Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/b178bd-b6a5-4610-8c6a-abf4840ea607/1/x2v2t4G8-MKACKjo_d5g564xIqo.mft
File: x2v2t4G8-MKACKjo_d5g564xIqo.mft (raw, json)
Hash identifier: BSAgf3v3xlgQ+mQlxXHNtfxptkeQyJn+GeTK04Ic9kw=
Subject key identifier: FD:86:6E:86:97:DB:15:D6:3B:5F:38:8B:F1:F9:8D:23:E8:33:F2:FE
Authority key identifier: C7:6B:F6:B7:81:BC:F8:C2:80:08:A8:E8:FD:DE:60:E7:AE:31:22:AA
Certificate issuer: /CN=c76bf6b781bcf8c28008a8e8fdde60e7ae3122aa
Certificate serial: 0194BD8589E389104B34E2AA6062F580D6AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x2v2t4G8-MKACKjo_d5g564xIqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/b178bd-b6a5-4610-8c6a-abf4840ea607/1/x2v2t4G8-MKACKjo_d5g564xIqo.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 18:00:32 +0000
Manifest this update: Fri 31 Jan 2025 18:00:32 +0000
Manifest next update: Sat 01 Feb 2025 18:00:32 +0000
Files and hashes: 1: 58adO5UB1FKlEoStUB0aT9zK1OU.roa (hash: VcDtIG0g4QLm3R4L3wJoUxzRN4qEZkuyhBUiyX4ea8Q=)
2: x2v2t4G8-MKACKjo_d5g564xIqo.crl (hash: KCd5Hvk21l1X+2X0zV/8I1XnsqeyyQ75aL5/zw/fytQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:89:e3:89:10:4b:34:e2:aa:60:62:f5:80:d6:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c76bf6b781bcf8c28008a8e8fdde60e7ae3122aa
Validity
Not Before: Jan 31 18:00:32 2025 GMT
Not After : Feb 1 18:00:32 2025 GMT
Subject: CN=fd866e8697db15d63b5f388bf1f98d23e833f2fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e5:cc:62:f0:b8:88:e6:75:e6:a0:5a:0d:a9:
82:52:5f:c9:9b:42:97:07:e4:4f:08:de:81:4d:b4:
c5:db:67:65:3a:fb:af:c1:97:58:c8:16:78:d5:11:
9a:8c:b7:ec:2c:e4:bb:27:cb:4f:f6:a5:fc:1f:4e:
2d:30:23:0b:fa:35:a4:7a:89:ea:b8:49:58:40:ea:
b2:f6:b5:04:fe:ae:17:bc:10:f5:3e:27:85:5f:29:
32:a6:60:50:d0:23:47:37:f3:60:1b:08:16:31:c2:
c8:d7:4b:d9:f9:68:ac:83:fd:07:23:02:58:30:6b:
69:2e:a0:8d:4d:82:20:82:d5:c2:b5:ee:88:93:14:
f9:6c:1c:37:08:53:c1:56:2e:aa:b6:15:bb:5e:a1:
dd:d1:ef:88:8d:06:ef:54:3d:2e:59:1c:fd:95:2c:
8b:c4:92:7f:3f:ce:59:c9:2c:eb:f0:e8:3b:9b:22:
bc:2a:11:c9:82:89:44:73:f9:2a:7c:12:76:a4:a1:
50:96:22:5d:67:7a:18:d1:3e:c7:0d:eb:75:32:33:
02:9d:d1:4d:3c:5b:4a:3d:84:18:dd:76:f1:aa:b6:
2f:56:cc:89:7b:b7:5a:42:c8:5b:bb:55:f3:7d:a3:
09:73:75:78:8e:ce:db:56:4e:33:7b:37:09:f1:6f:
9d:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:86:6E:86:97:DB:15:D6:3B:5F:38:8B:F1:F9:8D:23:E8:33:F2:FE
X509v3 Authority Key Identifier:
keyid:C7:6B:F6:B7:81:BC:F8:C2:80:08:A8:E8:FD:DE:60:E7:AE:31:22:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x2v2t4G8-MKACKjo_d5g564xIqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b178bd-b6a5-4610-8c6a-abf4840ea607/1/x2v2t4G8-MKACKjo_d5g564xIqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b178bd-b6a5-4610-8c6a-abf4840ea607/1/x2v2t4G8-MKACKjo_d5g564xIqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:49:7e:51:79:8a:42:59:3f:cc:ca:f3:ff:0e:26:ad:a4:42:
36:08:fa:21:79:0c:b3:a1:75:fd:55:cf:43:8e:3e:13:6a:f7:
b2:e1:4b:cc:aa:9c:60:49:47:f9:9f:a0:e4:c7:36:1f:e7:68:
9e:b2:a4:76:4c:b8:c3:e4:5d:bf:96:6d:76:3a:de:2a:89:4d:
39:c4:3d:5f:d4:6d:1e:30:d0:ea:16:8f:dc:21:98:f8:bb:23:
75:ca:05:53:97:81:b9:9c:4d:c6:7d:aa:35:e7:ec:3b:71:d1:
e9:4f:fb:41:4a:03:78:0e:1c:c2:2d:16:0d:21:89:c7:6b:70:
8a:bb:53:c7:e6:12:46:e0:48:4d:9e:5e:a7:74:03:9d:25:42:
ba:37:ea:7a:79:38:aa:63:1d:9f:91:b4:ff:2c:24:a4:51:e2:
72:60:53:a8:a3:ae:72:17:53:f1:5e:b4:ce:12:49:9e:58:bd:
a1:5c:b5:78:60:1a:0b:12:10:0e:3d:f4:9b:74:4e:72:73:91:
b9:b8:12:69:9e:8e:f9:9f:af:7e:48:a7:92:a2:c6:6b:85:4e:
f5:88:6a:3f:51:67:be:42:a8:74:a9:7b:f1:75:ef:b5:3a:c6:
10:eb:f2:90:db:23:72:54:3e:43:1a:5f:7d:d9:b1:02:f2:e9:
82:7b:91:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:44 2025 by rpki-client