Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/e74b81-5ff7-4823-9267-0d3e662b0ee0/1/MJKxFwYvYGX6oc39OJFeS7nJJLs.mft
File: MJKxFwYvYGX6oc39OJFeS7nJJLs.mft (raw, json)
Hash identifier: BJT/ceABgS/eFe1X7ZSdf/eazS6t2TWVA7zj2bdZ72I=
Subject key identifier: 7E:6F:1C:A2:C0:33:4C:42:2E:FA:8A:53:20:39:9F:68:AA:CF:7D:84
Authority key identifier: 30:92:B1:17:06:2F:60:65:FA:A1:CD:FD:38:91:5E:4B:B9:C9:24:BB
Certificate issuer: /CN=3092b117062f6065faa1cdfd38915e4bb9c924bb
Certificate serial: 0194BCE092724B0462FF8AED9D83B340923A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MJKxFwYvYGX6oc39OJFeS7nJJLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/e74b81-5ff7-4823-9267-0d3e662b0ee0/1/MJKxFwYvYGX6oc39OJFeS7nJJLs.mft
Manifest number: 0F0B
Signing time: Fri 31 Jan 2025 15:00:21 +0000
Manifest this update: Fri 31 Jan 2025 15:00:21 +0000
Manifest next update: Sat 01 Feb 2025 15:00:21 +0000
Files and hashes: 1: Df2biRKzI0GRqVwee9geZJPoqNE.roa (hash: niRdMj+wofGmmTCaPQzwp4KH6uD8D+ovTgho72qJUvQ=)
2: MJKxFwYvYGX6oc39OJFeS7nJJLs.crl (hash: LJjvavY8MiBanbncml++WTI1sK4fG8E7PKngFRwXwno=)
3: dItGQTbmGZEaYwBU9Yq4YOVLqSI.roa (hash: szU14ZY7TnY09k1Q8QSiZL5j1zx2tfwKt9z7Z7fdfRU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:92:72:4b:04:62:ff:8a:ed:9d:83:b3:40:92:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3092b117062f6065faa1cdfd38915e4bb9c924bb
Validity
Not Before: Jan 31 15:00:21 2025 GMT
Not After : Feb 1 15:00:21 2025 GMT
Subject: CN=7e6f1ca2c0334c422efa8a5320399f68aacf7d84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:39:b6:8d:fc:a4:c9:e7:5b:21:3e:d5:d8:19:
40:e1:af:6d:af:d4:c6:2b:88:fe:1a:ec:22:c1:88:
1c:80:7f:45:a5:07:c1:0e:51:57:37:22:cd:8e:66:
6d:01:f0:a0:1e:dd:0a:b2:a3:d4:6c:3a:6d:b9:a0:
fb:d1:91:a9:45:44:90:2c:39:0d:ec:db:a8:3d:cd:
1e:3a:2c:ee:34:34:7a:31:2b:3f:43:92:cd:76:97:
8e:e1:80:b2:1f:38:92:79:41:f1:50:45:be:2a:2b:
c4:21:a8:06:43:de:1e:7f:63:b6:34:6b:9c:28:a5:
9e:e0:c8:85:41:01:30:dc:e1:dc:8b:60:40:45:75:
21:70:0a:ba:1d:b5:89:bd:ad:79:3e:28:3d:ab:06:
37:e6:4c:6b:af:1d:e1:30:ff:23:70:7d:95:c1:20:
f0:32:54:66:cb:d9:5d:27:53:17:5c:99:cb:a3:6f:
97:03:ed:ce:bf:1a:f8:ae:2b:2d:6c:f3:d7:e5:4e:
43:3d:5d:13:50:2e:bb:36:68:fc:74:ac:0c:da:15:
99:2b:12:f5:f8:fd:95:62:13:13:1b:db:5f:d6:e3:
ca:8c:85:81:8e:99:d7:1f:e8:fa:8a:e8:04:03:f5:
f7:2a:c5:e8:48:f7:3b:b7:99:fe:26:f9:e0:14:7b:
c4:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:6F:1C:A2:C0:33:4C:42:2E:FA:8A:53:20:39:9F:68:AA:CF:7D:84
X509v3 Authority Key Identifier:
keyid:30:92:B1:17:06:2F:60:65:FA:A1:CD:FD:38:91:5E:4B:B9:C9:24:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MJKxFwYvYGX6oc39OJFeS7nJJLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e74b81-5ff7-4823-9267-0d3e662b0ee0/1/MJKxFwYvYGX6oc39OJFeS7nJJLs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e74b81-5ff7-4823-9267-0d3e662b0ee0/1/MJKxFwYvYGX6oc39OJFeS7nJJLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:9f:eb:fb:38:b2:8b:41:16:61:13:07:f7:94:24:20:f1:bd:
7a:ae:40:7b:6f:3d:14:72:cc:23:55:2f:6e:1e:2d:41:f5:a3:
80:02:29:c5:ca:4f:fc:07:b1:23:90:5d:bf:34:9d:a0:d0:91:
85:17:7e:d5:de:3f:0a:75:be:4f:65:2d:27:35:52:41:02:ed:
75:a0:94:2c:25:f7:cb:45:62:a9:43:83:63:e9:b6:af:b3:eb:
d4:21:c3:b3:8c:49:89:8a:5f:2d:d2:0f:40:84:46:44:8c:88:
d9:2d:b6:66:de:e1:05:5d:43:2d:49:dc:03:47:98:24:e8:18:
c7:23:d5:e6:d5:2e:9d:e1:48:2a:9e:01:0b:43:fe:cc:5e:e0:
85:86:ca:72:2f:f8:ec:0b:f1:0b:58:0a:f9:bb:32:f7:6b:82:
43:1b:45:88:6a:5d:ff:a8:86:44:b9:7c:57:13:98:95:84:91:
83:db:aa:f0:85:31:02:a2:65:01:db:5b:96:bd:b6:6a:e9:62:
8f:6a:e2:46:8c:4e:ab:32:2a:a3:53:df:f9:60:fa:38:8b:ba:
66:9f:7f:12:df:74:30:58:3c:72:ec:06:91:9e:38:ef:4d:6a:
4d:d5:bc:94:7a:b2:79:74:66:6f:7d:b0:7c:97:38:5d:ef:65:
25:c4:8c:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:41:48 2025 by rpki-client