Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/4cba2f-4a5b-4435-8aec-923cb50abe2e/1/MGm6frw7Zy3QnsA0Th-AqhEx79A.mft
File: MGm6frw7Zy3QnsA0Th-AqhEx79A.mft (raw, json)
Hash identifier: NU6O9maE0OrqufxU2Qq6RVfvMuLTFxTS6uDwBBVBLXQ=
Subject key identifier: 5A:C2:60:96:C6:A9:88:26:D8:CF:DF:99:BA:D4:BB:70:2F:76:21:FA
Authority key identifier: 30:69:BA:7E:BC:3B:67:2D:D0:9E:C0:34:4E:1F:80:AA:11:31:EF:D0
Certificate issuer: /CN=3069ba7ebc3b672dd09ec0344e1f80aa1131efd0
Certificate serial: 0194BD4E77CDFC0B8E4F06E88C6E8A7C0F48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MGm6frw7Zy3QnsA0Th-AqhEx79A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/4cba2f-4a5b-4435-8aec-923cb50abe2e/1/MGm6frw7Zy3QnsA0Th-AqhEx79A.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 17:00:23 +0000
Manifest this update: Fri 31 Jan 2025 17:00:23 +0000
Manifest next update: Sat 01 Feb 2025 17:00:23 +0000
Files and hashes: 1: MGm6frw7Zy3QnsA0Th-AqhEx79A.crl (hash: BBN6TDPTrwdWhlL5BmkRNZQ7YrAIv21E/4kiUwfBCuk=)
2: eqJAEOy6NaY4mZwa5RQJfzteBn0.roa (hash: 4ycDfdQF4RJy7Cm3II/1bQM7j6qQFueYRHKWr/2hsvQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:77:cd:fc:0b:8e:4f:06:e8:8c:6e:8a:7c:0f:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3069ba7ebc3b672dd09ec0344e1f80aa1131efd0
Validity
Not Before: Jan 31 17:00:23 2025 GMT
Not After : Feb 1 17:00:23 2025 GMT
Subject: CN=5ac26096c6a98826d8cfdf99bad4bb702f7621fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ce:a7:bf:de:ff:d8:2f:05:a7:6e:f3:ec:85:
cb:03:6c:03:f7:b3:24:18:0d:b8:f6:fa:ee:b3:26:
18:d6:fa:a2:4f:4a:35:80:3a:4d:8f:58:32:dc:7e:
dd:83:3d:95:04:b7:ff:14:a2:d3:da:52:c3:7a:65:
b8:d9:f0:63:34:eb:68:61:94:09:4c:ac:b0:9d:47:
1b:8f:22:d2:c3:22:1d:9e:10:3b:d2:18:ca:75:c4:
88:d7:17:62:7b:06:fe:57:a1:1b:33:ea:87:87:e8:
57:3c:70:46:57:4f:c4:8c:e7:ec:6f:7c:19:00:b9:
46:5b:ab:11:0d:1d:1f:84:93:8b:7f:c7:18:0c:9b:
f4:68:b8:27:f0:46:5a:e6:9c:ea:ee:ca:de:9a:1b:
3f:d1:e3:48:76:87:59:c5:06:0f:19:3c:0e:d9:2b:
ad:aa:1a:e5:cf:97:06:68:7a:cf:b1:09:91:aa:3a:
96:68:2c:01:63:f2:58:2e:3f:c0:59:83:6b:e6:7b:
df:07:58:50:ee:79:50:30:68:54:c6:96:a2:8f:8b:
b5:bf:70:b9:e5:af:ae:88:3d:3d:2c:42:57:7d:bd:
b2:f7:87:b5:80:0a:65:e6:3f:26:de:f2:18:fe:cc:
04:e1:f1:94:56:41:18:9e:3f:fc:0d:97:20:79:88:
48:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:C2:60:96:C6:A9:88:26:D8:CF:DF:99:BA:D4:BB:70:2F:76:21:FA
X509v3 Authority Key Identifier:
keyid:30:69:BA:7E:BC:3B:67:2D:D0:9E:C0:34:4E:1F:80:AA:11:31:EF:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGm6frw7Zy3QnsA0Th-AqhEx79A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4cba2f-4a5b-4435-8aec-923cb50abe2e/1/MGm6frw7Zy3QnsA0Th-AqhEx79A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4cba2f-4a5b-4435-8aec-923cb50abe2e/1/MGm6frw7Zy3QnsA0Th-AqhEx79A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:81:d1:e6:10:f5:2e:bb:b5:49:43:5d:f4:53:06:d9:81:79:
07:e4:fd:d4:b9:c3:27:57:24:4f:cd:6b:c1:de:8b:87:9a:fe:
e2:d4:f1:59:44:28:a2:67:d7:94:ba:5c:b4:36:ba:64:7e:89:
83:8d:1e:d1:3d:e8:5f:7d:33:cb:e4:85:be:37:41:d5:32:ee:
6a:85:b1:41:11:df:26:89:d9:ba:ad:6f:c0:9f:c6:02:32:52:
1f:35:5b:5e:64:22:d7:99:20:e8:85:1f:91:d5:71:59:20:0b:
c6:6d:ee:ed:68:52:70:5c:d6:00:5d:ca:9c:0e:b4:96:26:a9:
9c:fb:1f:02:ff:82:e5:bc:1f:b0:8c:65:f7:87:17:95:7a:e2:
01:62:e9:b8:ef:81:a6:2a:41:f8:2c:97:0b:8c:1c:c6:b5:74:
4a:8e:80:11:a5:94:29:48:3f:f1:58:c6:d5:41:ca:00:a9:62:
15:08:15:31:4d:07:e6:82:4b:e7:38:0b:1e:cc:ca:61:af:0b:
28:5a:93:b4:6f:27:c8:9b:12:37:a6:1c:ab:bf:eb:39:ad:aa:
50:f7:43:42:83:0e:dc:e9:2b:f0:c6:e2:32:8d:0b:24:e8:3d:
a1:41:ee:ea:18:da:34:46:29:a6:c6:98:b4:78:11:dd:f3:0c:
8c:3b:45:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:54:57 2025 by rpki-client