Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/58a4e1-dfc1-4d81-b2c6-216597e03f11/1/MXBn6Bphoh_cFIWY72ull1f6A4A.mft
File: MXBn6Bphoh_cFIWY72ull1f6A4A.mft (raw, json)
Hash identifier: tXhFK0KQiYh+lEmpb2ZTmFtVjZ7WE+aJ5VjkBzfTAGU=
Subject key identifier: 52:42:AF:02:A7:3B:22:E7:DA:E9:58:BA:AF:A6:6C:E3:23:9A:81:76
Authority key identifier: 31:70:67:E8:1A:61:A2:1F:DC:14:85:98:EF:6B:A5:97:57:FA:03:80
Certificate issuer: /CN=317067e81a61a21fdc148598ef6ba59757fa0380
Certificate serial: 0194BC3C2280BE08711C22333165EF32A0DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MXBn6Bphoh_cFIWY72ull1f6A4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/58a4e1-dfc1-4d81-b2c6-216597e03f11/1/MXBn6Bphoh_cFIWY72ull1f6A4A.mft
Manifest number: 06B1
Signing time: Fri 31 Jan 2025 12:00:45 +0000
Manifest this update: Fri 31 Jan 2025 12:00:45 +0000
Manifest next update: Sat 01 Feb 2025 12:00:45 +0000
Files and hashes: 1: 1kHURLGCgDrhi9IHuZm9V5RPr7o.roa (hash: QOJumlfbHeKteqZFgdexa+53Le46L9xrcfm0BrIrj/w=)
2: MXBn6Bphoh_cFIWY72ull1f6A4A.crl (hash: wsOda1l/gWeDLiNNfGiLTgR4KCVbQ4/dMCrNuK5XnHw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:22:80:be:08:71:1c:22:33:31:65:ef:32:a0:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=317067e81a61a21fdc148598ef6ba59757fa0380
Validity
Not Before: Jan 31 12:00:45 2025 GMT
Not After : Feb 1 12:00:45 2025 GMT
Subject: CN=5242af02a73b22e7dae958baafa66ce3239a8176
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:7d:d8:b7:84:8e:1d:00:03:94:66:3e:e8:0e:
3a:51:c7:50:79:34:ef:ce:17:f0:25:be:ea:fe:12:
fa:60:4e:4b:4e:db:9f:9f:74:b0:f7:16:36:2c:d5:
c6:31:1b:8f:a2:9a:4d:e6:a7:58:ac:84:dc:97:b5:
ef:1d:56:1b:d0:8c:7f:7e:eb:a1:3f:2d:35:bb:39:
59:76:fe:9a:d5:ae:7b:a5:8a:7e:b2:de:6a:7d:08:
88:eb:56:c9:09:5c:45:35:ea:8b:a4:f7:b6:98:60:
80:b8:0d:e3:bd:c4:3e:8c:ce:41:3c:3a:5c:c3:d9:
12:dc:9a:fa:55:67:ce:d6:83:e0:d3:ae:56:fc:04:
08:23:4d:ba:55:ca:23:c2:3d:69:c8:6f:24:04:69:
2e:9d:f5:a3:93:bb:0f:cc:07:0d:bc:d2:05:17:25:
4b:e2:4e:4f:3a:75:23:ff:0d:5d:c6:ef:6c:d0:58:
06:d6:d0:8b:5f:b4:1a:4a:98:94:cd:0c:3c:d3:15:
1a:f1:6c:33:03:4d:12:25:b4:5f:4b:3b:43:9a:79:
d5:48:ff:23:19:56:8f:65:94:ae:71:12:5d:2a:c3:
fb:c9:e1:94:81:ad:78:5e:9d:0f:4d:4d:06:ce:f0:
b8:3a:2f:a5:16:9d:b5:79:67:cd:5e:71:03:7d:6b:
c0:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:42:AF:02:A7:3B:22:E7:DA:E9:58:BA:AF:A6:6C:E3:23:9A:81:76
X509v3 Authority Key Identifier:
keyid:31:70:67:E8:1A:61:A2:1F:DC:14:85:98:EF:6B:A5:97:57:FA:03:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MXBn6Bphoh_cFIWY72ull1f6A4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/58a4e1-dfc1-4d81-b2c6-216597e03f11/1/MXBn6Bphoh_cFIWY72ull1f6A4A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/58a4e1-dfc1-4d81-b2c6-216597e03f11/1/MXBn6Bphoh_cFIWY72ull1f6A4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:45:07:b5:31:40:15:67:58:61:05:dc:8b:f5:68:74:04:82:
b8:31:23:3a:32:fb:64:31:ac:26:85:16:3b:03:dc:35:54:bf:
29:31:51:92:4f:9d:07:e4:fc:18:95:eb:82:1c:ab:0e:df:c0:
08:04:5b:ef:e4:fc:2d:47:cd:20:c4:bf:8b:3e:96:da:83:4b:
48:a7:92:8d:de:4a:17:06:b9:21:11:88:bc:b2:87:c8:3c:00:
24:4b:50:ec:c8:d7:1b:fe:81:f7:bf:b1:cf:96:08:61:15:7d:
aa:63:b4:e8:82:79:6f:c0:09:41:ff:39:55:83:52:2a:5c:dd:
45:88:7f:28:98:3c:b0:73:9f:96:cc:8f:eb:76:ed:cd:6c:53:
a0:14:ba:3d:4a:0b:b6:00:42:3f:20:b4:59:b1:86:f5:f3:da:
3b:90:3b:87:d3:5f:fa:c4:6f:e0:db:58:a8:27:7f:61:9b:85:
28:da:79:6e:b3:77:88:fe:22:3c:f7:d3:56:24:49:4c:17:e5:
bc:13:c1:98:d9:9a:f4:30:70:e6:06:5f:46:97:5c:56:8e:98:
5e:fe:f0:81:c7:00:74:57:e0:f8:57:c6:40:5f:ed:54:80:0c:
11:84:31:dc:11:97:51:3c:3e:48:e0:f9:f6:32:0a:b5:b0:d2:
bd:34:f2:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:26:06 2025 by rpki-client