Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/cccf8b-0274-4bb2-8dbb-d386d2049042/1/MVipNBic8FiR-MTlmdC5iVfplyk.mft
File: MVipNBic8FiR-MTlmdC5iVfplyk.mft (raw, json)
Hash identifier: crP5jjYkswQ57Vnxz/ogcHW0vrVC5jZH+lSr1GH4i1c=
Subject key identifier: 61:F4:69:E9:A0:DC:4C:7B:D0:BC:2A:0C:6E:D1:81:F4:99:0B:B6:B7
Authority key identifier: 31:58:A9:34:18:9C:F0:58:91:F8:C4:E5:99:D0:B9:89:57:E9:97:29
Certificate issuer: /CN=3158a934189cf05891f8c4e599d0b98957e99729
Certificate serial: 0195E1222C915A964E2639236B21D767F06F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MVipNBic8FiR-MTlmdC5iVfplyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/cccf8b-0274-4bb2-8dbb-d386d2049042/1/MVipNBic8FiR-MTlmdC5iVfplyk.mft
Manifest number: 037C
Signing time: Sat 29 Mar 2025 09:01:08 +0000
Manifest this update: Sat 29 Mar 2025 09:01:08 +0000
Manifest next update: Sun 30 Mar 2025 09:01:08 +0000
Files and hashes: 1: E6PiWh5H-D0KGmuTQkSUfsmPFuo.roa (hash: WPWFC02WG9+/fnlvASK2CjILK+QtibLHbpj7hF8B1Rs=)
2: MVipNBic8FiR-MTlmdC5iVfplyk.crl (hash: ZnppUuMO9zDcuDvHe8Z/alNp0E0K+O0KFpJq9DUw20c=)
3: N16JeWvOmOgFnFHegC3uE95HfCM.roa (hash: 32qO2DybZ3HcGDezcyBjiOrTiisCqB6PajByDF+SQr4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:22:2c:91:5a:96:4e:26:39:23:6b:21:d7:67:f0:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3158a934189cf05891f8c4e599d0b98957e99729
Validity
Not Before: Mar 29 09:01:08 2025 GMT
Not After : Mar 30 09:01:08 2025 GMT
Subject: CN=61f469e9a0dc4c7bd0bc2a0c6ed181f4990bb6b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:75:b6:46:51:45:a2:fe:f4:5e:e8:9a:10:bd:
33:11:a2:7d:98:0a:5b:36:0d:d7:84:0c:46:b3:2d:
1c:a6:ed:db:1f:47:2b:76:4e:78:11:52:83:9f:7c:
42:83:a2:0e:71:cf:a7:c1:13:b9:c9:85:9a:dd:c2:
f0:83:21:e4:ba:1c:df:e0:fa:3a:99:35:30:f5:70:
e9:0f:33:40:d1:1e:4d:34:72:b2:2e:db:ca:8f:98:
29:47:5f:aa:40:3b:a7:90:b1:a5:a8:6a:fa:49:68:
f7:3a:5c:c6:f3:c8:cf:06:0c:d9:08:ae:16:d5:43:
87:7e:43:20:24:26:70:aa:fd:d9:d7:61:dc:ab:ad:
26:75:44:cf:88:2d:2f:93:14:29:75:96:57:a1:75:
d4:a7:99:2b:75:96:2b:2b:5b:3c:59:23:56:da:f2:
b7:10:b3:dd:77:8e:6f:f1:b6:fb:0d:b4:e4:9e:14:
72:db:5d:e4:7c:5d:6e:45:58:2d:be:bb:34:e5:72:
bd:07:51:21:a9:d0:9d:91:df:c8:a8:3a:e9:e4:69:
ff:68:66:91:3a:02:32:ab:aa:4d:a2:32:c5:a0:d3:
98:3f:16:69:d1:2b:5e:f4:e6:bd:0f:e3:03:a1:24:
a7:8a:d4:1b:b2:46:a2:2d:fa:f7:5d:c0:3c:55:f6:
57:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:F4:69:E9:A0:DC:4C:7B:D0:BC:2A:0C:6E:D1:81:F4:99:0B:B6:B7
X509v3 Authority Key Identifier:
keyid:31:58:A9:34:18:9C:F0:58:91:F8:C4:E5:99:D0:B9:89:57:E9:97:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MVipNBic8FiR-MTlmdC5iVfplyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/cccf8b-0274-4bb2-8dbb-d386d2049042/1/MVipNBic8FiR-MTlmdC5iVfplyk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/cccf8b-0274-4bb2-8dbb-d386d2049042/1/MVipNBic8FiR-MTlmdC5iVfplyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:55:b6:ff:19:8f:04:bb:27:2d:f7:43:da:f8:d0:81:0b:98:
0f:90:66:92:41:b6:68:10:fb:a8:5c:74:9d:ac:9d:90:c6:34:
14:2f:21:6d:73:d2:b1:aa:b4:21:39:2c:29:a9:b9:19:8b:dd:
c0:28:16:d0:ef:7a:2d:00:85:e5:69:e1:aa:61:ba:3d:47:ee:
be:75:0d:15:60:1c:42:1f:c3:d8:c7:6e:43:4c:70:d2:ab:ed:
91:3a:6e:eb:60:3f:78:bb:f1:2e:22:ca:7c:66:de:97:b5:36:
5f:80:50:dc:9e:a3:64:db:bf:51:2f:bd:3b:33:98:e9:36:be:
ba:c1:0c:a7:1e:b9:8e:6a:c0:40:4e:c3:bd:93:44:a2:6f:05:
0b:c5:f1:f6:6b:ab:5c:a0:1a:5c:7a:52:d7:4c:63:fa:3c:a6:
b0:b7:73:9c:1f:b5:84:96:c5:e9:f7:af:38:0e:c6:93:15:b9:
da:9d:f6:a7:f1:9f:ce:dd:33:27:fe:5e:41:b2:bf:94:f3:71:
47:05:e5:bf:ed:88:5c:75:39:cf:cd:17:1b:11:18:4b:25:18:
ad:e8:55:ea:f1:b5:60:b2:d1:74:4e:9d:23:7c:2e:ff:8b:c7:
a0:80:80:d3:b7:a1:01:bf:d3:9a:9b:50:14:d1:09:ab:23:6a:
f4:00:6a:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:27:52 2025 by rpki-client