Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/2820d1-fd20-4889-834f-d527ce0d9930/1/MFxE6MlhoUUNCqshLw3scX0d77Y.mft
File: MFxE6MlhoUUNCqshLw3scX0d77Y.mft (raw, json)
Hash identifier: NDsWRle/Ndtvwle4bpfWjNHc0RsZYlidCXSj0IN/OZc=
Subject key identifier: DF:75:4B:96:ED:F3:68:87:44:ED:63:77:86:52:AB:2F:87:B5:32:2D
Authority key identifier: 30:5C:44:E8:C9:61:A1:45:0D:0A:AB:21:2F:0D:EC:71:7D:1D:EF:B6
Certificate issuer: /CN=305c44e8c961a1450d0aab212f0dec717d1defb6
Certificate serial: 0194BD855010AA482E11B14395DBFA4E8DF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MFxE6MlhoUUNCqshLw3scX0d77Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/2820d1-fd20-4889-834f-d527ce0d9930/1/MFxE6MlhoUUNCqshLw3scX0d77Y.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 18:00:18 +0000
Manifest this update: Fri 31 Jan 2025 18:00:18 +0000
Manifest next update: Sat 01 Feb 2025 18:00:18 +0000
Files and hashes: 1: MFxE6MlhoUUNCqshLw3scX0d77Y.crl (hash: PZvoQtyj8+bDWN/e7qsh0GIKNhxW5s0v/EFrsp012fg=)
2: mJgdj-dzJHYIwfc18P0iKUu6K8Q.roa (hash: BwFiGax6tDOHoiiFhGtxEO6XUIlUJlP+Zm+e5NhOWpg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:50:10:aa:48:2e:11:b1:43:95:db:fa:4e:8d:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=305c44e8c961a1450d0aab212f0dec717d1defb6
Validity
Not Before: Jan 31 18:00:18 2025 GMT
Not After : Feb 1 18:00:18 2025 GMT
Subject: CN=df754b96edf3688744ed63778652ab2f87b5322d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:66:92:27:82:42:a5:5a:18:91:4f:99:64:79:
6f:37:44:15:c4:70:73:74:e0:11:10:48:c9:c8:56:
0f:d7:91:5b:aa:52:e9:af:e8:1b:2b:86:85:dd:f0:
ed:97:4b:f9:ec:48:34:39:dc:4d:b2:1c:d9:dd:a6:
a6:da:71:4b:ed:09:d2:3a:fd:32:7f:db:83:0e:aa:
5e:cb:dd:96:3f:90:70:0b:00:26:74:f4:72:38:c2:
08:f4:50:02:bc:e4:27:36:08:77:e3:72:3d:a1:86:
24:75:54:92:b4:47:b9:63:9f:95:e9:d5:f5:3f:f2:
c1:71:34:da:e0:f8:f8:15:30:2b:95:6b:fd:91:73:
b6:0c:61:5d:e7:6f:89:6a:a4:a2:22:c8:84:91:7d:
7b:38:6a:ae:c6:bc:7f:7b:f7:fd:b0:80:25:78:b8:
06:6a:f7:f6:12:fd:e5:eb:1f:be:a6:b8:16:3a:16:
c2:c6:8f:5c:34:0f:fa:e5:e6:56:f3:1f:06:d7:2e:
8b:a1:b2:28:b1:dd:82:96:df:03:a4:bc:dc:b0:f3:
3d:66:34:68:99:51:c8:0e:35:0b:79:c1:c1:3c:29:
cd:be:f1:3a:d4:12:aa:2e:2e:51:52:4b:67:84:7b:
5e:bb:6a:c2:a3:92:d8:9d:81:a5:50:7a:9c:b6:d9:
c1:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:75:4B:96:ED:F3:68:87:44:ED:63:77:86:52:AB:2F:87:B5:32:2D
X509v3 Authority Key Identifier:
keyid:30:5C:44:E8:C9:61:A1:45:0D:0A:AB:21:2F:0D:EC:71:7D:1D:EF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MFxE6MlhoUUNCqshLw3scX0d77Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/2820d1-fd20-4889-834f-d527ce0d9930/1/MFxE6MlhoUUNCqshLw3scX0d77Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/2820d1-fd20-4889-834f-d527ce0d9930/1/MFxE6MlhoUUNCqshLw3scX0d77Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:3f:41:87:cf:ba:c0:77:b3:58:1e:d5:14:0f:14:3f:4f:f0:
f4:24:de:bf:36:26:1f:d1:36:0a:b5:ab:6d:ae:36:90:0e:ec:
a5:5f:84:fb:65:93:8d:ab:81:fe:1b:77:77:51:63:9a:60:c7:
84:60:e5:f3:8e:81:32:ca:58:5b:06:32:ee:dd:97:01:f5:48:
63:89:cd:1f:23:74:db:c6:d9:2c:0e:c0:66:d3:1b:78:74:60:
48:9f:2c:23:3c:a4:8e:05:29:ee:d2:d4:70:9d:86:ca:a3:ef:
86:a1:2f:9f:65:f7:71:ed:0a:b1:c7:93:3d:37:9d:d8:80:38:
b1:70:e0:46:3d:2e:a2:88:66:ec:dc:56:e6:84:99:b6:a4:b1:
a7:2e:73:17:84:40:c2:6b:d6:ad:02:f3:6d:d9:c0:37:3a:71:
ce:12:bd:7c:bb:04:0f:2b:be:2d:53:65:26:62:c1:5d:3c:ce:
b6:f9:3e:d5:2d:a9:87:39:9d:ea:d5:df:25:98:7d:ed:e1:6a:
84:47:bb:22:b1:39:d3:28:32:0d:99:28:1c:8b:83:c7:04:0e:
81:db:0f:62:92:a0:e6:82:a5:21:06:6e:bd:23:ca:02:d1:2b:
24:43:a1:0c:9b:45:bb:52:ce:7d:f8:76:4b:eb:c4:7b:96:b4:
41:5d:79:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:52 2025 by rpki-client