Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/fca2ae-25fc-444b-a868-810dc9e1aa54/1/MN0LcIUOH5iVZY7avii52NnqAXw.mft
File: MN0LcIUOH5iVZY7avii52NnqAXw.mft (raw, json)
Hash identifier: tmmcZ2UPck8POIKkfB6Dqd9PVvnEHM4gMlbakWJK2DU=
Subject key identifier: 4C:5B:17:E1:1E:9B:C1:CB:51:1A:49:34:E0:E0:D1:F9:71:BC:2A:03
Authority key identifier: 30:DD:0B:70:85:0E:1F:98:95:65:8E:DA:BE:28:B9:D8:D9:EA:01:7C
Certificate issuer: /CN=30dd0b70850e1f9895658edabe28b9d8d9ea017c
Certificate serial: 0194BD856B53CF65F26423EC7C871DC5F5D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MN0LcIUOH5iVZY7avii52NnqAXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/fca2ae-25fc-444b-a868-810dc9e1aa54/1/MN0LcIUOH5iVZY7avii52NnqAXw.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 18:00:25 +0000
Manifest this update: Fri 31 Jan 2025 18:00:25 +0000
Manifest next update: Sat 01 Feb 2025 18:00:25 +0000
Files and hashes: 1: MN0LcIUOH5iVZY7avii52NnqAXw.crl (hash: R6dorcCdJ66WLs3SS95SKQ980vV1edkZK3iVex//sI8=)
2: l-uO9C6tKcC2lkHq5_ltCjByOUs.roa (hash: TUNIXLUXFg+4nA9Zr3IEFRMFcebg5+gpL40XGW7pBfQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:6b:53:cf:65:f2:64:23:ec:7c:87:1d:c5:f5:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30dd0b70850e1f9895658edabe28b9d8d9ea017c
Validity
Not Before: Jan 31 18:00:25 2025 GMT
Not After : Feb 1 18:00:25 2025 GMT
Subject: CN=4c5b17e11e9bc1cb511a4934e0e0d1f971bc2a03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:07:1b:d2:b8:2a:a9:1d:45:98:bd:9a:f5:0a:
d0:7e:1a:59:c6:7f:81:af:ba:83:fe:c7:6d:b5:98:
21:58:1a:61:34:ef:6c:f1:d1:dd:da:50:84:fc:e7:
59:5d:d9:cb:ad:6d:e6:30:3d:44:12:b9:39:a5:d0:
99:24:b9:d2:3f:01:f9:cd:84:3f:c2:15:03:c2:45:
51:20:57:23:52:0f:f1:0e:49:30:44:e8:3d:0a:b4:
fb:0e:2f:76:42:e8:3c:0c:6f:bc:57:fe:59:96:74:
dc:9f:a1:68:1a:96:ac:9b:66:15:b3:db:89:a7:24:
66:1d:78:e9:67:52:67:b1:35:fb:b9:1c:67:b5:95:
08:7e:89:94:72:40:bb:e7:93:13:20:e6:71:51:5d:
d7:da:33:7f:2d:74:9c:ae:b0:cd:ae:c3:b5:a2:46:
75:1f:3a:bf:fb:a6:57:82:a6:be:9f:45:27:70:12:
70:49:14:90:fc:d9:52:bc:65:bd:84:a8:ed:26:8d:
38:e7:f2:cd:e3:40:79:bb:70:d1:cf:d3:1c:2d:bd:
9e:5a:ce:de:c3:e6:c1:a1:4a:e1:08:de:af:be:c9:
30:07:ba:83:a3:df:e8:63:95:29:08:a9:d6:19:cc:
26:f3:17:7e:91:26:6d:e3:16:c9:a6:66:44:34:6d:
13:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:5B:17:E1:1E:9B:C1:CB:51:1A:49:34:E0:E0:D1:F9:71:BC:2A:03
X509v3 Authority Key Identifier:
keyid:30:DD:0B:70:85:0E:1F:98:95:65:8E:DA:BE:28:B9:D8:D9:EA:01:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MN0LcIUOH5iVZY7avii52NnqAXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/fca2ae-25fc-444b-a868-810dc9e1aa54/1/MN0LcIUOH5iVZY7avii52NnqAXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/fca2ae-25fc-444b-a868-810dc9e1aa54/1/MN0LcIUOH5iVZY7avii52NnqAXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:c8:b3:26:1d:8a:b5:d5:f6:a5:d3:75:e6:c9:e0:f8:89:8e:
36:6c:95:9d:ec:fd:00:e7:ab:a6:3f:b9:5f:ec:49:bf:d6:30:
48:d7:7a:9d:62:72:0d:48:c0:57:f1:7c:bb:7b:6e:3a:40:81:
16:ed:09:84:63:73:42:80:fd:75:5d:87:af:de:a7:f8:23:83:
3b:27:a8:e1:ff:d9:e0:43:53:a3:1a:c8:94:a4:c2:a9:dd:9e:
c2:11:e8:12:5a:05:79:79:cd:a2:47:f8:b1:fc:fb:eb:ec:c0:
30:f9:36:d4:62:1f:b9:84:d1:02:5e:f1:6b:3b:35:7b:a2:85:
f2:cd:68:80:27:ef:3a:d7:95:b7:68:05:68:3f:67:f1:f4:86:
33:04:2f:84:8d:6a:a3:36:a7:65:f9:a5:d2:40:75:47:d1:48:
69:84:58:9d:bd:57:51:82:c8:1d:1b:74:97:4b:83:18:bf:6b:
1a:44:ef:b1:27:19:8a:e1:9e:39:9e:53:a5:b7:1a:c4:08:e5:
08:30:32:4c:88:c5:71:ca:62:68:ff:09:c1:45:94:b3:d7:f9:
14:0a:84:68:fb:10:1d:9c:ce:fe:37:6f:1b:5b:2a:8d:49:db:
6c:3a:ad:99:4c:00:c7:ee:d1:b9:e6:a6:a4:8d:ec:3e:8a:00:
d3:76:69:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:13 2025 by rpki-client