Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/adc0fe-a24f-4736-afb8-796b38796f69/1/MPCPhA4xfpUgW6E0l9nbxzd7nlc.mft
File: MPCPhA4xfpUgW6E0l9nbxzd7nlc.mft (raw, json)
Hash identifier: 3EaJvnzNJhNRmShVMvQtIkOuHAOHKTiiz5cUitwDi+M=
Subject key identifier: 2D:13:A6:03:AC:BC:7C:E5:4D:2A:69:36:6F:AF:8C:E9:6D:25:C0:42
Authority key identifier: 30:F0:8F:84:0E:31:7E:95:20:5B:A1:34:97:D9:DB:C7:37:7B:9E:57
Certificate issuer: /CN=30f08f840e317e95205ba13497d9dbc7377b9e57
Certificate serial: 0194BD85B59EB1396F569C9F248F1CAD74E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MPCPhA4xfpUgW6E0l9nbxzd7nlc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/adc0fe-a24f-4736-afb8-796b38796f69/1/MPCPhA4xfpUgW6E0l9nbxzd7nlc.mft
Manifest number: 04A6
Signing time: Fri 31 Jan 2025 18:00:44 +0000
Manifest this update: Fri 31 Jan 2025 18:00:44 +0000
Manifest next update: Sat 01 Feb 2025 18:00:44 +0000
Files and hashes: 1: MPCPhA4xfpUgW6E0l9nbxzd7nlc.crl (hash: cbe2G8RGQyggmvkWyG/7G02W2diHiT7NWx7O87k1U1U=)
2: w63CtVkaTB-I3bLthiRIKcHJ1z0.roa (hash: PphDOFm6VhjC/oLMpXqjasemzNyOPtAOJruxm2WGQGk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:b5:9e:b1:39:6f:56:9c:9f:24:8f:1c:ad:74:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30f08f840e317e95205ba13497d9dbc7377b9e57
Validity
Not Before: Jan 31 18:00:44 2025 GMT
Not After : Feb 1 18:00:44 2025 GMT
Subject: CN=2d13a603acbc7ce54d2a69366faf8ce96d25c042
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:f0:af:4a:ef:0b:61:11:c3:73:40:c9:ec:08:
10:e6:67:df:46:ea:39:b1:ac:4f:28:59:bd:6a:a6:
fd:90:94:db:a4:5b:b1:5d:a1:6b:29:1c:57:4f:f9:
3a:a1:d2:41:17:6b:22:03:96:fd:46:e0:09:fa:14:
c9:5f:35:83:6e:73:86:e0:1c:a2:87:0f:33:3c:35:
72:82:98:50:96:6d:41:b6:46:86:6d:44:90:59:e0:
00:b1:8b:60:62:54:9a:10:d9:da:a4:d7:eb:2b:3a:
74:0c:ed:e0:fa:f3:97:cf:d8:7d:e4:41:cd:29:52:
64:eb:55:f4:d9:70:6b:07:16:86:e3:1e:7d:a2:8f:
30:28:64:b6:1e:52:35:a8:71:b5:c9:fc:fa:72:69:
7b:88:6d:e8:a4:9a:1e:20:2a:b3:f8:91:d6:f1:74:
b6:e9:49:ed:44:68:33:93:83:1e:8d:fe:d7:8b:65:
a3:0c:49:9b:1c:1f:a7:1d:95:b2:cb:ad:d3:57:00:
94:dc:85:67:f0:cf:b3:a5:79:f0:7a:c1:84:75:62:
11:86:b5:81:ef:28:1e:96:29:3b:c9:8a:d9:8f:54:
f7:98:97:f5:d3:81:8b:f2:07:4c:4e:b5:ce:a7:2f:
87:03:78:d8:be:65:15:35:7a:db:91:80:25:33:56:
5f:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:13:A6:03:AC:BC:7C:E5:4D:2A:69:36:6F:AF:8C:E9:6D:25:C0:42
X509v3 Authority Key Identifier:
keyid:30:F0:8F:84:0E:31:7E:95:20:5B:A1:34:97:D9:DB:C7:37:7B:9E:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MPCPhA4xfpUgW6E0l9nbxzd7nlc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/adc0fe-a24f-4736-afb8-796b38796f69/1/MPCPhA4xfpUgW6E0l9nbxzd7nlc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/adc0fe-a24f-4736-afb8-796b38796f69/1/MPCPhA4xfpUgW6E0l9nbxzd7nlc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:f7:98:ed:1a:b2:b8:31:9b:a6:21:2c:9b:e1:7d:c0:07:bd:
4e:5e:ce:de:44:88:47:44:96:3e:78:70:9a:99:47:bb:ad:34:
9c:42:40:46:b0:bd:77:b8:7b:ed:7c:f9:b6:66:ea:06:92:79:
2c:38:36:73:d9:1d:78:71:15:86:ef:8e:20:ca:65:b1:b4:8b:
24:ed:fe:5a:45:e9:7b:8e:8a:20:6a:db:c0:82:4f:10:a6:3d:
5c:5c:cd:18:98:9b:c5:5d:16:3e:cb:26:a7:fc:42:8c:4b:ba:
ac:26:0a:8f:9b:0c:9c:d8:e8:f1:07:ed:24:c5:46:19:5d:49:
65:90:cc:4c:f8:bd:b4:c2:77:11:1e:79:d8:05:88:81:a0:73:
71:14:ff:28:53:25:4b:77:2e:10:3e:0e:63:98:ff:63:88:81:
50:c7:34:3a:ca:3a:23:e2:29:be:16:f2:09:56:42:78:af:07:
ec:c1:14:cd:45:c9:61:51:a0:ab:55:e2:af:6c:96:e7:b1:cb:
24:ca:7c:0e:63:76:d0:84:41:0a:b6:fb:77:9f:c2:b6:a6:f4:
5c:c4:d3:3d:2e:6c:80:fe:67:a4:1b:ec:ea:ca:14:c5:0d:c3:
fa:6a:4d:4a:07:2e:f8:5e:ff:a6:3c:2c:ac:0e:64:88:54:53:
0d:1c:9f:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:52:55 2025 by rpki-client