:bf:e8:31:bc:16:
75:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:7E:A9:82:5C:EE:B3:AE:F9:E5:DD:F9:A2:BE:90:12:F4:90:E6:92
X509v3 Authority Key Identifier:
keyid:31:09:F5:69:5A:89:11:1D:0F:3B:D6:B5:D2:B1:87:79:AA:C1:02:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MQn1aVqJER0PO9a10rGHearBAt4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/899344-87c5-4aa2-b1a3-204d2587d81f/1/MQn1aVqJER0PO9a10rGHearBAt4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/899344-87c5-4aa2-b1a3-204d2587d81f/1/MQn1aVqJER0PO9a10rGHearBAt4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:fe:83:ce:c5:45:54:d2:22:41:df:a6:5e:a9:58:a7:c4:5f:
45:cb:40:a4:e6:26:77:4d:86:06:58:fd:68:f0:cd:39:a8:a3:
31:d3:0f:f7:98:9d:9f:b9:8c:a8:b0:c2:ec:45:fa:b0:62:9e:
ae:93:b9:f9:aa:29:ff:17:f9:d1:77:3c:19:7e:9d:1a:7f:fc:
95:bb:78:95:e3:cb:4f:9a:70:ff:50:2b:ff:c9:66:d5:63:70:
13:38:e2:e9:56:ac:90:ca:03:2b:e2:5d:3b:f2:e9:a3:0c:25:
fe:cc:dc:94:20:6b:d5:7f:d4:15:3c:27:3d:e4:32:e4:41:bb:
a8:59:c1:98:7f:02:54:01:af:05:8e:44:26:34:52:65:ae:91:
60:92:aa:09:49:52:9d:93:fc:9d:e1:50:c8:5a:45:aa:e7:98:
17:97:24:47:6e:4d:08:13:a2:67:fc:41:c8:6c:ae:9d:5c:59:
62:95:b0:ae:8a:0c:4c:45:0a:d4:ca:06:a1:bd:32:5f:cf:7e:
35:cd:77:24:1a:8d:9a:29:a1:f9:cf:9d:29:3f:c6:c2:97:cc:
07:7d:f2:6f:15:90:85:6f:45:39:b7:fe:da:6c:0d:40:11:e4:
7a:2a:b6:92:fd:1d:cc:05:ec:fd:bc:ac:7e:fc:5c:ef:ef:04:
af:fd:d2:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:59:49 2025 by rpki-client