
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/bf2bb4-36d3-4b17-8bcf-44a957132639/1/MpgFa4Bqe3zBYzNF3FWDakWiRMc.mft
File: MpgFa4Bqe3zBYzNF3FWDakWiRMc.mft (raw, json)
Hash identifier: 4l4AxYkNmYjMFCXftLe0FprL4ORn3ao+xHLp/QEJYvA=
Subject key identifier: B8:05:C7:CC:95:D3:2B:1F:08:26:B6:6A:F3:C4:9A:91:C7:AA:6A:1C
Authority key identifier: 32:98:05:6B:80:6A:7B:7C:C1:63:33:45:DC:55:83:6A:45:A2:44:C7
Certificate issuer: /CN=3298056b806a7b7cc1633345dc55836a45a244c7
Certificate serial: 0194BD1800798BDB7397384BB666FF6A7A09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MpgFa4Bqe3zBYzNF3FWDakWiRMc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/bf2bb4-36d3-4b17-8bcf-44a957132639/1/MpgFa4Bqe3zBYzNF3FWDakWiRMc.mft
Manifest number: 13BE
Signing time: Fri 31 Jan 2025 16:00:54 +0000
Manifest this update: Fri 31 Jan 2025 16:00:54 +0000
Manifest next update: Sat 01 Feb 2025 16:00:54 +0000
Files and hashes: 1: MpgFa4Bqe3zBYzNF3FWDakWiRMc.crl (hash: Sy+688YqQNGnzjbT3GAyH+27fR2qIpfIB3SCmzmES4Q=)
2: wnCF8G6ZZGnR9zgGNXBDzudbf2o.roa (hash: Wo5vjTxSHNPOFI8oUhIjkfhiLwT8LICLQf6Pc8oi+dU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:18:00:79:8b:db:73:97:38:4b:b6:66:ff:6a:7a:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3298056b806a7b7cc1633345dc55836a45a244c7
Validity
Not Before: Jan 31 16:00:54 2025 GMT
Not After : Feb 1 16:00:54 2025 GMT
Subject: CN=b805c7cc95d32b1f0826b66af3c49a91c7aa6a1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:07:59:9a:78:e1:cf:90:c8:ab:01:da:b7:64:
4d:42:ab:04:9a:6c:3f:51:48:28:0b:67:67:9e:12:
a3:2d:55:aa:c3:d8:cf:18:99:09:0e:0f:e8:2c:c6:
d9:39:09:76:12:73:55:41:a2:f1:80:5d:1b:b9:0d:
de:7e:f7:a5:bc:13:16:96:c1:9a:3e:52:60:26:e0:
29:ce:2c:05:d3:76:f6:c9:70:34:11:50:5d:29:ea:
5f:b2:e0:d7:91:41:0f:ee:46:a8:b2:d3:2b:c5:d6:
1b:0d:12:91:05:8c:33:94:6a:d0:d2:29:b5:38:9f:
67:e3:b1:fe:ef:66:9f:34:1d:8f:f2:17:0b:d2:2c:
9f:24:15:74:c6:44:bd:6f:82:b5:f8:45:3b:c3:97:
dc:e0:f9:d1:76:30:23:fc:1d:23:16:3b:40:8d:bb:
42:6e:57:cb:23:0a:b4:be:e2:ae:86:25:ed:33:bd:
16:4e:59:e7:5e:5f:a1:97:44:df:8b:32:ca:58:53:
99:ac:2b:98:24:fb:9f:56:a0:c2:74:e2:06:56:44:
1f:48:b0:a5:2a:e8:b7:b4:9a:5d:af:ec:b5:b2:60:
2b:44:10:67:e7:1e:bd:78:e0:a1:e3:ee:ef:ab:ab:
39:a3:92:40:7b:a5:69:93:16:ec:cd:3c:10:45:7b:
ae:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:05:C7:CC:95:D3:2B:1F:08:26:B6:6A:F3:C4:9A:91:C7:AA:6A:1C
X509v3 Authority Key Identifier:
keyid:32:98:05:6B:80:6A:7B:7C:C1:63:33:45:DC:55:83:6A:45:A2:44:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MpgFa4Bqe3zBYzNF3FWDakWiRMc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/bf2bb4-36d3-4b17-8bcf-44a957132639/1/MpgFa4Bqe3zBYzNF3FWDakWiRMc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/bf2bb4-36d3-4b17-8bcf-44a957132639/1/MpgFa4Bqe3zBYzNF3FWDakWiRMc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:b5:e5:f7:92:8f:79:d4:57:15:e8:1a:e4:63:b7:2e:35:3d:
c1:e0:9d:7a:65:cc:7a:53:1c:b9:fa:82:28:70:49:ca:ed:ab:
25:c9:63:97:9a:45:60:07:32:4c:f3:4a:6b:c7:e0:9a:05:e6:
c1:a3:2e:15:b5:f8:9d:1a:8f:3c:02:47:81:e7:67:d7:27:3d:
83:78:92:d2:cb:b6:b4:2f:82:f8:dc:29:a9:40:77:81:19:03:
59:0d:35:d8:82:45:ee:c4:d5:b1:f3:45:06:0a:bf:f0:b3:3e:
c1:8b:b5:30:ec:97:b5:51:9c:cd:bd:d0:6c:3a:06:0c:1f:30:
e9:e8:c9:01:84:3c:58:1d:94:c5:8a:70:58:f7:99:7b:52:85:
d9:b9:d5:93:c1:b6:70:a4:0f:2c:fe:90:a0:70:8c:ca:3e:bc:
ec:da:6f:65:05:fc:2a:bc:9f:8d:de:55:79:1f:55:92:14:b9:
30:75:7c:e9:9a:e5:d3:e0:7e:d3:b9:34:61:1b:03:a2:fa:8d:
b4:54:42:79:2a:b3:76:f0:90:8a:27:21:43:76:8e:55:1f:dc:
a1:c7:27:32:47:51:6f:61:0d:a3:88:7e:d6:fc:90:56:e4:4d:
ff:54:e4:35:9d:31:ff:65:20:7e:95:1a:03:18:ca:55:ed:a5:
e0:96:ce:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:25:23 2025 by rpki-client