Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/2e4e54-0548-4d0c-93f1-75461abbb5a4/1/MXuBR1A-oZ9YHKANKNvuXljLj0g.mft
File: MXuBR1A-oZ9YHKANKNvuXljLj0g.mft (raw, json)
Hash identifier: WP2bvTVx1EHw4Ba7Ig6xFoaZRW0PtcrF/D03/1v1zp8=
Subject key identifier: 21:7B:E9:33:E3:34:ED:AD:7A:4C:7F:07:1E:9B:30:78:D6:C5:A0:FA
Authority key identifier: 31:7B:81:47:50:3E:A1:9F:58:1C:A0:0D:28:DB:EE:5E:58:CB:8F:48
Certificate issuer: /CN=317b8147503ea19f581ca00d28dbee5e58cb8f48
Certificate serial: 0194BD4E5080C96CF19D27E7685819D52AE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MXuBR1A-oZ9YHKANKNvuXljLj0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/2e4e54-0548-4d0c-93f1-75461abbb5a4/1/MXuBR1A-oZ9YHKANKNvuXljLj0g.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 17:00:13 +0000
Manifest this update: Fri 31 Jan 2025 17:00:13 +0000
Manifest next update: Sat 01 Feb 2025 17:00:13 +0000
Files and hashes: 1: MXuBR1A-oZ9YHKANKNvuXljLj0g.crl (hash: ddNBR4GtEJY6wPsj/cBI0ZOrTvmnkHD0v3imswsjPJc=)
2: Xvq5E9FjSgetaXURRKNVucLHpJA.roa (hash: Q0VYCtfy8botfioT4TVhD+jb4Ht709fLdZsnE/9HQwY=)
3: ZthEX-bem71wxx1bLgVPG5w9ZTc.roa (hash: T1Z1de8P32daOdZ6/2GmlJdKCTcAVlmu6uwlpR9ZYC8=)
4: cpm1MJFdWjEQeCJ1LBHfzw5iKXY.roa (hash: gbGURzXBFbe9SdreBkh+gl3ChVchhLD0ie8p4XE7DdU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:50:80:c9:6c:f1:9d:27:e7:68:58:19:d5:2a:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=317b8147503ea19f581ca00d28dbee5e58cb8f48
Validity
Not Before: Jan 31 17:00:13 2025 GMT
Not After : Feb 1 17:00:13 2025 GMT
Subject: CN=217be933e334edad7a4c7f071e9b3078d6c5a0fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:33:b8:db:51:0a:a5:e2:bf:38:5e:b8:23:b3:
f6:03:d3:6c:ab:ae:de:67:2c:07:c0:73:74:58:17:
4f:ac:5f:0e:31:71:d2:2a:54:f7:61:1d:cb:71:03:
fd:cd:c9:51:cf:f4:50:23:5a:f1:3d:ef:09:b9:29:
9c:c2:c5:c4:32:22:b4:b5:b0:0b:cb:80:64:29:8d:
8e:fc:76:8b:93:6a:97:e8:7d:93:ea:f8:04:e7:42:
dc:40:d2:58:32:88:6f:0c:07:ac:f4:03:bb:7d:74:
b2:b0:46:c9:b7:ab:e4:6e:fb:cb:1c:cc:cd:74:4c:
b5:06:c9:98:53:13:3a:37:47:13:5d:4a:04:ae:08:
74:a6:6d:0e:5a:b3:c0:6c:0c:d0:ce:3d:9f:40:e7:
d1:99:2a:1b:ab:72:de:41:47:76:72:ee:01:0e:34:
25:f8:45:1d:43:e4:a4:3d:83:0a:0d:7b:4d:ea:3a:
4f:19:cc:11:f6:9e:49:06:9d:dc:1c:3c:8f:cf:7d:
cc:8f:c5:57:18:ba:5c:0c:2d:0a:08:a3:22:3a:80:
9a:c0:a7:d1:fc:fd:ae:1a:45:41:b5:67:89:52:54:
e4:63:47:15:a3:6c:1c:57:1e:af:99:cf:f2:c1:b3:
79:1f:f4:fd:95:5c:a1:f6:52:e9:ad:ff:25:92:ee:
7f:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:7B:E9:33:E3:34:ED:AD:7A:4C:7F:07:1E:9B:30:78:D6:C5:A0:FA
X509v3 Authority Key Identifier:
keyid:31:7B:81:47:50:3E:A1:9F:58:1C:A0:0D:28:DB:EE:5E:58:CB:8F:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MXuBR1A-oZ9YHKANKNvuXljLj0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2e4e54-0548-4d0c-93f1-75461abbb5a4/1/MXuBR1A-oZ9YHKANKNvuXljLj0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2e4e54-0548-4d0c-93f1-75461abbb5a4/1/MXuBR1A-oZ9YHKANKNvuXljLj0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:e2:e3:1f:46:d8:7d:99:21:14:7e:54:d6:b2:cc:d9:97:45:
65:65:fc:43:6c:1d:9b:04:39:14:91:ae:60:97:af:48:51:82:
77:6e:01:e5:7e:c9:47:78:20:3f:61:a7:e2:85:a1:f7:42:18:
00:6a:5c:41:e4:ad:d4:3b:81:fc:3c:b1:9b:1b:f6:9f:8e:e5:
7c:6a:5b:ff:9a:db:05:a0:0b:d4:a2:50:be:41:16:b7:7c:2c:
77:20:81:f9:01:8e:29:9b:7d:d6:ed:e7:d0:51:34:0e:ae:ae:
a8:79:93:b4:b5:d2:b1:31:ff:9e:06:fc:7f:02:bb:43:e7:51:
2b:3f:2d:9e:2f:a4:24:d7:5a:00:4d:ef:24:7f:5c:ee:3b:6e:
6c:11:16:b2:00:20:e0:41:3b:ef:25:39:06:13:3b:de:a6:ca:
b4:92:75:fa:b0:f8:12:37:ef:8c:10:36:33:01:af:c9:cb:11:
fa:49:62:0a:9e:ce:43:fc:35:33:82:6e:c4:07:63:91:66:b3:
fc:9a:0f:a5:74:2e:f6:db:b4:48:89:70:92:82:47:67:2c:5e:
03:db:e5:c8:d6:a6:b4:b2:3a:ff:09:fa:18:76:69:22:cb:62:
16:1d:e7:60:de:56:1b:bf:f9:51:4b:67:72:23:50:73:2d:75:
eb:57:0f:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 18:11:54 2025 by rpki-client