Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/Mgax0ge2XA69PyP6djABbYe0E0k.mft
File: Mgax0ge2XA69PyP6djABbYe0E0k.mft (raw, json)
Hash identifier: bJcnSLVFaa/lk2fFd+RUzNZyTMh/izXcqwsNZ2mT9NA=
Subject key identifier: CC:BB:65:3E:28:6A:27:87:2D:33:F8:1B:5C:F1:C7:0E:2D:9C:6E:A9
Authority key identifier: 32:06:B1:D2:07:B6:5C:0E:BD:3F:23:FA:76:30:01:6D:87:B4:13:49
Certificate issuer: /CN=3206b1d207b65c0ebd3f23fa7630016d87b41349
Certificate serial: 0194BCAA38DA248CEFD7271BFE363E924FA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mgax0ge2XA69PyP6djABbYe0E0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/Mgax0ge2XA69PyP6djABbYe0E0k.mft
Manifest number: 0449
Signing time: Fri 31 Jan 2025 14:00:59 +0000
Manifest this update: Fri 31 Jan 2025 14:00:59 +0000
Manifest next update: Sat 01 Feb 2025 14:00:59 +0000
Files and hashes: 1: M2KDR8dr7-7ZyhSIDyzwELKYUdM.roa (hash: p4F925/VSgNOhwfLh+ZxgpZFhtfFkVdXlw/7VfsIDVw=)
2: Mgax0ge2XA69PyP6djABbYe0E0k.crl (hash: OJHqlniQ5McZwCVUBgQ0HVsk03woP1IEt1Tk77OQBao=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:38:da:24:8c:ef:d7:27:1b:fe:36:3e:92:4f:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3206b1d207b65c0ebd3f23fa7630016d87b41349
Validity
Not Before: Jan 31 14:00:59 2025 GMT
Not After : Feb 1 14:00:59 2025 GMT
Subject: CN=ccbb653e286a27872d33f81b5cf1c70e2d9c6ea9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2e:20:99:25:7c:74:c3:ad:17:98:c6:fa:9d:
e5:8d:ca:ba:0e:88:e3:c6:79:91:d3:ec:f3:c0:7d:
da:b5:45:93:40:b2:6b:b8:5a:a9:3f:82:07:ea:4d:
c6:62:bc:75:84:49:98:79:cb:18:7d:d4:6d:0e:54:
14:5c:75:b1:04:01:e5:46:e5:1f:e2:7b:6d:cc:4d:
3f:11:54:13:be:3d:7f:60:54:46:c7:42:06:1a:18:
7b:38:b7:76:4b:f6:df:99:c9:42:cf:27:49:24:29:
75:bc:d7:2e:ef:3a:60:3e:06:80:c1:6d:a3:e7:e2:
35:58:cc:e3:aa:93:c9:ea:87:6f:d8:5d:5f:0c:ad:
92:a3:60:23:27:aa:55:16:63:a8:d5:ec:6a:b7:dd:
5e:44:e8:93:03:a9:b3:2d:4e:65:6f:8a:bf:01:e2:
35:6e:70:84:72:b9:50:95:6c:52:cd:5a:ae:f5:70:
41:e9:a1:c8:11:55:ad:29:36:71:6e:30:32:e1:4a:
a6:67:09:4e:94:2c:ab:e1:c8:2e:84:32:63:ca:c3:
b4:83:1f:1e:8b:1c:05:5a:bb:88:0a:e1:bd:42:86:
81:a1:5b:42:5a:44:af:24:97:ed:e8:19:ce:2b:d2:
8d:23:fa:80:96:19:64:7d:1b:6e:e7:83:4a:60:13:
25:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:BB:65:3E:28:6A:27:87:2D:33:F8:1B:5C:F1:C7:0E:2D:9C:6E:A9
X509v3 Authority Key Identifier:
keyid:32:06:B1:D2:07:B6:5C:0E:BD:3F:23:FA:76:30:01:6D:87:B4:13:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mgax0ge2XA69PyP6djABbYe0E0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/Mgax0ge2XA69PyP6djABbYe0E0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/Mgax0ge2XA69PyP6djABbYe0E0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:f3:0b:ec:74:97:eb:53:05:82:b2:00:a7:7d:f8:56:1b:c9:
a1:37:34:e1:d4:f0:f1:7b:6f:04:37:ad:f1:a3:c1:09:d1:09:
dd:00:4c:3b:9c:95:f0:d0:6d:00:c5:1c:66:4c:c8:44:f2:ff:
a3:ca:e3:32:92:82:e5:f3:e4:fc:74:2f:7e:8c:1e:32:bd:e9:
55:df:15:c1:43:68:80:96:49:b1:95:f5:a1:1b:fa:e9:c4:24:
23:32:cb:97:12:17:4e:88:71:21:c2:b7:09:10:f8:f5:aa:fd:
c9:4c:78:c9:84:5e:29:86:10:98:e7:85:42:0b:f9:84:dc:bd:
79:bb:4c:fd:14:e4:eb:23:a3:e3:57:59:80:86:57:58:e9:26:
cb:86:c7:64:9a:04:4e:3f:f2:15:eb:74:e5:6f:81:ee:3a:d1:
ea:ea:ec:be:35:34:08:cc:66:2d:6f:8f:2a:00:33:96:e9:f0:
bf:f2:aa:95:ba:86:c6:c8:04:bc:b1:98:db:b1:75:3f:7b:f1:
30:7a:4a:28:6d:85:89:92:5f:a6:14:16:dd:27:aa:58:c3:c0:
99:05:5e:d7:a1:21:39:32:59:b9:17:6c:fb:15:24:8d:95:32:
49:32:a8:59:e0:de:af:b5:22:e8:cb:3c:3b:10:d1:4e:b2:8b:
1b:96:a1:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qjjaJIzv1ycb/jY+kk+nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyMDZiMWQyMDdiNjVjMGViZDNmMjNmYTc2MzAwMTZkODdi
NDEzNDkwHhcNMjUwMTMxMTQwMDU5WhcNMjUwMjAxMTQwMDU5WjAzMTEwLwYDVQQD
EyhjY2JiNjUzZTI4NmEyNzg3MmQzM2Y4MWI1Y2YxYzcwZTJkOWM2ZWE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwC4gmSV8dMOtF5jG+p3ljcq6Dojj
xnmR0+zzwH3atUWTQLJruFqpP4IH6k3GYrx1hEmYecsYfdRtDlQUXHWxBAHlRuUf
4nttzE0/EVQTvj1/YFRGx0IGGhh7OLd2S/bfmclCzydJJCl1vNcu7zpgPgaAwW2j
5+I1WMzjqpPJ6odv2F1fDK2So2AjJ6pVFmOo1exqt91eROiTA6mzLU5lb4q/AeI1
bnCEcrlQlWxSzVqu9XBB6aHIEVWtKTZxbjAy4UqmZwlOlCyr4cguhDJjysO0gx8e
ixwFWruICuG9QoaBoVtCWkSvJJft6BnOK9KNI/qAlhlkfRtu54NKYBMlbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMy7ZT4oaieHLTP4G1zxxw4tnG6pMB8GA1UdIwQY
MBaAFDIGsdIHtlwOvT8j+nYwAW2HtBNJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWdheDBnZTJYQTY5UHlQNmRqQUJiWWUwRTBrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy82OTNmZTItZmJhZi00MzBmLThhMjIt
MWJhZTkzY2ZhMDc4LzEvTWdheDBnZTJYQTY5UHlQNmRqQUJiWWUwRTBrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy82OTNmZTItZmJhZi00MzBmLThhMjItMWJhZTkzY2ZhMDc4
LzEvTWdheDBnZTJYQTY5UHlQNmRqQUJiWWUwRTBrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAofML7HSX
61MFgrIAp334VhvJoTc04dTw8XtvBDet8aPBCdEJ3QBMO5yV8NBtAMUcZkzIRPL/
o8rjMpKC5fPk/HQvfoweMr3pVd8VwUNogJZJsZX1oRv66cQkIzLLlxIXTohxIcK3
CRD49ar9yUx4yYReKYYQmOeFQgv5hNy9ebtM/RTk6yOj41dZgIZXWOkmy4bHZJoE
Tj/yFet05W+B7jrR6ursvjU0CMxmLW+PKgAzlunwv/KqlbqGxsgEvLGY27F1P3vx
MHpKKG2FiZJfphQW3SeqWMPAmQVe16EhOTJZuRds+xUkjZUySTKoWeDer7Ui6Ms8
OxDRTrKLG5ahmg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:11:19 2025 by rpki-client