Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/db5101-015c-40c5-905b-657b3a7d9676/1/MPkNJSCtYZrDBgs5-9LCBOKaKhQ.mft
File: MPkNJSCtYZrDBgs5-9LCBOKaKhQ.mft (raw, json)
Hash identifier: uH6Z/Eag8gnRFZ1K+OU6gosCnm7+khEnor7C+0pNaYQ=
Subject key identifier: 9D:1D:6A:7E:1C:4A:B9:65:F6:90:5D:3D:92:43:FC:08:8D:22:FA:E6
Authority key identifier: 30:F9:0D:25:20:AD:61:9A:C3:06:0B:39:FB:D2:C2:04:E2:9A:2A:14
Certificate issuer: /CN=30f90d2520ad619ac3060b39fbd2c204e29a2a14
Certificate serial: 0194BD85A41EB85B349FE416B5F539FB8F1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MPkNJSCtYZrDBgs5-9LCBOKaKhQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/db5101-015c-40c5-905b-657b3a7d9676/1/MPkNJSCtYZrDBgs5-9LCBOKaKhQ.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 18:00:39 +0000
Manifest this update: Fri 31 Jan 2025 18:00:39 +0000
Manifest next update: Sat 01 Feb 2025 18:00:39 +0000
Files and hashes: 1: 9iuKUiRNNk0yJqP9x1MG2I_7d9s.roa (hash: OJC+CIaFp/mpbSmO0wI1lGEv8Ek7U6QE2MP4Wm3PDaM=)
2: MPkNJSCtYZrDBgs5-9LCBOKaKhQ.crl (hash: uV4mKXzPLDMqEqbKImIK6LZmbgIF1m4JhnwBVyLwjI0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:a4:1e:b8:5b:34:9f:e4:16:b5:f5:39:fb:8f:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30f90d2520ad619ac3060b39fbd2c204e29a2a14
Validity
Not Before: Jan 31 18:00:39 2025 GMT
Not After : Feb 1 18:00:39 2025 GMT
Subject: CN=9d1d6a7e1c4ab965f6905d3d9243fc088d22fae6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:b3:e6:5b:e7:e6:ca:9d:c1:2e:91:f2:19:30:
09:68:c9:90:d8:c6:13:63:63:89:c4:3a:62:24:9d:
7f:f4:82:44:32:ae:a9:b0:04:90:31:eb:10:17:9a:
07:41:e7:52:d5:e9:67:0b:3e:2b:e5:7f:ac:d5:74:
a3:9d:d7:32:ec:2c:37:d9:9e:f9:71:c6:1a:ee:6f:
3f:5b:aa:60:48:09:8c:ed:7e:a7:50:59:15:43:30:
d8:6b:0a:cf:c1:5c:8d:2a:eb:bf:37:f0:e2:54:7c:
95:f1:dd:ed:5c:61:a4:d1:0c:b3:8e:6b:6d:86:2e:
4d:28:24:f1:ba:6d:bc:fd:dc:90:99:f1:9b:e1:e9:
8f:ed:34:25:85:16:64:56:4a:be:85:ea:bc:5f:df:
29:ba:9a:bf:1c:b1:92:96:48:61:77:88:17:f5:47:
2a:de:c4:b6:3b:91:87:16:ca:d5:23:f6:4b:fa:90:
de:87:9b:3b:35:4c:b3:ed:78:25:db:1a:94:a7:7a:
0c:c8:1a:b5:e2:e8:37:0d:1b:fe:1d:a3:03:c1:db:
54:10:f6:21:6a:79:5c:ea:9d:41:14:c5:41:79:9a:
bd:88:cd:96:5e:74:7a:66:04:dd:83:55:79:0e:31:
9a:57:67:ae:1e:02:4a:08:ca:30:87:d0:8e:10:85:
c7:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:1D:6A:7E:1C:4A:B9:65:F6:90:5D:3D:92:43:FC:08:8D:22:FA:E6
X509v3 Authority Key Identifier:
keyid:30:F9:0D:25:20:AD:61:9A:C3:06:0B:39:FB:D2:C2:04:E2:9A:2A:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MPkNJSCtYZrDBgs5-9LCBOKaKhQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/db5101-015c-40c5-905b-657b3a7d9676/1/MPkNJSCtYZrDBgs5-9LCBOKaKhQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/db5101-015c-40c5-905b-657b3a7d9676/1/MPkNJSCtYZrDBgs5-9LCBOKaKhQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:c1:d5:81:c7:95:18:35:09:4f:60:93:c0:a0:95:b4:a3:1c:
28:91:e0:7e:d3:56:1a:19:c6:88:e4:eb:8e:63:de:b4:c2:8a:
a7:9d:5b:17:81:c1:09:aa:44:bf:fe:49:e8:9a:9b:c3:30:1d:
6e:69:a8:81:5c:ad:8d:09:31:f8:c9:59:2a:b8:52:2b:e7:30:
71:33:3a:e8:b4:1f:07:f1:eb:59:dd:c0:37:5a:dd:8e:e2:d4:
b0:3d:79:52:7b:89:ea:f3:f2:4e:ec:96:b7:aa:bd:59:2a:9b:
84:b7:e0:a3:86:1b:61:66:2d:6d:c2:77:02:11:a1:0e:79:32:
39:8a:8d:dc:fa:4f:90:10:63:49:4a:57:47:cd:82:16:7d:ee:
34:c9:31:10:79:4e:07:4a:3b:bc:fa:55:94:8a:7d:cc:8b:84:
ac:b5:84:d8:63:c1:b6:08:84:6b:30:7c:c0:98:29:3c:e1:84:
cc:ab:b1:7d:1a:5d:50:d2:69:63:f4:e7:9c:d0:f1:87:3c:08:
f7:d6:0c:b7:9e:c3:ed:3f:52:9f:f9:3d:41:e9:f9:73:15:d4:
db:57:3e:6c:63:12:d2:12:5f:8c:ab:29:25:75:a8:c8:87:9b:
43:a9:72:3e:5f:31:ee:f0:d7:0d:c7:83:d8:1f:3d:28:3b:52:
32:85:3f:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:55:58 2025 by rpki-client