Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/MBaxDQrCGAF8dJOU5PJRnPLAUU4.mft
File: MBaxDQrCGAF8dJOU5PJRnPLAUU4.mft (raw, json)
Hash identifier: /5byNKiMwfkmjKcRYtHpVA3iXL6n5SnnllTTQUmA3IA=
Subject key identifier: 6A:DF:FA:D6:88:80:70:E5:64:6E:04:A5:8B:A4:28:E5:28:5D:FF:35
Authority key identifier: 30:16:B1:0D:0A:C2:18:01:7C:74:93:94:E4:F2:51:9C:F2:C0:51:4E
Certificate issuer: /CN=3016b10d0ac218017c749394e4f2519cf2c0514e
Certificate serial: 0194BC04FD6DBCE22D3BD15860475B6FFD3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MBaxDQrCGAF8dJOU5PJRnPLAUU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/MBaxDQrCGAF8dJOU5PJRnPLAUU4.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 11:00:30 +0000
Manifest this update: Fri 31 Jan 2025 11:00:30 +0000
Manifest next update: Sat 01 Feb 2025 11:00:30 +0000
Files and hashes: 1: HlO9ZQi1YEqVxRv4xtahO5YLBGA.roa (hash: aJ2b3cCx1ndyavIj0cgELjQKu/oO/oTwQkl8MyIO1oI=)
2: MBaxDQrCGAF8dJOU5PJRnPLAUU4.crl (hash: CrLhoCMpMUJlD9BBNBnHxNDi+DOqCsWWGB0fPRhyvK4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:fd:6d:bc:e2:2d:3b:d1:58:60:47:5b:6f:fd:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3016b10d0ac218017c749394e4f2519cf2c0514e
Validity
Not Before: Jan 31 11:00:30 2025 GMT
Not After : Feb 1 11:00:30 2025 GMT
Subject: CN=6adffad6888070e5646e04a58ba428e5285dff35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:38:43:bb:06:c1:2e:e6:d2:5d:07:b9:49:b9:
0b:16:71:44:60:c9:24:ef:09:89:04:60:23:d1:63:
83:d2:91:71:0e:5d:15:08:8a:e0:68:b1:18:38:c1:
aa:6e:8f:7d:17:7b:5f:1f:0a:33:b7:07:8f:b6:fe:
07:4d:e6:c1:9f:55:b4:ff:19:2d:e5:26:45:54:1d:
dd:8a:09:6a:fe:88:6e:18:63:31:03:0b:f0:4b:e9:
78:0f:47:47:da:be:f2:49:4f:04:89:ab:ad:f0:41:
cd:8a:4a:db:03:29:54:24:a9:5f:02:c1:5f:ed:fb:
42:77:4d:08:18:94:a0:45:90:5f:22:b3:13:92:b2:
40:27:53:e1:f8:8d:68:05:85:e3:b7:5f:42:e8:65:
ab:b9:e5:b2:c1:11:8a:b7:7f:1b:af:51:5d:48:35:
01:02:d6:37:3b:8b:71:d8:2d:1a:f9:96:bd:f7:f2:
87:30:29:d6:25:31:04:c0:61:2f:94:2e:cd:7b:6e:
3e:9a:88:13:7c:1c:dd:ef:9f:71:9d:68:78:02:47:
68:bb:d2:46:b2:f3:6e:f7:0e:3c:03:94:43:de:c6:
66:02:da:69:21:3e:9d:e8:44:10:57:a9:af:f6:ee:
bf:19:7a:3c:bf:30:6b:a3:7a:42:a6:d4:0b:c6:8d:
70:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:DF:FA:D6:88:80:70:E5:64:6E:04:A5:8B:A4:28:E5:28:5D:FF:35
X509v3 Authority Key Identifier:
keyid:30:16:B1:0D:0A:C2:18:01:7C:74:93:94:E4:F2:51:9C:F2:C0:51:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MBaxDQrCGAF8dJOU5PJRnPLAUU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/MBaxDQrCGAF8dJOU5PJRnPLAUU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/MBaxDQrCGAF8dJOU5PJRnPLAUU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:27:51:d9:dc:c0:14:71:c8:dc:97:77:26:10:45:0a:79:6e:
b8:a5:d5:98:2d:00:d8:3a:cf:82:10:ff:56:bf:cb:9a:64:46:
9f:50:75:b9:0d:5a:fa:bd:69:e5:7b:dd:8b:56:d3:6a:e8:62:
1b:1f:7c:08:6c:2e:c6:1b:ec:42:bf:c0:5b:93:52:63:be:93:
7a:c3:2c:33:bf:1d:c8:c7:97:1b:4b:1a:d6:7f:db:44:f2:f0:
dd:f9:b1:85:a3:20:bd:4c:bc:20:13:8e:54:a1:bf:07:20:59:
b4:ed:dd:3e:91:77:34:30:62:ef:c0:81:80:7d:ef:3f:eb:ea:
47:7d:d5:a7:6a:8c:c5:3a:34:62:6d:d2:03:ee:3e:95:51:df:
53:ee:dd:9b:30:81:49:bf:28:a0:17:6a:62:ab:1c:21:c9:9b:
45:eb:88:79:23:af:59:f5:e4:01:45:3d:60:a6:08:28:f7:36:
da:63:cd:17:86:d1:fe:38:60:c3:3a:9a:a2:90:fd:de:bc:a8:
46:02:31:a1:77:c1:89:45:9a:aa:bd:20:ee:ae:86:c3:b0:9c:
05:d2:0b:9a:10:79:bc:ca:0b:38:13:af:0d:e8:7e:ed:7b:ec:
88:93:06:b5:aa:fc:08:ae:2a:c8:b5:e9:14:59:b5:41:e5:03:
97:88:f5:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:39:58 2025 by rpki-client