Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/7e4ea8-8950-4183-abc0-3382794049c2/1/MGtGjMMe86PQgayPArJx4xR1Wb8.mft
File: MGtGjMMe86PQgayPArJx4xR1Wb8.mft (raw, json)
Hash identifier: vVSXMXjZ50TyaScszK2/HJph+9WdCSKmyo46dozeDg4=
Subject key identifier: 5F:A3:67:3D:53:EA:18:DD:0B:67:E0:B5:63:F7:B0:A2:B7:B2:49:E7
Authority key identifier: 30:6B:46:8C:C3:1E:F3:A3:D0:81:AC:8F:02:B2:71:E3:14:75:59:BF
Certificate issuer: /CN=306b468cc31ef3a3d081ac8f02b271e3147559bf
Certificate serial: 0194BC72C984B573A7AC573C6E786E00BDEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MGtGjMMe86PQgayPArJx4xR1Wb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/7e4ea8-8950-4183-abc0-3382794049c2/1/MGtGjMMe86PQgayPArJx4xR1Wb8.mft
Manifest number: 08E6
Signing time: Fri 31 Jan 2025 13:00:26 +0000
Manifest this update: Fri 31 Jan 2025 13:00:26 +0000
Manifest next update: Sat 01 Feb 2025 13:00:26 +0000
Files and hashes: 1: MGtGjMMe86PQgayPArJx4xR1Wb8.crl (hash: frqYVoZQbG4eMXETMLuFQV0ezvoFmUp01qe3cchGddo=)
2: zCf3OK6AbL-GLEVW2m2fiyVZR2o.roa (hash: T9wprypvgjd5UjKaL97Qh7s/fP7I922vE5XInqdd1G4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:c9:84:b5:73:a7:ac:57:3c:6e:78:6e:00:bd:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=306b468cc31ef3a3d081ac8f02b271e3147559bf
Validity
Not Before: Jan 31 13:00:26 2025 GMT
Not After : Feb 1 13:00:26 2025 GMT
Subject: CN=5fa3673d53ea18dd0b67e0b563f7b0a2b7b249e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:69:48:8c:fb:62:47:2c:9f:8b:ae:03:a1:e8:
da:f8:c2:6f:5b:aa:c9:a6:df:b9:f3:dd:fe:0e:3e:
c7:f1:74:ac:9d:b0:e9:a9:a0:d7:bd:27:06:46:f6:
7e:bc:c9:aa:80:16:f3:b6:bb:18:65:95:0c:e1:db:
24:87:cf:76:25:ea:45:0d:fb:14:af:b0:98:9d:ad:
de:25:e2:00:2a:cc:6b:c2:c9:26:1d:c7:fe:10:2d:
87:e6:1c:51:53:ff:17:6e:e9:f3:fd:a0:74:92:09:
5f:6e:bb:84:9f:fa:3c:6e:43:7c:f0:24:8a:3b:c0:
08:b2:aa:c7:21:3c:eb:6d:28:dd:eb:91:25:73:67:
f6:3e:01:28:a0:05:76:22:b8:b3:42:ee:12:f5:a8:
9c:2e:a3:2a:cc:64:10:c1:60:0a:ef:f3:45:f0:6b:
5f:b6:84:87:e8:37:0b:85:6f:f0:2a:0c:05:7c:54:
0b:ed:17:2c:d6:78:e7:9f:d7:88:ce:3b:ca:6a:1d:
4d:d2:38:f0:d5:4a:9f:7b:ad:b6:d3:7f:ca:d4:f1:
f7:b3:e9:48:9b:63:4b:86:4b:68:9f:cc:7c:6d:48:
ec:23:c6:50:d6:3b:17:1c:16:06:54:93:7f:a2:b7:
a1:4c:2b:06:06:3c:4a:0f:1b:58:b1:b6:92:a3:b4:
61:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:A3:67:3D:53:EA:18:DD:0B:67:E0:B5:63:F7:B0:A2:B7:B2:49:E7
X509v3 Authority Key Identifier:
keyid:30:6B:46:8C:C3:1E:F3:A3:D0:81:AC:8F:02:B2:71:E3:14:75:59:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGtGjMMe86PQgayPArJx4xR1Wb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7e4ea8-8950-4183-abc0-3382794049c2/1/MGtGjMMe86PQgayPArJx4xR1Wb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7e4ea8-8950-4183-abc0-3382794049c2/1/MGtGjMMe86PQgayPArJx4xR1Wb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:96:ce:99:8a:74:ee:e8:af:38:31:8c:d3:14:e8:5c:01:b7:
0b:c5:4a:31:78:d5:4e:1a:91:14:fd:cc:3a:3c:db:66:c4:3c:
1c:cb:06:7a:9e:28:70:82:12:2b:e6:8f:6e:ef:5b:fc:cc:82:
6b:41:2c:1a:9e:91:ca:b9:c5:12:e3:d2:b8:d2:e0:30:02:d4:
8a:27:11:34:60:f0:53:48:1b:19:54:f1:af:4e:1f:c1:c6:54:
07:09:96:96:37:87:18:fd:d1:f2:14:c7:37:ab:3d:2b:ee:45:
7b:d6:ef:4c:c1:ec:62:61:34:c7:a8:20:bc:e2:0d:2a:b2:08:
9d:5b:8c:e5:89:a2:8a:c4:c4:eb:7d:6a:d6:0e:b9:7a:41:9a:
1f:51:ab:1a:eb:fd:05:9f:c8:2e:06:45:9b:ce:5f:c8:d9:82:
de:ec:65:63:d4:e8:2d:8c:64:0d:4b:6d:85:0e:6e:74:32:4b:
2c:7f:61:29:1a:4d:e9:5d:45:09:e7:dd:3d:34:60:b6:91:f7:
13:7c:b4:c8:af:8b:e9:c4:ef:0e:d3:25:fb:b5:76:d9:94:32:
d7:39:ec:6b:27:bc:15:a7:33:a0:cb:1b:10:d5:17:5d:1b:ee:
e1:03:90:1c:04:92:8d:ce:a4:cb:1f:19:a3:52:d0:2f:e2:4b:
3a:c0:f4:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:27:51 2025 by rpki-client