Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/03282e-0208-4df7-83ce-69cf3ff2c36a/1/MyKga0bwavI_geFYiJUKNgY-vNk.mft
File: MyKga0bwavI_geFYiJUKNgY-vNk.mft (raw, json)
Hash identifier: cJHGTegaoEirDrZjoHZn+3/0HE1o53YOgaeYmoXYAXs=
Subject key identifier: 9C:00:B9:98:DF:35:B9:81:16:94:AC:B5:D4:F4:61:45:DC:54:D3:4B
Authority key identifier: 33:22:A0:6B:46:F0:6A:F2:3F:81:E1:58:88:95:0A:36:06:3E:BC:D9
Certificate issuer: /CN=3322a06b46f06af23f81e15888950a36063ebcd9
Certificate serial: 0193D85AFD5882B2BC7A5E94B5E9F470E6E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MyKga0bwavI_geFYiJUKNgY-vNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/03282e-0208-4df7-83ce-69cf3ff2c36a/1/MyKga0bwavI_geFYiJUKNgY-vNk.mft
Manifest number: 1077
Signing time: Wed 18 Dec 2024 06:01:01 +0000
Manifest this update: Wed 18 Dec 2024 06:01:01 +0000
Manifest next update: Thu 19 Dec 2024 06:01:01 +0000
Files and hashes: 1: MyKga0bwavI_geFYiJUKNgY-vNk.crl (hash: r1Ob19BHxjmXYp0oQ4OI0Q6mKCgJAf7WSpX7dgaTYWo=)
2: nX2385KcCQLZXSrlpPPerBCcSMU.roa (hash: AV4G0N4RXdLiN9fEZjV8s4fnNsK6aIoA3Lwva+2vcck=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:d8:5a:fd:58:82:b2:bc:7a:5e:94:b5:e9:f4:70:e6:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3322a06b46f06af23f81e15888950a36063ebcd9
Validity
Not Before: Dec 18 06:01:01 2024 GMT
Not After : Dec 19 06:01:01 2024 GMT
Subject: CN=9c00b998df35b9811694acb5d4f46145dc54d34b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:80:5b:9a:bc:16:26:a9:b5:77:23:1f:68:fe:
fd:17:18:0b:33:32:37:9d:86:96:f3:03:0a:e5:06:
af:b4:01:e8:f5:2d:35:93:2a:0d:3e:da:c0:a7:63:
e3:73:34:47:b2:e0:55:a2:92:c7:95:8d:eb:25:76:
25:c0:8d:ca:c4:c9:c7:dd:ab:fe:a1:0c:24:71:e5:
83:90:dd:32:ae:54:62:06:66:b8:f8:9d:3c:a5:47:
66:fe:dd:28:5d:4e:dd:5d:a5:bf:c3:64:ca:07:b9:
2b:8b:55:40:e3:f2:23:bd:33:ba:fc:9d:c3:e1:f2:
af:c3:3a:d6:a6:0c:9c:fc:66:43:96:cd:57:01:00:
c1:a0:52:8e:2e:d2:34:ab:99:22:9b:4c:0d:fc:42:
94:f3:28:1a:62:a4:df:2e:bd:51:f7:87:e6:ff:21:
2c:1c:8c:fa:cc:fe:c2:24:b6:d6:51:e9:b7:b4:07:
b8:71:e1:88:60:03:70:95:e2:f9:2d:58:39:ac:1f:
7c:b2:29:6e:48:de:47:3b:ba:83:f8:a5:db:14:bb:
65:3f:5e:33:81:6c:06:58:d1:a3:07:6b:4a:5c:35:
81:da:10:4b:91:ec:53:24:d4:c6:0d:a8:4b:d5:1a:
69:28:44:83:7c:4c:cb:44:fc:70:8e:80:59:10:9e:
99:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:00:B9:98:DF:35:B9:81:16:94:AC:B5:D4:F4:61:45:DC:54:D3:4B
X509v3 Authority Key Identifier:
keyid:33:22:A0:6B:46:F0:6A:F2:3F:81:E1:58:88:95:0A:36:06:3E:BC:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MyKga0bwavI_geFYiJUKNgY-vNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/03282e-0208-4df7-83ce-69cf3ff2c36a/1/MyKga0bwavI_geFYiJUKNgY-vNk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/03282e-0208-4df7-83ce-69cf3ff2c36a/1/MyKga0bwavI_geFYiJUKNgY-vNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:7e:2d:4f:bb:58:59:9e:f2:9d:32:45:c3:40:cc:12:22:d8:
f3:cd:08:2b:3a:fa:84:ea:56:63:d5:12:ae:70:93:2c:66:ca:
69:e3:65:17:a0:9c:08:61:ce:b1:87:b0:8a:a9:e2:5e:b6:2d:
76:21:11:36:44:92:95:11:c8:f4:08:21:b4:fa:b9:42:04:62:
d1:6f:b1:0c:c4:a0:1c:b2:39:77:a4:27:21:42:aa:19:6a:9f:
29:87:f6:be:e4:cd:56:d3:d8:50:ed:a0:fa:14:33:ed:a1:4d:
24:47:5a:3f:17:c0:60:1e:a8:90:5f:cd:d9:d5:d5:7e:98:eb:
97:b6:ac:68:77:74:ce:cd:06:c3:5c:90:87:75:d7:c0:3e:aa:
d2:26:f5:0a:b3:12:f3:01:d6:f0:c3:dc:41:4d:a9:bd:f0:01:
48:c7:82:81:d3:c4:c3:02:a8:8b:06:1b:41:92:9a:e5:53:29:
0e:37:c2:f1:75:aa:c5:55:3b:4e:92:61:c0:b4:fb:a9:fb:a1:
11:5a:d2:6a:14:2e:b1:36:a9:cc:80:aa:06:7e:5f:9b:1d:51:
ad:8e:bd:bb:13:e7:9a:b4:66:32:cc:1f:5f:8e:f4:74:fa:33:
e8:d0:7e:07:f0:aa:78:0c:2a:4f:24:ac:2e:5e:6f:dd:05:57:
40:9a:d2:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:06:00 2025 by rpki-client