Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/22ad4c-0b05-474d-919f-3b540a6bc3dc/1/MMRfwxRxAoJPnS1Ud2aoCa6vJFo.mft
File: MMRfwxRxAoJPnS1Ud2aoCa6vJFo.mft (raw, json)
Hash identifier: fN1AnN4QKxrpd6Zenh2DGdnZ5IyWA+GMqde4eDj0IAA=
Subject key identifier: 76:05:89:CD:0B:8A:9C:1E:B5:18:E3:E5:55:14:19:B4:B8:42:0F:BA
Authority key identifier: 30:C4:5F:C3:14:71:02:82:4F:9D:2D:54:77:66:A8:09:AE:AF:24:5A
Certificate issuer: /CN=30c45fc3147102824f9d2d547766a809aeaf245a
Certificate serial: 0194BC3BF0FD1C452D1F03AE90B2CCE6B3DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MMRfwxRxAoJPnS1Ud2aoCa6vJFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/22ad4c-0b05-474d-919f-3b540a6bc3dc/1/MMRfwxRxAoJPnS1Ud2aoCa6vJFo.mft
Manifest number: 05D4
Signing time: Fri 31 Jan 2025 12:00:32 +0000
Manifest this update: Fri 31 Jan 2025 12:00:32 +0000
Manifest next update: Sat 01 Feb 2025 12:00:32 +0000
Files and hashes: 1: 57B-StK2AQ9sl4U1coOqd8wTgag.roa (hash: n83L+DsDXWJdoYcHoR653OskwlFSlFS/GtJPH3Goy+M=)
2: MMRfwxRxAoJPnS1Ud2aoCa6vJFo.crl (hash: g0AeFyFIj3RiO66+xwEwoI+mzGhX7rr30XpGMsNP08w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:f0:fd:1c:45:2d:1f:03:ae:90:b2:cc:e6:b3:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30c45fc3147102824f9d2d547766a809aeaf245a
Validity
Not Before: Jan 31 12:00:32 2025 GMT
Not After : Feb 1 12:00:32 2025 GMT
Subject: CN=760589cd0b8a9c1eb518e3e5551419b4b8420fba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:1e:d1:72:4d:2a:a7:91:1b:bb:1c:44:28:26:
74:d8:0d:14:2b:34:55:6f:ec:c9:67:e6:38:4e:a3:
c0:af:df:2a:be:2c:cc:a5:3d:50:0c:50:85:b2:7f:
3c:fb:f3:c2:9d:18:f4:96:79:7c:11:80:8b:b7:6b:
1a:31:45:9e:1d:7a:54:07:12:4e:21:bf:61:b3:34:
5e:d4:41:c0:ea:90:7e:cb:d5:ab:5e:60:dc:73:6d:
22:30:ed:90:6a:4d:c8:b3:a1:1d:19:9c:e1:eb:3a:
f0:ef:e1:05:11:d7:60:e4:6b:1e:f2:bd:87:a8:cd:
29:06:b6:37:74:c4:39:d4:fd:3d:90:5b:3a:38:a7:
f0:20:2e:94:18:ab:2d:0b:69:3b:c1:0c:28:be:e1:
9b:83:bd:74:1b:44:b2:c1:59:34:bf:c2:14:25:91:
f0:84:57:a0:49:46:b6:c4:e0:ac:1f:18:01:bc:5e:
4c:3c:bf:4b:ae:ae:e4:fa:67:59:44:a6:ed:01:1d:
3b:e1:12:e3:ca:ac:97:ca:85:8a:04:bd:28:57:99:
08:0d:62:7e:23:2e:a6:4f:86:21:58:ac:04:0a:14:
57:27:16:09:9c:78:d0:77:d2:24:bd:ce:18:ac:26:
31:58:56:2d:7a:b3:76:9c:8f:4f:91:19:99:77:db:
21:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:05:89:CD:0B:8A:9C:1E:B5:18:E3:E5:55:14:19:B4:B8:42:0F:BA
X509v3 Authority Key Identifier:
keyid:30:C4:5F:C3:14:71:02:82:4F:9D:2D:54:77:66:A8:09:AE:AF:24:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMRfwxRxAoJPnS1Ud2aoCa6vJFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/22ad4c-0b05-474d-919f-3b540a6bc3dc/1/MMRfwxRxAoJPnS1Ud2aoCa6vJFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/22ad4c-0b05-474d-919f-3b540a6bc3dc/1/MMRfwxRxAoJPnS1Ud2aoCa6vJFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:74:a1:76:cf:c9:11:11:96:b6:66:49:d6:69:ea:9a:60:c2:
bc:3f:35:5c:a6:a2:17:02:59:cf:d1:44:ef:88:56:80:f8:be:
29:59:b5:51:de:89:83:06:68:c1:1c:eb:08:58:d9:64:61:9f:
dc:53:b8:88:37:5b:3b:49:69:8c:be:d2:7c:a8:81:56:1d:75:
ad:a5:9d:7f:94:02:04:54:9f:3e:91:b6:5f:9f:19:21:4f:b4:
47:ce:c2:5c:d0:eb:96:9e:21:b8:2d:4c:95:4e:34:c9:c2:e3:
80:b3:2e:90:ec:ad:a9:6c:bb:d4:e0:0d:bf:97:c0:eb:55:09:
cc:18:67:ab:d5:ec:8c:17:9b:38:74:2e:80:62:7e:78:12:18:
be:c0:26:51:59:7e:12:08:68:7b:29:f1:c2:fb:1c:70:d3:a3:
80:19:b7:4d:58:51:aa:c9:14:07:b0:55:16:41:93:f3:4b:cd:
35:17:c3:6d:80:e6:92:8c:bc:3f:28:26:cb:7d:7f:3d:8f:98:
7e:37:52:70:71:e1:e2:d1:6a:c6:ed:5b:73:6a:f5:b1:9d:8d:
ea:07:3d:21:38:8e:9b:12:67:fe:08:89:73:2a:bf:1b:95:8f:
e7:5f:ed:05:5d:f8:13:71:de:f8:56:59:ea:06:05:33:f8:50:
1a:f4:07:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:37:42 2025 by rpki-client