Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/625a30-3a6b-4661-840a-f82b70d8a0a7/1/MNWOQMbZHzcp5X4zRNMItZkv5G4.mft
File: MNWOQMbZHzcp5X4zRNMItZkv5G4.mft (raw, json)
Hash identifier: Fh4sxKnOEuD812W9Xqv/2rC1saDCpCMP8yQPyL0Zu4A=
Subject key identifier: 52:B4:13:19:2B:09:AD:58:07:41:CE:FF:CD:55:67:6F:D8:4C:77:B1
Authority key identifier: 30:D5:8E:40:C6:D9:1F:37:29:E5:7E:33:44:D3:08:B5:99:2F:E4:6E
Certificate issuer: /CN=30d58e40c6d91f3729e57e3344d308b5992fe46e
Certificate serial: 0194BC3CB96C397E43D0D934F75581C44E6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MNWOQMbZHzcp5X4zRNMItZkv5G4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/625a30-3a6b-4661-840a-f82b70d8a0a7/1/MNWOQMbZHzcp5X4zRNMItZkv5G4.mft
Manifest number: 0922
Signing time: Fri 31 Jan 2025 12:01:23 +0000
Manifest this update: Fri 31 Jan 2025 12:01:23 +0000
Manifest next update: Sat 01 Feb 2025 12:01:23 +0000
Files and hashes: 1: BhR4gh6niMuAg5TJ32ur0BjKaqs.roa (hash: Zv2rwkQ5zJHX1INCUgBx9oQ77dKwpoY1KIJrtlNZemo=)
2: MNWOQMbZHzcp5X4zRNMItZkv5G4.crl (hash: /zzFjqnnj5gFxkzn024J52N1opDeYxdRMUt7BQkZu+k=)
3: XXRk-2utC2qSFmq343z5VXrm2u4.roa (hash: ytRglwlu3WOrTr72XPTW+Woc0VzZSF5e3VxmBUNFs3g=)
4: Xp6Av0k8Jw85tGpea19kV0rC7zU.roa (hash: HoTKGzCgPJaXTFRgn8HDd9Uw/rl7lFS8MklAEJByUKE=)
5: uaxf2AGptn0k5nSChIQ5U9I-OzM.roa (hash: bH20ytgUK7nqS56x69xVlTEkEDFzbypHFv+jFwf5Z1I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:b9:6c:39:7e:43:d0:d9:34:f7:55:81:c4:4e:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30d58e40c6d91f3729e57e3344d308b5992fe46e
Validity
Not Before: Jan 31 12:01:23 2025 GMT
Not After : Feb 1 12:01:23 2025 GMT
Subject: CN=52b413192b09ad580741ceffcd55676fd84c77b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9b:c4:3c:5e:f1:5b:58:83:b2:c5:14:d9:6b:
00:c2:1d:2c:2f:09:cf:be:b2:a4:80:91:fa:b0:6d:
79:df:be:d1:63:9e:c7:7b:5b:22:d9:e3:45:20:01:
f0:8a:e7:cd:94:20:60:58:0a:02:cd:54:21:8d:46:
b8:34:ae:0a:b6:4e:e7:de:33:5a:33:69:62:6f:98:
16:c3:20:d4:ff:2f:4a:d0:dc:04:aa:43:6d:47:01:
9f:09:fd:6b:d0:5b:4e:34:65:e6:25:a1:33:cb:74:
84:b4:57:36:dc:45:02:f8:93:37:eb:60:f0:2c:bd:
85:b7:20:9c:ab:a6:1c:28:01:9b:70:bd:76:6d:18:
b6:97:57:e0:18:a8:2e:ac:2f:15:55:c9:40:50:56:
92:43:99:39:1f:5f:95:65:55:b3:bd:48:3b:d8:52:
4a:e8:04:d0:44:9a:d9:f3:ca:67:bc:74:51:6e:a4:
72:31:78:5e:40:72:c9:2d:e6:c1:98:21:3c:ee:7f:
30:9c:75:b3:2a:44:c8:45:3f:bd:c1:19:3e:15:89:
c1:03:2e:d4:83:5a:fb:1c:5c:f9:86:9a:dc:2f:0e:
04:4e:10:f5:50:5c:5b:ef:3a:15:29:a3:a1:f6:0e:
60:55:bd:93:33:15:43:94:ba:fc:d7:a1:fa:92:f8:
45:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:B4:13:19:2B:09:AD:58:07:41:CE:FF:CD:55:67:6F:D8:4C:77:B1
X509v3 Authority Key Identifier:
keyid:30:D5:8E:40:C6:D9:1F:37:29:E5:7E:33:44:D3:08:B5:99:2F:E4:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MNWOQMbZHzcp5X4zRNMItZkv5G4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/625a30-3a6b-4661-840a-f82b70d8a0a7/1/MNWOQMbZHzcp5X4zRNMItZkv5G4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/625a30-3a6b-4661-840a-f82b70d8a0a7/1/MNWOQMbZHzcp5X4zRNMItZkv5G4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:42:66:f6:7b:22:23:e3:52:33:b7:25:e6:9a:51:ce:7e:22:
05:e2:47:9d:37:9e:89:3b:1b:3c:17:9d:e4:39:aa:9e:5c:c3:
41:0f:9b:9e:3a:4d:fb:e7:0c:34:c2:d9:59:7d:54:49:cd:14:
76:b5:44:4f:88:d6:e0:d4:11:68:c1:15:73:81:5b:3c:a8:e5:
cf:9f:36:7f:49:92:9d:be:f0:68:31:22:cd:6e:73:88:d9:9c:
b8:92:16:29:00:19:2f:0a:b2:99:28:1a:23:8d:42:96:67:fe:
5e:8d:91:ce:f0:50:0f:d5:62:cc:06:a3:61:bf:e0:fe:2c:bf:
bc:ac:1c:ae:b1:94:4b:12:e7:86:e3:e0:2c:f2:96:b2:08:75:
01:42:9c:ec:f5:86:f8:68:c2:5a:b3:c3:8c:c0:3f:1d:be:6d:
43:bd:d5:bb:09:62:d6:16:58:06:d5:95:d8:5e:49:08:48:df:
16:3b:60:c4:55:77:e4:80:e8:fa:14:6f:2e:db:30:f2:d4:03:
06:9e:17:94:13:e9:1b:e7:d2:eb:60:fd:d4:76:ee:32:46:64:
6c:d6:d9:e2:5c:7f:4e:e5:6d:55:c6:9c:12:f0:d4:b0:f9:5e:
e3:92:73:16:62:1c:2e:62:fc:98:19:9c:78:36:ee:60:41:bf:
f4:f4:25:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:51 2025 by rpki-client