Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/8c7935-2eda-43ac-8d0f-799525be7215/1/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.mft
File: MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.mft (raw, json)
Hash identifier: kE9Cleh/nbqrXw05TA5FBYKxc9w3fiyN3Fa1VPwLZ4o=
Subject key identifier: DB:64:1F:B3:61:D7:6C:81:5F:1E:08:17:4A:01:D1:ED:05:A1:DE:02
Authority key identifier: 30:14:B8:C7:F5:09:E1:00:51:B0:CD:29:FD:8D:69:F2:85:50:8D:87
Certificate issuer: /CN=3014b8c7f509e10051b0cd29fd8d69f285508d87
Certificate serial: 0194BD175F1DD09317D5387416C53AA4BB1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/8c7935-2eda-43ac-8d0f-799525be7215/1/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.mft
Manifest number: 112E
Signing time: Fri 31 Jan 2025 16:00:13 +0000
Manifest this update: Fri 31 Jan 2025 16:00:13 +0000
Manifest next update: Sat 01 Feb 2025 16:00:13 +0000
Files and hashes: 1: MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.crl (hash: uBIs/jsx6EG8VyCc3mSldaBMTi01hpuTLFHHPVZ1T90=)
2: Xd6umzoHHdEiQVdMV3BPecnkdkk.roa (hash: lBwKPo2uZQdPejEMFQzj+SxghwJ68Haky7eMmtLDiQQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:5f:1d:d0:93:17:d5:38:74:16:c5:3a:a4:bb:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3014b8c7f509e10051b0cd29fd8d69f285508d87
Validity
Not Before: Jan 31 16:00:13 2025 GMT
Not After : Feb 1 16:00:13 2025 GMT
Subject: CN=db641fb361d76c815f1e08174a01d1ed05a1de02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:bf:a6:bd:37:cf:6c:2b:bd:6d:81:05:54:cf:
b2:5d:5e:5b:e8:9d:66:b8:85:9f:b9:ee:e9:ae:da:
21:de:da:ff:1d:c7:42:e0:ee:cb:d4:9d:8e:88:39:
1b:f8:78:f1:d1:64:87:cf:f0:0d:63:8e:fd:83:96:
0a:25:b1:e7:bb:bb:d3:2b:14:56:63:20:dd:f5:8b:
df:04:bf:0c:e9:3f:69:b3:02:3d:ee:19:9b:8b:75:
cd:c7:c8:56:b2:ea:cd:86:c1:8a:22:65:37:1b:37:
7f:4b:a2:64:17:1c:e3:f4:42:94:b1:cd:a1:f6:20:
42:a7:55:5b:68:8b:7d:38:97:76:29:cd:17:90:ad:
ae:fe:c3:ad:cb:44:18:48:16:4a:08:87:7d:3b:81:
39:bd:de:16:a2:d7:12:c5:13:72:8f:56:ad:1a:16:
9e:66:7e:2b:48:cf:6e:e5:da:9a:3a:65:c6:76:ca:
16:bc:77:ef:93:82:00:f8:a5:9c:ff:d4:7a:1a:d1:
64:72:44:26:18:20:22:f1:10:17:cc:fb:f1:4c:c8:
2f:45:2c:e4:d5:c9:91:ec:ac:23:da:4f:a1:40:ab:
c0:4f:56:bd:53:c7:d2:21:bf:60:4b:69:ad:c7:f9:
be:73:28:f7:54:9d:ca:2c:fb:6a:c2:21:57:6d:ae:
9b:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:64:1F:B3:61:D7:6C:81:5F:1E:08:17:4A:01:D1:ED:05:A1:DE:02
X509v3 Authority Key Identifier:
keyid:30:14:B8:C7:F5:09:E1:00:51:B0:CD:29:FD:8D:69:F2:85:50:8D:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8c7935-2eda-43ac-8d0f-799525be7215/1/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8c7935-2eda-43ac-8d0f-799525be7215/1/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:57:f5:db:9f:60:7f:74:79:13:38:b7:46:1d:bb:69:92:6c:
9d:69:32:a2:e6:19:f6:5b:a9:43:37:d3:9a:b0:3b:1b:67:5a:
e7:88:36:d5:a3:b2:52:9a:55:73:5a:6c:b9:19:c5:3a:18:87:
74:29:26:f1:2c:c1:34:84:bb:84:52:9f:0b:fa:8e:99:81:b1:
fa:82:90:4a:f1:91:47:18:cb:83:4d:03:9d:e1:7f:d2:29:cd:
27:46:cc:55:49:ac:fb:10:71:51:c8:c0:d1:3b:47:ec:47:75:
e8:f9:20:62:33:15:82:4b:a1:83:e8:a3:06:03:84:db:d8:38:
60:ab:0e:c1:6d:fc:84:9e:83:85:b7:9b:63:35:04:91:14:35:
61:ae:b5:5f:db:c2:b3:bb:de:b4:56:30:a6:dc:94:98:5c:63:
9d:3d:34:14:2f:89:15:ea:67:b1:89:aa:98:24:87:e5:c8:23:
4d:00:4f:cc:d2:3e:87:3b:b6:91:8f:e2:23:51:b3:99:44:50:
01:91:09:24:f4:57:ee:a5:eb:75:51:25:4b:a0:75:0c:09:c9:
ed:49:54:97:a2:e9:57:f6:f9:4b:0e:80:33:67:8b:c7:2a:8f:
c5:61:21:d7:74:57:10:51:de:b6:4a:30:e1:40:44:4c:33:04:
ec:09:cd:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:41:46 2025 by rpki-client