Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.mft
File: MKJ1gGSamS5B4yz4wSJF4H_5-cU.mft (raw, json)
Hash identifier: eO5tYDRGQk3sA5bDpMZpH6EZ9bi9isBheplQQj43XeM=
Subject key identifier: 56:FB:BD:26:DA:E8:E2:CB:C6:84:1D:23:41:39:48:B9:F3:29:EA:8E
Authority key identifier: 30:A2:75:80:64:9A:99:2E:41:E3:2C:F8:C1:22:45:E0:7F:F9:F9:C5
Certificate issuer: /CN=30a27580649a992e41e32cf8c12245e07ff9f9c5
Certificate serial: 0194BD1750FE5B5F452E9E815D045FC4AAC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MKJ1gGSamS5B4yz4wSJF4H_5-cU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.mft
Manifest number: 0B10
Signing time: Fri 31 Jan 2025 16:00:09 +0000
Manifest this update: Fri 31 Jan 2025 16:00:09 +0000
Manifest next update: Sat 01 Feb 2025 16:00:09 +0000
Files and hashes: 1: MKJ1gGSamS5B4yz4wSJF4H_5-cU.crl (hash: xPYVuFIaWCr6l4QCOLIzAlskgF6QW2/0i1sjXWFqOX8=)
2: WZEbVkL7G2Qj36QisnZkv8BFkNA.roa (hash: f7XKUwdOUxo0bFV2++z3NCiuNhXfpczYvfcpVS/l/Jk=)
3: yCz-ewAMqZx7lCDPn4Ya6LAQnZ4.roa (hash: biH7dwZg2HQ2zwVaqcwP5LR/5HOneIgO7AJ9Gj1riJ4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:50:fe:5b:5f:45:2e:9e:81:5d:04:5f:c4:aa:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30a27580649a992e41e32cf8c12245e07ff9f9c5
Validity
Not Before: Jan 31 16:00:09 2025 GMT
Not After : Feb 1 16:00:09 2025 GMT
Subject: CN=56fbbd26dae8e2cbc6841d23413948b9f329ea8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:fa:e0:e4:1a:a6:aa:f8:dd:c0:9e:17:9b:1d:
98:7c:92:28:ea:70:47:ce:d9:95:bd:73:6f:80:2a:
e1:50:67:0a:6f:55:87:23:20:a8:84:d9:86:13:a6:
e2:9d:98:5a:5e:04:62:8f:bc:95:7c:52:5e:66:55:
ef:c0:78:be:1b:dd:57:85:79:7c:8c:2a:36:4d:43:
f0:1d:3a:84:31:cb:8a:69:7a:06:84:b6:60:7e:fc:
fc:94:7d:0d:c1:be:2e:06:13:9a:d2:04:a1:ce:b7:
9d:b8:37:cb:e1:4b:1d:15:f6:bb:b6:84:3c:fb:cf:
48:49:5e:4c:c5:17:ad:53:87:36:03:79:3c:41:ec:
e8:4e:b9:fb:0e:c8:08:bd:65:30:1f:dc:a1:41:15:
83:51:f7:e3:d3:da:ca:45:b5:7c:d7:5b:9e:6d:91:
62:99:ab:c8:6f:bb:9f:54:f7:31:10:89:5d:eb:c0:
75:d0:08:25:f9:e0:93:cc:c3:ed:90:15:0c:43:bc:
4c:a4:88:44:00:32:91:64:ca:66:3c:20:0d:0b:59:
d0:bb:af:ae:7e:49:50:fd:b9:c0:18:39:9a:4b:5d:
57:80:fc:e2:d4:55:91:4a:a6:50:e9:36:28:1c:7d:
da:45:f9:59:14:0e:be:d1:27:bd:c6:15:35:9e:53:
66:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:FB:BD:26:DA:E8:E2:CB:C6:84:1D:23:41:39:48:B9:F3:29:EA:8E
X509v3 Authority Key Identifier:
keyid:30:A2:75:80:64:9A:99:2E:41:E3:2C:F8:C1:22:45:E0:7F:F9:F9:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MKJ1gGSamS5B4yz4wSJF4H_5-cU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:4b:ea:3d:f6:56:31:8f:cf:5c:4b:1f:67:c5:55:fa:e2:9f:
ac:82:39:80:c6:46:8c:fd:ea:9d:0f:c3:5c:ab:c9:fb:74:be:
aa:e0:a0:42:ca:79:48:21:c5:49:70:e5:33:f2:10:10:35:b0:
b9:87:a1:a0:15:fe:8e:3f:a6:20:a9:53:43:79:31:63:62:35:
12:c0:94:61:6b:dd:74:99:05:cf:a3:1b:4a:34:76:91:20:a3:
fc:12:61:b4:fe:1c:b3:38:43:60:46:7e:3c:35:d2:53:88:0a:
f9:04:b8:fe:ce:e0:4a:ce:e7:38:6f:f7:c0:f7:cb:52:ed:64:
34:2f:d0:89:9f:b3:16:1b:a9:75:ec:a8:0a:06:41:33:69:69:
87:af:77:e6:d0:e0:2b:52:fd:9f:62:ad:9a:a4:ea:de:4a:93:
ff:21:89:df:4d:9a:0f:46:43:d6:5d:f2:87:41:c6:34:68:fb:
ac:74:e3:39:71:60:47:ac:f9:b6:92:db:17:a5:1e:5f:a7:f8:
45:19:f5:f3:a7:22:65:b8:25:2d:77:e1:55:de:05:44:ab:89:
43:c4:94:15:41:ef:2d:a8:3d:7a:3c:7a:0b:80:8a:94:53:02:
f4:a2:26:1e:15:b9:a4:e7:fb:11:5c:8b:d0:e8:97:7f:be:3a:
be:f4:89:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:05:08 2025 by rpki-client