Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/5a448a-5e7a-47e0-87da-cdcfbb100447/1/MZX3NBnoIjKXlM8X-6fpPzdTdKk.mft
File: MZX3NBnoIjKXlM8X-6fpPzdTdKk.mft (raw, json)
Hash identifier: tke0VvEAz4rx7Zr0mo34SwbjouTD2PrYHM/mND84YOY=
Subject key identifier: F0:C5:00:10:EA:7D:54:0F:0F:91:39:51:F3:7C:23:DA:F5:1B:12:28
Authority key identifier: 31:95:F7:34:19:E8:22:32:97:94:CF:17:FB:A7:E9:3F:37:53:74:A9
Certificate issuer: /CN=3195f73419e822329794cf17fba7e93f375374a9
Certificate serial: 0194BC3C6B87FB951BBE76C85D0103B4F439
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MZX3NBnoIjKXlM8X-6fpPzdTdKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/5a448a-5e7a-47e0-87da-cdcfbb100447/1/MZX3NBnoIjKXlM8X-6fpPzdTdKk.mft
Manifest number: 0FD0
Signing time: Fri 31 Jan 2025 12:01:03 +0000
Manifest this update: Fri 31 Jan 2025 12:01:03 +0000
Manifest next update: Sat 01 Feb 2025 12:01:03 +0000
Files and hashes: 1: MZX3NBnoIjKXlM8X-6fpPzdTdKk.crl (hash: PGHFjUBTLi8ZoO7H8RJf2K7CCvycwbesY3JzULcsYiw=)
2: SCHcZAvBuEDabGE8ZnvuGrNm6LM.roa (hash: +7HN05BMaB78AnyjOqZ5Q8EXtIVzWFh5zSmSPi10HzA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:6b:87:fb:95:1b:be:76:c8:5d:01:03:b4:f4:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3195f73419e822329794cf17fba7e93f375374a9
Validity
Not Before: Jan 31 12:01:03 2025 GMT
Not After : Feb 1 12:01:03 2025 GMT
Subject: CN=f0c50010ea7d540f0f913951f37c23daf51b1228
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:61:77:02:75:7f:51:5d:5f:6b:26:9d:ba:bb:
14:c9:02:31:41:d4:c7:e2:9e:4a:8f:32:38:80:a4:
1d:79:78:7d:e1:8a:1d:40:7b:3c:9e:b1:d3:f1:db:
1a:fe:e2:7a:2c:f8:14:fa:bb:4f:4d:d7:57:df:5a:
73:3f:e2:4c:20:0c:f2:3b:e3:b4:96:0d:98:18:95:
96:50:cc:bb:f0:b4:3a:7d:3f:49:55:81:6f:e0:73:
04:d3:a0:f1:8b:1d:60:63:f1:08:13:d2:58:1b:16:
6b:bd:8a:fd:dc:b4:1c:9d:d4:49:2d:2d:13:54:cb:
c2:8e:a1:b7:e8:b1:08:7a:39:15:63:5e:cd:0f:9c:
d9:6a:db:9d:a2:82:d9:23:04:fc:c6:ac:f3:75:8c:
31:dc:91:8a:ef:00:d6:4b:03:b8:20:5a:f1:b6:5a:
1e:8d:44:e7:d2:67:13:84:ed:7a:dd:99:f1:92:b4:
73:40:fb:71:dd:1f:cc:15:f8:6d:db:44:98:ae:ed:
01:0c:69:92:e5:98:07:67:95:7f:e8:5f:74:94:46:
ff:af:c6:84:3a:aa:01:63:79:d9:cb:ea:0e:4c:5d:
9c:2b:43:c7:a4:98:ba:03:86:e2:81:f9:2e:1e:6a:
13:12:3a:1a:26:9a:c0:ef:9a:ef:0f:0a:f5:2e:c2:
8f:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:C5:00:10:EA:7D:54:0F:0F:91:39:51:F3:7C:23:DA:F5:1B:12:28
X509v3 Authority Key Identifier:
keyid:31:95:F7:34:19:E8:22:32:97:94:CF:17:FB:A7:E9:3F:37:53:74:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MZX3NBnoIjKXlM8X-6fpPzdTdKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5a448a-5e7a-47e0-87da-cdcfbb100447/1/MZX3NBnoIjKXlM8X-6fpPzdTdKk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5a448a-5e7a-47e0-87da-cdcfbb100447/1/MZX3NBnoIjKXlM8X-6fpPzdTdKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:aa:6e:1d:32:9f:30:c1:22:de:0c:89:fc:bc:f1:0d:93:3b:
79:82:3c:b4:cb:19:a2:ec:20:a6:7e:4d:71:55:a6:7f:bf:f9:
fd:32:4f:b7:25:7a:87:ca:02:a5:59:fb:18:53:1e:3b:16:6d:
cd:de:6b:7f:cd:52:f0:9a:56:28:eb:a9:af:d2:d6:eb:df:80:
36:a4:33:bc:b0:a0:c3:fe:19:f3:b9:f8:08:3d:7a:32:d2:70:
bb:09:4b:8b:94:47:93:cc:13:38:20:9c:0c:e5:b0:d5:81:52:
0a:2c:51:89:a2:cf:ca:83:60:7d:21:e1:72:4e:33:1d:e8:4f:
f0:da:2d:68:58:f6:ec:2b:66:37:c8:06:d5:e7:fc:9d:c9:fb:
00:52:f9:fe:a6:67:77:14:d9:d5:6b:dc:61:3d:27:77:9b:bb:
8e:37:55:bf:dd:2d:ae:25:f1:c1:0f:83:30:8c:bf:12:fc:86:
a6:70:a8:34:68:6a:5b:e2:81:56:98:38:5e:07:6d:1e:dd:67:
f4:0d:dc:94:1a:88:5f:63:e8:5f:c5:25:f3:0b:39:ff:43:85:
5d:db:62:5f:b0:33:8f:e0:03:8e:de:8d:2d:43:1a:3c:50:7f:
92:ba:14:30:ac:7d:6c:5f:8c:46:ab:5f:ed:4d:36:43:b5:40:
4c:f5:b4:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:10:19 2025 by rpki-client