Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.mft
File: MG1hg1W9iTf3W7RlC7XBr3D5oS4.mft (raw, json)
Hash identifier: eOE1O80+fWxTrTEkM6jo19aCTjsDsOofd6wSjwtFIBg=
Subject key identifier: BB:BD:6A:EC:1C:12:F5:15:2B:59:80:38:55:6B:D9:06:9A:30:FD:80
Authority key identifier: 30:6D:61:83:55:BD:89:37:F7:5B:B4:65:0B:B5:C1:AF:70:F9:A1:2E
Certificate issuer: /CN=306d618355bd8937f75bb4650bb5c1af70f9a12e
Certificate serial: 0194BBCE85AA01C6270D62F229CBD0B0D3AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MG1hg1W9iTf3W7RlC7XBr3D5oS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.mft
Manifest number: 0FC8
Signing time: Fri 31 Jan 2025 10:01:01 +0000
Manifest this update: Fri 31 Jan 2025 10:01:01 +0000
Manifest next update: Sat 01 Feb 2025 10:01:01 +0000
Files and hashes: 1: 3jZVmIYXRpFGaUpKFxmxg6yk0v4.roa (hash: DxwsnC6ETAvm52TcakM8AMF0oIdLtUXLvOU8uNsDQAw=)
2: MG1hg1W9iTf3W7RlC7XBr3D5oS4.crl (hash: QP6l67YCGCRVHN5a4PKADXLgdrBhOJ8kEqMDcsYmRKk=)
3: OhFs8ELf0BkBqUqSta-UtJTxxOY.roa (hash: eORqJrZ4eHwt+ZtqWQMblZ7ybIDSjazTPoe3DTl1tC8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:85:aa:01:c6:27:0d:62:f2:29:cb:d0:b0:d3:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=306d618355bd8937f75bb4650bb5c1af70f9a12e
Validity
Not Before: Jan 31 10:01:01 2025 GMT
Not After : Feb 1 10:01:01 2025 GMT
Subject: CN=bbbd6aec1c12f5152b598038556bd9069a30fd80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:09:b3:ce:45:39:dd:68:b8:d3:d4:f9:75:50:
0a:f6:7f:1e:dc:2b:ca:be:4d:c3:24:48:6c:94:5a:
b1:c0:8f:2a:6b:fb:7f:b3:12:4c:2f:5b:b5:fa:76:
d6:9a:60:34:b0:cb:60:c8:01:b0:8a:d1:de:c0:2a:
de:a4:2a:37:01:cb:a9:05:88:3d:60:19:be:b9:ee:
7c:f4:92:f2:b7:26:f4:34:ea:69:b2:1c:3c:0f:dd:
9c:4c:c3:2e:33:83:df:0e:74:29:8f:6b:8e:5c:0f:
a7:8b:12:da:bb:72:ee:37:3b:d7:5d:e1:7a:a7:a5:
1b:76:d3:b4:76:fe:16:12:8d:65:ef:4a:5c:25:fe:
0b:b5:46:dc:dd:f1:06:c0:21:62:82:2c:a9:d3:e3:
e2:57:55:e4:36:57:4d:f6:bf:57:db:8a:35:f8:8c:
e2:77:ff:db:95:57:b6:76:a0:52:c0:a5:4e:38:3d:
c9:44:29:3d:f9:18:9a:c0:5b:69:e4:4d:2d:21:9b:
a4:c0:ce:2f:c2:ae:e1:07:f2:6d:64:46:4d:8b:4a:
ba:12:72:28:a2:60:56:ca:0c:a7:d1:46:a4:56:e0:
e3:d1:87:3c:f2:1a:14:fb:89:ba:a9:a1:1b:89:c6:
87:2d:50:d6:2a:53:a6:9c:ec:d3:ef:bc:4b:3a:3f:
a1:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:BD:6A:EC:1C:12:F5:15:2B:59:80:38:55:6B:D9:06:9A:30:FD:80
X509v3 Authority Key Identifier:
keyid:30:6D:61:83:55:BD:89:37:F7:5B:B4:65:0B:B5:C1:AF:70:F9:A1:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MG1hg1W9iTf3W7RlC7XBr3D5oS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:dc:e0:06:a1:68:59:3e:ef:d2:eb:c9:b6:19:28:dd:34:67:
08:d2:f6:ae:05:d8:91:75:91:90:d8:09:c9:d8:21:ba:ee:34:
48:e9:93:e1:d4:5e:ac:87:d3:bb:26:7a:b7:cb:17:ad:10:33:
84:97:de:63:94:51:2a:58:11:e6:29:8c:10:de:b3:1b:a1:78:
2f:ff:86:7e:e6:87:17:7a:d8:b3:d3:18:0f:e8:fe:9c:e8:cc:
5a:93:81:66:b7:e0:3f:34:f5:bd:27:96:63:42:bf:d4:c1:c9:
a9:cf:e6:67:5f:47:33:24:92:b0:f9:29:35:53:81:1e:66:f1:
f2:86:80:c0:6c:7a:f6:fd:8e:56:2d:41:74:ad:8d:7b:30:1b:
c6:4b:30:aa:fd:91:cd:23:09:f8:73:3b:a9:0b:0d:86:b5:1b:
ca:10:65:49:53:9c:af:f7:f3:ec:cc:fe:56:40:d4:50:e6:fe:
37:80:9f:2d:77:d7:a8:93:28:83:7b:64:c0:d8:5c:e8:cc:f6:
c5:db:1a:76:83:13:01:62:f1:cf:34:8e:f9:b4:5f:67:95:24:
cf:a2:2c:22:a9:79:c1:11:1d:ef:0c:37:91:ad:f8:7a:13:17:
d3:00:57:65:13:ed:b2:56:21:31:ec:90:d9:ac:20:69:42:34:
ff:ab:91:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:18 2025 by rpki-client