Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/88e482-8277-4280-9f5b-8144b140edf9/1/MNZrZqOYLSCoHvIB3HVe0zU7FqQ.mft
File: MNZrZqOYLSCoHvIB3HVe0zU7FqQ.mft (raw, json)
Hash identifier: s2aaYpy1gDnIsT/6SMGMpFDeIAU5OnsQGgMSR99+DoQ=
Subject key identifier: 48:4C:BE:B3:48:00:84:8E:33:AF:6A:2B:7A:B7:1E:3E:99:18:A7:E6
Authority key identifier: 30:D6:6B:66:A3:98:2D:20:A8:1E:F2:01:DC:75:5E:D3:35:3B:16:A4
Certificate issuer: /CN=30d66b66a3982d20a81ef201dc755ed3353b16a4
Certificate serial: 0194BC3BE4A2444225EA7CAFA127407A5845
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MNZrZqOYLSCoHvIB3HVe0zU7FqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/88e482-8277-4280-9f5b-8144b140edf9/1/MNZrZqOYLSCoHvIB3HVe0zU7FqQ.mft
Manifest number: 0DA0
Signing time: Fri 31 Jan 2025 12:00:29 +0000
Manifest this update: Fri 31 Jan 2025 12:00:29 +0000
Manifest next update: Sat 01 Feb 2025 12:00:29 +0000
Files and hashes: 1: MNZrZqOYLSCoHvIB3HVe0zU7FqQ.crl (hash: F2SydwjEiicyq4dykdv71ttxe3lNYrrEkYA0NWJ7CIE=)
2: hfNN3XiVLhZTBEzmZ9kxsFWjtgU.roa (hash: rdvuWCnmeSdDSQrFfaBCbjsr2zsTzqKaLeEHczQ6fHw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:e4:a2:44:42:25:ea:7c:af:a1:27:40:7a:58:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30d66b66a3982d20a81ef201dc755ed3353b16a4
Validity
Not Before: Jan 31 12:00:29 2025 GMT
Not After : Feb 1 12:00:29 2025 GMT
Subject: CN=484cbeb34800848e33af6a2b7ab71e3e9918a7e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:e0:bc:34:94:3b:a8:92:ae:23:ba:dd:04:d7:
ea:c8:0c:a6:7a:ad:d7:92:60:cd:35:fa:c6:c3:4b:
e3:7b:d9:b6:88:37:67:9e:fb:e6:5f:8e:56:46:c6:
8d:6f:84:92:6e:00:57:64:c8:d0:22:69:10:24:5a:
1e:73:18:ee:d5:e7:b8:2c:9a:50:b8:80:c5:2d:83:
b7:01:6f:da:03:32:18:ce:5f:cf:05:04:62:bd:51:
fb:50:22:ef:1e:95:42:1d:f6:38:0b:a9:7d:5d:76:
bd:67:10:07:73:e6:a6:c3:43:bd:8f:13:d7:0d:92:
c8:2f:96:b5:73:15:d9:c8:32:b5:05:42:d3:e7:e5:
2f:f1:03:91:3f:10:00:eb:ef:10:1a:a2:4f:86:a4:
b2:33:37:cd:2f:84:63:d9:d0:f1:f7:1e:2b:4d:85:
17:6b:03:af:85:a9:48:f9:ee:b8:52:fa:20:9b:46:
40:81:6c:07:28:11:13:9d:c4:24:84:c7:f8:96:df:
87:e5:3f:1b:f3:58:0e:77:da:e2:8f:af:16:41:71:
50:c5:c2:bf:1b:0e:08:5b:da:b5:da:ed:2e:8a:b5:
1f:8b:39:d6:c2:56:73:c2:c7:27:2b:38:c1:c1:18:
85:64:92:6e:3c:1c:8e:fb:29:a4:12:cf:e9:cb:1c:
b1:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:4C:BE:B3:48:00:84:8E:33:AF:6A:2B:7A:B7:1E:3E:99:18:A7:E6
X509v3 Authority Key Identifier:
keyid:30:D6:6B:66:A3:98:2D:20:A8:1E:F2:01:DC:75:5E:D3:35:3B:16:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MNZrZqOYLSCoHvIB3HVe0zU7FqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/88e482-8277-4280-9f5b-8144b140edf9/1/MNZrZqOYLSCoHvIB3HVe0zU7FqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/88e482-8277-4280-9f5b-8144b140edf9/1/MNZrZqOYLSCoHvIB3HVe0zU7FqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:a0:33:8d:7e:ad:a2:02:45:66:5c:69:88:1e:db:99:0f:37:
37:10:c6:1f:64:c8:be:f2:09:7e:2b:f9:58:2f:24:07:fc:1c:
81:99:f3:29:eb:ea:54:88:72:55:5e:ef:82:81:30:ea:8f:da:
bb:0d:4c:1e:7b:9d:b9:eb:ea:c8:ff:1e:38:4b:91:9f:23:b7:
9f:c7:56:28:ed:08:c8:62:ed:48:36:4d:12:96:46:8e:04:24:
24:b4:52:e0:5a:09:fd:fb:1f:8c:b1:cf:fb:b1:03:5c:8e:6a:
77:6c:5b:c9:9b:68:e9:02:f5:3f:fd:56:12:67:52:37:f5:51:
52:28:90:14:d3:dc:b3:ed:ba:34:8b:c2:93:d7:db:72:fc:37:
ad:ce:3f:c5:1d:8a:d2:be:a9:2f:89:a4:c8:33:e9:b1:21:28:
c5:d6:7b:98:05:b9:8e:61:f8:f9:41:1d:4f:f5:bd:60:f3:1c:
fa:87:a3:91:86:eb:7d:75:a8:38:ec:9d:24:b9:43:ca:d9:70:
e9:b7:b4:2d:5c:57:6c:d9:80:5f:79:ca:59:d4:7c:78:84:f2:
23:70:0c:c6:48:5a:bd:eb:05:81:cf:59:f1:a6:93:d6:3e:0c:
23:9b:49:95:6c:10:10:23:a6:1f:4b:ac:58:87:0b:1e:cc:e5:
ef:ee:89:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:17:00 2025 by rpki-client