Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/cd7bdf-2f6c-4402-95d7-c3d18b275465/1/mnWCwBTybSO275wugvSFcMC2eGg.mft
File: mnWCwBTybSO275wugvSFcMC2eGg.mft (raw, json)
Hash identifier: XL6aOUSnW58i70gu/8KZRDOWSzlmpS1gh7lMHOgo1Yw=
Subject key identifier: C9:B5:28:0A:C1:8B:2D:24:9C:DE:82:48:BA:3E:A3:BD:A5:47:2E:40
Authority key identifier: 9A:75:82:C0:14:F2:6D:23:B6:EF:9C:2E:82:F4:85:70:C0:B6:78:68
Certificate issuer: /CN=9a7582c014f26d23b6ef9c2e82f48570c0b67868
Certificate serial: 018B7FD0BBD5090F354E465897CFA6AC0E90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mnWCwBTybSO275wugvSFcMC2eGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/cd7bdf-2f6c-4402-95d7-c3d18b275465/1/mnWCwBTybSO275wugvSFcMC2eGg.mft
Manifest number: 085E
Signing time: Mon 30 Oct 2023 09:01:07 +0000
Manifest this update: Mon 30 Oct 2023 09:01:07 +0000
Manifest next update: Tue 31 Oct 2023 09:01:07 +0000
Files and hashes: 1: i_lbNZSGHjUmwwVoC4chmHJeReM.roa (hash: AzImnAMadr/OBHrqaKsMSGv48nYtx+FaLGBA5uTSHfU=)
2: mnWCwBTybSO275wugvSFcMC2eGg.crl (hash: 7ejF7M6C4JQtz1TkXdZxlX8S1alXg5hKfGUrpAhTFR0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:7f:d0:bb:d5:09:0f:35:4e:46:58:97:cf:a6:ac:0e:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a7582c014f26d23b6ef9c2e82f48570c0b67868
Validity
Not Before: Oct 30 09:01:07 2023 GMT
Not After : Oct 31 09:01:07 2023 GMT
Subject: CN=c9b5280ac18b2d249cde8248ba3ea3bda5472e40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:8a:24:58:7f:1a:46:75:09:27:08:a4:96:56:
ca:5c:fc:66:aa:74:fb:67:d2:17:63:42:73:cd:89:
86:bd:2d:19:5f:f3:56:1a:e2:23:c6:71:27:7d:54:
33:0b:83:a7:88:16:29:7d:f6:27:03:f8:40:82:84:
bd:4a:2a:8e:28:c9:2b:23:12:46:ae:a0:a7:7e:92:
e8:47:6a:63:2c:a4:46:fd:84:fa:45:2f:9c:ce:dd:
cc:ad:1e:6b:cd:cc:b2:66:54:33:cf:78:15:f7:48:
8b:5b:91:fb:87:0d:cc:fa:cf:a2:9c:d0:98:bd:05:
ba:ff:c9:ae:fa:fd:29:7c:65:24:f5:7f:2d:18:33:
49:8a:7b:6a:c1:1e:98:7a:82:77:05:de:29:09:be:
89:71:4e:3b:bd:7b:29:25:60:8f:bb:02:df:30:48:
9a:fe:01:76:55:c0:4a:16:7b:d0:d8:a4:8c:19:a7:
c9:5c:f2:9e:75:50:34:93:c4:72:92:e7:e1:c2:90:
ce:fe:04:e8:c9:eb:19:45:a0:a2:83:31:ed:11:e7:
dc:7b:06:6e:9d:3e:8e:a9:73:c2:2f:43:9b:5b:b2:
11:82:52:bd:39:09:df:4f:83:3a:32:72:66:1a:52:
66:de:98:c2:5b:1b:97:88:62:f7:ac:ef:b8:e5:b1:
bf:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:B5:28:0A:C1:8B:2D:24:9C:DE:82:48:BA:3E:A3:BD:A5:47:2E:40
X509v3 Authority Key Identifier:
keyid:9A:75:82:C0:14:F2:6D:23:B6:EF:9C:2E:82:F4:85:70:C0:B6:78:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mnWCwBTybSO275wugvSFcMC2eGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/cd7bdf-2f6c-4402-95d7-c3d18b275465/1/mnWCwBTybSO275wugvSFcMC2eGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/cd7bdf-2f6c-4402-95d7-c3d18b275465/1/mnWCwBTybSO275wugvSFcMC2eGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:c6:d5:bc:0b:e5:05:c1:2b:51:05:ee:2a:8e:48:9e:89:86:
14:b0:ed:3e:e8:2b:3b:c3:ec:46:66:48:b6:71:76:af:93:cb:
6c:34:b6:ae:02:30:d8:cd:39:5d:cf:17:83:4c:ea:b6:70:3d:
c9:71:04:44:c3:1e:d0:a2:07:35:80:09:7c:63:4a:60:fd:7b:
f6:43:a2:cd:5f:de:7b:4c:7a:6a:2d:0d:51:62:6d:ec:44:6a:
70:1f:e7:57:82:71:3b:63:bf:73:f9:21:ed:51:22:31:70:d9:
22:a6:36:a3:27:32:ff:09:53:7c:88:36:19:0c:15:09:97:a4:
47:f8:ab:26:e5:57:9c:cf:96:a8:27:41:01:d6:0b:d5:b3:15:
e1:0a:ac:6f:f4:eb:ac:3d:ad:c9:0e:73:24:06:80:7a:f6:40:
8d:22:8e:07:cf:99:78:08:96:ea:59:40:68:3a:ff:b8:c9:92:
35:60:6d:39:2f:31:ba:13:20:e3:90:8d:1e:c7:0c:e9:da:1b:
63:95:03:fa:9f:03:ee:d9:8a:bb:4c:c4:40:09:97:32:c1:52:
ff:5a:7e:fa:2b:6b:aa:e3:78:85:16:63:4a:d3:d2:f7:37:65:
88:97:cc:0d:9c:80:0b:7a:16:2f:8b:c8:28:39:e6:dc:0a:ed:
9b:ab:40:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:56:11 2025 by rpki-client