Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/942022-4fb3-461d-b456-1526cb9abf9b/1/MAd3w7RBRP0wVr9LhFRQy3-rnC0.mft
File: MAd3w7RBRP0wVr9LhFRQy3-rnC0.mft (raw, json)
Hash identifier: cUPY3Oi0qgDPFrjl9pKGrA6Jv/zbi/3P42ECmMO/eSk=
Subject key identifier: BA:76:59:16:A9:7C:DD:A8:4B:F5:08:94:E0:7D:C0:E5:C9:37:84:AE
Authority key identifier: 30:07:77:C3:B4:41:44:FD:30:56:BF:4B:84:54:50:CB:7F:AB:9C:2D
Certificate issuer: /CN=300777c3b44144fd3056bf4b845450cb7fab9c2d
Certificate serial: 0194BC04D9E3BDB45F24DECF46A5A51A9AC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MAd3w7RBRP0wVr9LhFRQy3-rnC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/942022-4fb3-461d-b456-1526cb9abf9b/1/MAd3w7RBRP0wVr9LhFRQy3-rnC0.mft
Manifest number: 0FC0
Signing time: Fri 31 Jan 2025 11:00:21 +0000
Manifest this update: Fri 31 Jan 2025 11:00:21 +0000
Manifest next update: Sat 01 Feb 2025 11:00:21 +0000
Files and hashes: 1: BBdbuotjTMjXRl3JAeP7HEvXWvI.roa (hash: oe7eC03oYJfwYH0zG5KTjbcXBldNHb2+R11az4Gn4S0=)
2: MAd3w7RBRP0wVr9LhFRQy3-rnC0.crl (hash: XzE4JGTQOk698XUvTAC3maqFTv6AQ2MXI/dVWtoIvCA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:d9:e3:bd:b4:5f:24:de:cf:46:a5:a5:1a:9a:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=300777c3b44144fd3056bf4b845450cb7fab9c2d
Validity
Not Before: Jan 31 11:00:21 2025 GMT
Not After : Feb 1 11:00:21 2025 GMT
Subject: CN=ba765916a97cdda84bf50894e07dc0e5c93784ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e4:8c:da:53:12:96:96:17:f1:7d:8e:b8:68:
0d:db:91:21:16:77:2c:d3:de:ef:7f:56:9c:e1:e1:
75:a5:ff:44:2a:be:0c:fe:b0:ae:fd:7e:6b:a9:c9:
7b:dd:e6:57:71:19:a1:e7:92:dc:54:be:69:ae:4f:
07:f3:05:78:6b:73:54:f8:5e:71:9a:b4:d9:e8:8d:
60:5c:f6:bc:63:e1:31:03:e3:8d:8c:5e:09:70:ef:
a2:a3:2b:42:10:fe:e9:3a:0f:81:67:26:17:41:bd:
bf:01:55:8e:0b:f6:c7:f6:d3:38:67:a8:f6:dc:7a:
0b:ba:39:79:42:64:e3:d0:29:29:43:77:5c:45:c8:
53:19:54:29:bc:58:aa:14:26:ae:c8:d6:e3:b5:db:
25:c4:51:a1:b0:80:88:29:4d:44:7c:85:67:cf:36:
a1:9f:8c:e2:f9:a7:ca:a1:05:0d:38:f8:08:b2:bc:
ef:15:cf:72:a6:6a:8d:8b:e1:bf:e5:47:5d:a4:36:
9f:ee:b3:3b:34:25:ef:6c:c7:9f:59:f4:4d:87:d6:
92:d2:97:8e:c4:b4:1d:20:b6:a2:8f:fe:6e:7e:c3:
35:ac:f0:4b:93:8c:d9:70:d9:4d:58:71:af:95:f3:
3c:e5:80:d8:41:81:e2:68:b9:65:bc:fe:48:47:55:
ad:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:76:59:16:A9:7C:DD:A8:4B:F5:08:94:E0:7D:C0:E5:C9:37:84:AE
X509v3 Authority Key Identifier:
keyid:30:07:77:C3:B4:41:44:FD:30:56:BF:4B:84:54:50:CB:7F:AB:9C:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MAd3w7RBRP0wVr9LhFRQy3-rnC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/942022-4fb3-461d-b456-1526cb9abf9b/1/MAd3w7RBRP0wVr9LhFRQy3-rnC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/942022-4fb3-461d-b456-1526cb9abf9b/1/MAd3w7RBRP0wVr9LhFRQy3-rnC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:29:a4:9b:e1:f7:20:dd:c7:b7:54:7c:17:f5:8a:01:c8:9b:
14:4a:6c:f2:6e:51:01:42:4f:d3:e3:5a:ef:c5:79:07:8a:3d:
00:13:38:ff:0a:fd:31:86:1e:3e:8a:ad:33:33:5f:2d:2d:47:
f3:d3:77:cc:18:cc:9b:f0:e5:da:c2:c2:af:61:32:b3:96:17:
17:2d:7b:85:6b:4b:b7:bd:67:aa:2c:1b:35:1c:86:67:f6:12:
2f:15:da:3e:f7:36:de:09:e0:9f:09:a7:21:55:87:e3:b6:2f:
fb:e3:74:20:31:50:70:df:81:c7:f0:25:9c:8e:ca:8f:f5:8a:
66:ef:03:b4:2e:f9:4f:79:2c:90:f9:9e:b7:bb:9c:6a:7d:e8:
54:11:21:9f:d3:82:09:05:db:ff:44:bd:e8:dd:5c:bf:7b:b7:
a2:97:46:4d:dc:b4:22:67:d6:a5:20:06:3e:bb:67:44:13:6b:
2a:b9:f7:0b:63:7e:03:82:7a:6f:78:91:62:61:13:b5:3b:ec:
b9:0a:71:f1:a4:60:b9:9c:5d:e5:22:65:6b:08:c0:90:64:a8:
e7:81:4b:43:bd:4e:cf:a9:3b:3a:88:0f:2d:67:3b:fa:bb:de:
bf:38:44:47:7f:60:40:a5:15:90:03:99:6c:63:64:26:1c:ec:
17:65:05:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:11:20 2025 by rpki-client