Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/a975e0-75e7-41f3-8d4d-6a614e5b6eb6/1/McnvnL7oGvuiwEFDSlw6hVgsnLc.mft
File: McnvnL7oGvuiwEFDSlw6hVgsnLc.mft (raw, json)
Hash identifier: s2ysSqYUx6aharB8h0Atu9gqsXF9biRoHo5ujwxcQXQ=
Subject key identifier: A8:8D:50:C0:A7:41:94:67:58:11:40:66:92:0C:0A:45:87:A4:5F:01
Authority key identifier: 31:C9:EF:9C:BE:E8:1A:FB:A2:C0:41:43:4A:5C:3A:85:58:2C:9C:B7
Certificate issuer: /CN=31c9ef9cbee81afba2c041434a5c3a85582c9cb7
Certificate serial: 018C8FE6459959DF19A4EEB82453269CC170
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/McnvnL7oGvuiwEFDSlw6hVgsnLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/a975e0-75e7-41f3-8d4d-6a614e5b6eb6/1/McnvnL7oGvuiwEFDSlw6hVgsnLc.mft
Manifest number: 0916
Signing time: Fri 22 Dec 2023 05:01:21 +0000
Manifest this update: Fri 22 Dec 2023 05:01:21 +0000
Manifest next update: Sat 23 Dec 2023 05:01:21 +0000
Files and hashes: 1: DqcvtMQYXNrF7CIyY3hwLnPLv3o.roa (hash: lUYaXHdvJXJs+h1m09JC56wuwoaQgQu6Zq9udZ+c8Kw=)
2: McnvnL7oGvuiwEFDSlw6hVgsnLc.crl (hash: 3fMPH7FNrlQvIOS0b30/9oK4RQczaLRM5unQJal/U0w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:8f:e6:45:99:59:df:19:a4:ee:b8:24:53:26:9c:c1:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31c9ef9cbee81afba2c041434a5c3a85582c9cb7
Validity
Not Before: Dec 22 05:01:21 2023 GMT
Not After : Dec 23 05:01:21 2023 GMT
Subject: CN=a88d50c0a741946758114066920c0a4587a45f01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:07:e8:9e:83:05:a0:46:1f:71:e2:c2:a3:10:
ba:3e:92:e4:b6:0e:0f:e6:f8:be:c4:9a:8e:12:7e:
6a:9f:2e:27:d7:48:79:97:29:b6:dd:1a:4c:a0:cd:
3e:6f:34:fd:8b:cb:64:23:f4:40:e2:9e:47:b8:7a:
85:c9:f0:79:8d:37:d7:51:0f:86:83:0b:84:52:fd:
7e:9f:f8:b0:41:dc:43:10:b5:d4:5f:7a:31:6f:8f:
9d:22:2b:c6:aa:bc:a7:4a:d2:f3:80:e7:b0:0f:4b:
05:2e:f2:fa:3f:de:15:8a:05:08:73:b2:04:52:34:
40:17:40:7e:51:9f:0a:46:52:91:64:ed:ff:a4:6c:
50:8a:a9:1a:6e:03:1d:ef:fa:43:d3:99:c3:06:ad:
db:de:ce:99:97:21:ce:d4:dc:93:9c:be:51:db:3e:
1f:68:18:e4:3f:96:9d:ff:87:1c:dd:24:91:41:5c:
92:f2:81:d9:e4:78:35:33:39:22:e0:99:33:c7:97:
87:bc:e4:55:9d:98:8a:d6:1a:24:dc:63:ef:5c:60:
f1:ab:3a:ac:6e:f6:fa:e6:74:63:5a:04:06:f8:e8:
dc:d6:a5:ce:e4:c7:db:29:e5:4f:f9:db:df:48:64:
6c:45:b1:6f:8a:cb:b7:e1:2c:cd:02:ec:d9:9f:49:
a9:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:8D:50:C0:A7:41:94:67:58:11:40:66:92:0C:0A:45:87:A4:5F:01
X509v3 Authority Key Identifier:
keyid:31:C9:EF:9C:BE:E8:1A:FB:A2:C0:41:43:4A:5C:3A:85:58:2C:9C:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/McnvnL7oGvuiwEFDSlw6hVgsnLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/a975e0-75e7-41f3-8d4d-6a614e5b6eb6/1/McnvnL7oGvuiwEFDSlw6hVgsnLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/a975e0-75e7-41f3-8d4d-6a614e5b6eb6/1/McnvnL7oGvuiwEFDSlw6hVgsnLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:76:66:f9:9f:5f:6c:2c:97:a7:a4:27:91:f0:12:2f:89:3e:
16:54:c6:0f:7e:c3:ee:97:44:76:a9:fe:58:5b:4e:6d:70:0d:
18:db:f8:11:81:65:12:cd:b9:d5:49:d5:57:f9:f8:5b:5d:a8:
de:19:70:e8:d8:b9:c6:9e:c6:df:e0:07:9d:bc:dc:0b:9b:04:
c4:38:0a:38:30:91:b8:3a:39:4d:e5:2e:1f:ad:bc:6a:98:ab:
15:21:0a:6b:32:27:10:7f:39:12:b6:cd:2e:c4:64:43:79:0e:
9f:8c:ba:c4:30:82:3d:fb:2f:27:3f:68:5b:5c:28:d5:36:bd:
2a:67:80:bb:f1:21:8c:e2:fa:74:53:d8:8e:e5:e5:98:3d:4f:
63:92:6b:85:76:5a:2f:23:a4:30:41:cc:2f:07:a6:dc:ae:c9:
b2:9a:03:1b:fe:9e:28:bb:1d:45:51:dc:57:d0:bf:62:33:9e:
03:e2:00:b8:ce:0b:5b:ae:fa:81:b7:2f:3a:20:7d:fd:ba:73:
a8:cd:9f:32:f8:64:86:b6:56:9e:14:0c:2a:b7:74:f0:78:c4:
19:b5:c4:0f:3b:35:dc:46:b6:cd:37:b4:10:47:02:b4:27:fc:
03:07:de:0b:2c:1f:e6:1c:02:2c:45:7c:5e:24:04:11:19:0d:
a0:af:82:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:09:03 2025 by rpki-client