Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/8fc395-b674-4137-bc75-9bbd1eebe33e/1/MR-FGI0IL9VkC1w_4SIfYMUB7bU.mft
File: MR-FGI0IL9VkC1w_4SIfYMUB7bU.mft (raw, json)
Hash identifier: 3SerQ+jNTky0ecdkaL6vOdRr3dUnsRSzq/2Ls/3w/Bc=
Subject key identifier: FF:AE:6B:F4:C5:FE:D6:6E:0C:F8:EC:89:6A:60:BC:6C:03:98:57:AC
Authority key identifier: 31:1F:85:18:8D:08:2F:D5:64:0B:5C:3F:E1:22:1F:60:C5:01:ED:B5
Certificate issuer: /CN=311f85188d082fd5640b5c3fe1221f60c501edb5
Certificate serial: 0194BD4EC6E4AC4B3D7FFEC088EAA2412647
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MR-FGI0IL9VkC1w_4SIfYMUB7bU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/8fc395-b674-4137-bc75-9bbd1eebe33e/1/MR-FGI0IL9VkC1w_4SIfYMUB7bU.mft
Manifest number: 10A5
Signing time: Fri 31 Jan 2025 17:00:44 +0000
Manifest this update: Fri 31 Jan 2025 17:00:44 +0000
Manifest next update: Sat 01 Feb 2025 17:00:44 +0000
Files and hashes: 1: 1-VHrNTKPE5li_5D6_S7bqwdp74.roa (hash: D8+eyIa/n1dX91YGJmeaTQ892LZ6O4dV4y7sAsmFXOY=)
2: MR-FGI0IL9VkC1w_4SIfYMUB7bU.crl (hash: knpmgocTdXOCLCeXm3TZH22t5ZI2Cg9/cPCs3dU2so8=)
3: aJNwYmFgr6ViKkuqW5xEof9PXUo.roa (hash: G3zXA4vf4Y9OKHnEoVuD2Dc38Mxm/gXmn8/iv6aZLz0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:c6:e4:ac:4b:3d:7f:fe:c0:88:ea:a2:41:26:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=311f85188d082fd5640b5c3fe1221f60c501edb5
Validity
Not Before: Jan 31 17:00:44 2025 GMT
Not After : Feb 1 17:00:44 2025 GMT
Subject: CN=ffae6bf4c5fed66e0cf8ec896a60bc6c039857ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:7d:11:b8:84:38:b8:81:ac:02:9c:e5:aa:40:
e3:6e:00:de:c6:2d:4b:d0:f7:6f:5d:fe:96:1d:ef:
ce:00:3b:be:6d:1e:49:45:53:23:2d:9f:e5:f3:6b:
63:46:a5:13:c3:d3:f6:d6:c0:7b:9d:ed:1d:7f:f6:
c7:21:ff:30:b7:7d:b3:09:1c:75:07:d6:24:a8:5d:
b5:15:cf:01:7f:ea:a9:ba:7f:6c:bc:98:bc:8d:28:
27:ca:cd:6f:d8:87:4a:7a:71:26:49:9c:11:db:b4:
45:89:eb:cd:59:d4:c6:df:74:c5:83:21:9d:1f:7c:
3a:ab:32:d4:88:8d:96:59:c3:a1:3f:08:a1:69:b6:
01:de:56:74:8e:a2:73:41:89:be:81:d9:11:d6:ef:
47:9f:ee:72:f8:f3:92:82:01:dd:15:9b:05:aa:3b:
0c:c2:29:ae:cb:aa:91:ca:12:1e:44:0a:70:f8:d6:
c1:53:ca:97:b3:a7:13:f9:61:37:7c:27:54:51:7f:
c5:a2:8a:e5:dd:f9:89:df:cf:4c:8c:53:22:57:46:
98:00:c5:de:2b:56:43:a5:6f:59:4b:fd:e3:6b:07:
1e:25:ba:df:b3:d6:c3:51:b1:2a:52:30:d1:4c:a7:
81:ab:6b:5a:04:00:9f:70:55:5f:6f:48:03:72:25:
e4:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:AE:6B:F4:C5:FE:D6:6E:0C:F8:EC:89:6A:60:BC:6C:03:98:57:AC
X509v3 Authority Key Identifier:
keyid:31:1F:85:18:8D:08:2F:D5:64:0B:5C:3F:E1:22:1F:60:C5:01:ED:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MR-FGI0IL9VkC1w_4SIfYMUB7bU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/8fc395-b674-4137-bc75-9bbd1eebe33e/1/MR-FGI0IL9VkC1w_4SIfYMUB7bU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/8fc395-b674-4137-bc75-9bbd1eebe33e/1/MR-FGI0IL9VkC1w_4SIfYMUB7bU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:37:b2:6f:04:1a:c4:7a:2b:b5:68:9e:e1:d8:b6:d9:04:3f:
42:a8:36:9e:8e:96:ea:d2:66:78:48:d6:c6:24:37:88:50:de:
2e:c2:54:33:55:c9:d6:55:f8:6c:84:e6:78:b0:21:09:22:f8:
60:57:cd:71:b9:e1:b4:f3:7f:31:57:ab:4c:45:f8:2e:80:b5:
9f:fa:f1:d2:b4:91:3b:b6:34:77:4b:f6:dd:dc:25:21:16:9a:
4e:16:8d:20:f7:45:8e:69:63:e5:95:9d:e9:a6:1e:b5:c1:f4:
47:a6:39:ab:08:0f:f6:e6:73:ae:2a:36:8b:c1:12:10:19:9d:
2f:01:ad:3c:74:16:ba:ea:b2:b2:7e:06:53:75:b7:e1:12:3f:
e2:6f:dc:fa:b6:be:71:39:85:c5:5d:a3:3b:1e:e6:b1:04:55:
9e:2a:9b:2f:ef:b4:ce:46:8c:32:b1:01:f8:da:de:f9:d7:fd:
35:68:fd:be:44:0c:fb:d8:3e:49:7d:f9:a2:8f:eb:cb:c8:39:
2b:8a:bb:d7:0d:59:e0:8c:8f:13:48:9f:7f:f2:92:50:ac:f5:
72:35:c8:07:9e:f3:d2:98:29:cd:48:ff:01:52:3c:5c:a3:55:
b0:bf:53:d4:54:05:c5:9f:a8:b5:d7:65:df:ff:f6:ff:f3:ec:
37:b4:6a:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:51:56 2025 by rpki-client