Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/f1af90-355c-484b-b923-d31d4cb1b129/1/MDCZQabYT6Tb3a8PTs2Z-fBDz9w.mft
File: MDCZQabYT6Tb3a8PTs2Z-fBDz9w.mft (raw, json)
Hash identifier: F8CUV2k5ZFhzam/qf3/G2Nt2V3bs+Kl9RGlXsa2RKOw=
Subject key identifier: 3B:AD:6F:72:8F:63:90:9F:9A:BE:9B:BC:67:84:07:5A:35:71:04:3C
Authority key identifier: 30:30:99:41:A6:D8:4F:A4:DB:DD:AF:0F:4E:CD:99:F9:F0:43:CF:DC
Certificate issuer: /CN=30309941a6d84fa4dbddaf0f4ecd99f9f043cfdc
Certificate serial: 0194BC3C53042B09FE06192B022DFC307788
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MDCZQabYT6Tb3a8PTs2Z-fBDz9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/f1af90-355c-484b-b923-d31d4cb1b129/1/MDCZQabYT6Tb3a8PTs2Z-fBDz9w.mft
Manifest number: 0F7C
Signing time: Fri 31 Jan 2025 12:00:57 +0000
Manifest this update: Fri 31 Jan 2025 12:00:57 +0000
Manifest next update: Sat 01 Feb 2025 12:00:57 +0000
Files and hashes: 1: DIrH-kP5nT3HJlZe7jZz_CkvjFY.roa (hash: gKZZgzAyp+INbVPVuZgOHUrKZ9VQYbL1/WwPWyMWDfc=)
2: MDCZQabYT6Tb3a8PTs2Z-fBDz9w.crl (hash: 5KPdnnk/1ta9D0dRV6UjSBsYtQzQE/BwZX+KA4DmqyI=)
3: gD2PrMpYBnq5bkywvcg86wYgyi0.roa (hash: ZloCpzZ4hxZcPRO4MDOIHc0MdVfMRoHKIu3JaQVOrkU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:53:04:2b:09:fe:06:19:2b:02:2d:fc:30:77:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30309941a6d84fa4dbddaf0f4ecd99f9f043cfdc
Validity
Not Before: Jan 31 12:00:57 2025 GMT
Not After : Feb 1 12:00:57 2025 GMT
Subject: CN=3bad6f728f63909f9abe9bbc6784075a3571043c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:17:8b:60:3d:a7:ce:87:5c:68:d9:c6:0a:71:
cb:26:0c:a8:5a:99:49:37:9f:f1:fa:28:cb:78:de:
0f:5e:bf:9c:85:d2:2c:cb:d8:ce:4e:18:d1:1a:f3:
db:dc:ef:87:d7:1a:b4:b5:e0:2c:ac:db:d3:28:31:
db:db:89:22:be:6e:8d:33:3e:db:d8:4f:26:9b:02:
e7:2b:6b:8c:e0:d4:2c:6c:5f:ab:f2:94:40:d0:6c:
4c:88:6b:9d:46:c7:25:5f:b9:ec:2f:aa:5d:f6:ba:
48:72:f3:30:ec:37:e0:2b:c3:2f:3a:64:48:64:19:
f8:91:a7:59:0a:28:3e:84:15:5e:0b:45:50:ef:a2:
83:ec:8d:23:43:e4:03:f8:5b:e2:5b:b4:ed:16:35:
4d:38:7a:e5:3e:91:7d:18:76:2b:a2:a4:17:cb:90:
aa:1f:b8:88:b1:18:90:56:bc:d2:e1:63:f1:90:c1:
ca:79:ec:1b:f0:e6:a1:39:3e:1b:1f:78:41:55:8b:
ef:dd:78:a8:83:89:db:1e:2f:99:e5:ff:98:56:10:
c2:75:92:0b:b3:1b:ce:75:ca:51:ed:9e:8c:e2:fd:
cf:ea:08:dd:88:1a:d6:1a:4a:f7:6a:f8:cb:a1:0d:
48:33:64:c9:f5:c7:cc:22:5a:10:6b:01:8b:d5:e2:
18:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:AD:6F:72:8F:63:90:9F:9A:BE:9B:BC:67:84:07:5A:35:71:04:3C
X509v3 Authority Key Identifier:
keyid:30:30:99:41:A6:D8:4F:A4:DB:DD:AF:0F:4E:CD:99:F9:F0:43:CF:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MDCZQabYT6Tb3a8PTs2Z-fBDz9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/f1af90-355c-484b-b923-d31d4cb1b129/1/MDCZQabYT6Tb3a8PTs2Z-fBDz9w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/f1af90-355c-484b-b923-d31d4cb1b129/1/MDCZQabYT6Tb3a8PTs2Z-fBDz9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:6b:fc:64:5f:96:af:1c:26:9a:91:bf:2e:a5:e3:f6:61:91:
e1:96:c9:6b:f0:f3:97:ef:ee:2c:aa:71:ea:6f:fb:b3:7c:b1:
56:6c:72:52:ac:94:79:7c:fb:af:8d:f5:d0:93:56:c8:62:a3:
c8:58:f9:a1:a6:42:d6:63:4d:bf:5a:ac:4b:50:f9:4f:3a:f7:
3d:40:b8:a1:43:4f:cc:67:b6:d3:ca:5d:fb:d9:b7:ed:78:fc:
09:f8:1f:12:9d:e9:8c:c5:a0:4d:89:af:b6:7f:2d:a0:ab:11:
69:07:33:bc:97:a8:13:38:6b:41:03:92:d1:11:ae:f4:b2:5b:
d2:82:43:d9:fb:34:e8:45:f6:70:bf:30:1d:5c:ec:96:74:a7:
f9:6e:a1:75:44:4f:b3:73:3d:72:ea:9f:fc:92:58:37:68:04:
68:36:cf:43:a7:52:5a:6a:8b:5d:03:96:24:61:ab:78:9a:03:
21:c1:42:58:7d:74:4e:6d:e6:2a:44:c4:13:97:e2:49:27:27:
e6:b5:25:e8:a4:66:b8:e1:d2:1a:07:4e:8c:0f:21:63:6a:ba:
24:06:4a:69:e0:2d:28:9a:7d:05:89:e3:db:b0:29:85:fc:66:
98:86:8b:e5:d8:b1:4c:3f:6f:cf:9c:26:9c:2b:c7:2e:98:66:
98:e7:ac:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:44:52 2025 by rpki-client