Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/2dc208-6912-4a12-8dbb-dbb69f284f23/1/RT-MpoQDfFQzpLRAYhGzHXbhPqs.mft
File: RT-MpoQDfFQzpLRAYhGzHXbhPqs.mft (raw, json)
Hash identifier: O0XdXXusMzJEoPohPQ40OPw7y2uK3f6SRd+QbSeONro=
Subject key identifier: 3C:20:A7:83:26:7E:CE:C7:00:46:20:C7:42:DC:2B:AD:E9:F3:C7:44
Authority key identifier: 45:3F:8C:A6:84:03:7C:54:33:A4:B4:40:62:11:B3:1D:76:E1:3E:AB
Certificate issuer: /CN=453f8ca684037c5433a4b4406211b31d76e13eab
Certificate serial: 0194BC04C789C3E7E5B4D98C0AD244851D5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT-MpoQDfFQzpLRAYhGzHXbhPqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/2dc208-6912-4a12-8dbb-dbb69f284f23/1/RT-MpoQDfFQzpLRAYhGzHXbhPqs.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 11:00:17 +0000
Manifest this update: Fri 31 Jan 2025 11:00:17 +0000
Manifest next update: Sat 01 Feb 2025 11:00:17 +0000
Files and hashes: 1: 1-WaRefIqk9cTwAge18iSThry2Bk.roa (hash: u2PbRYzxV5DP0Zvmm7MZK3eMuZerbQoMidmwaTRf9M0=)
2: RT-MpoQDfFQzpLRAYhGzHXbhPqs.crl (hash: pDHfimHyJyaSxX/lSPFbdPKnF8UEFnv5DoWYDST2VQA=)
3: pPhTVlJLb86soqyySL-WWM5nGpo.roa (hash: soRRZ5HHiA/a5SCZK0C4OU2YSKWcycTGQ/q5n+2Dcw8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:c7:89:c3:e7:e5:b4:d9:8c:0a:d2:44:85:1d:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f8ca684037c5433a4b4406211b31d76e13eab
Validity
Not Before: Jan 31 11:00:17 2025 GMT
Not After : Feb 1 11:00:17 2025 GMT
Subject: CN=3c20a783267ecec7004620c742dc2bade9f3c744
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:66:af:df:fc:3f:5a:93:46:70:7a:43:62:ce:
ab:a8:46:25:63:bc:d4:d7:5d:9b:96:01:bb:d8:c9:
64:cf:fa:78:9f:14:f9:b8:95:c8:32:34:99:30:5b:
4e:89:2f:68:cb:d0:67:42:cd:37:e5:6d:66:b3:72:
36:87:3f:3f:0f:d8:6e:42:b0:a4:25:a8:47:9f:3f:
11:bb:25:0c:ba:61:c8:fa:45:17:5c:b8:d8:0f:ac:
5c:59:bd:6a:69:85:40:11:40:15:ff:ed:19:37:98:
95:9a:0c:3d:8c:38:e9:d1:8e:f7:8c:65:ca:75:03:
36:13:52:6d:df:3f:a0:7e:5f:e9:ff:09:cb:2a:e4:
8f:b1:e5:7e:3d:47:55:e3:14:a6:d7:dc:9b:a5:52:
7c:dd:b6:60:e7:b9:0e:52:d6:03:89:f4:af:8a:2c:
da:a7:0f:d5:d2:a7:19:9b:1b:e6:d4:58:c6:ad:e2:
f4:e7:e2:4d:70:d1:30:a1:11:0a:d9:c0:54:8b:1f:
39:71:b0:a9:91:02:92:91:80:f9:f4:f2:16:13:eb:
10:b0:c9:94:13:4e:5c:12:bb:4c:3e:00:cb:4e:02:
b3:ac:ec:7a:98:f2:36:d7:4b:12:f8:21:19:80:65:
9b:75:08:87:f9:56:60:33:ff:7b:00:8e:90:42:76:
46:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:20:A7:83:26:7E:CE:C7:00:46:20:C7:42:DC:2B:AD:E9:F3:C7:44
X509v3 Authority Key Identifier:
keyid:45:3F:8C:A6:84:03:7C:54:33:A4:B4:40:62:11:B3:1D:76:E1:3E:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT-MpoQDfFQzpLRAYhGzHXbhPqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/2dc208-6912-4a12-8dbb-dbb69f284f23/1/RT-MpoQDfFQzpLRAYhGzHXbhPqs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/2dc208-6912-4a12-8dbb-dbb69f284f23/1/RT-MpoQDfFQzpLRAYhGzHXbhPqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:bc:1c:35:b4:15:38:ef:ff:e3:9a:36:15:ba:1a:11:f1:23:
ff:b8:f8:03:d9:5f:ca:45:45:d6:23:99:fe:6b:b3:7b:b0:f9:
c6:6c:ea:31:24:a0:22:4d:d3:22:7c:40:d2:ff:b5:c9:93:c8:
1a:f3:92:47:b7:3f:80:82:47:ae:29:dc:e7:ee:ec:28:34:64:
e3:64:0f:00:fd:4c:f4:f9:5b:f5:63:85:36:c9:82:05:a8:f0:
b0:9b:4f:3f:96:73:4d:b9:f9:19:24:38:07:dc:4b:cb:37:21:
f9:82:a6:77:a0:73:ef:68:04:3f:62:19:8e:31:84:ae:57:e7:
0b:37:d5:7f:f5:80:88:5e:20:61:a2:9e:25:6d:09:3f:62:ad:
68:d7:ed:ea:af:b7:77:b4:d9:91:bb:3e:02:4e:ea:aa:c5:16:
e5:b7:29:8f:37:83:9a:92:17:1f:f5:4e:a7:68:24:b2:17:3c:
d5:b7:12:55:cd:6f:3f:46:f1:4e:15:ac:8a:a6:d5:f1:3b:11:
30:71:32:33:cc:3a:12:27:8d:3b:05:b4:cf:05:92:e6:35:0e:
40:86:fb:75:c6:a5:65:93:55:92:e1:c9:e7:fc:20:39:f0:f6:
ac:f8:b8:50:04:da:c3:05:b3:fe:cc:92:d8:b4:82:9a:31:ae:
f1:b8:c5:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:48:18 2025 by rpki-client