Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/a8941a-7250-48ec-aaf8-6d8ea9d1cd73/1/MGE0vPWfWB1rdmMM-oeGeHaikhU.mft
File: MGE0vPWfWB1rdmMM-oeGeHaikhU.mft (raw, json)
Hash identifier: poZpEbGdzib2uy0P7af45C0wbzJFK0mAjsmTIjsJB0g=
Subject key identifier: 4F:A7:E8:56:46:DD:B5:24:90:6B:07:CA:07:BB:9D:40:27:EF:25:A8
Authority key identifier: 30:61:34:BC:F5:9F:58:1D:6B:76:63:0C:FA:87:86:78:76:A2:92:15
Certificate issuer: /CN=306134bcf59f581d6b76630cfa87867876a29215
Certificate serial: 0194BBCE4FC1EB8BD783D7FDD96341FED3C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MGE0vPWfWB1rdmMM-oeGeHaikhU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/a8941a-7250-48ec-aaf8-6d8ea9d1cd73/1/MGE0vPWfWB1rdmMM-oeGeHaikhU.mft
Manifest number: 0FC9
Signing time: Fri 31 Jan 2025 10:00:47 +0000
Manifest this update: Fri 31 Jan 2025 10:00:47 +0000
Manifest next update: Sat 01 Feb 2025 10:00:47 +0000
Files and hashes: 1: MGE0vPWfWB1rdmMM-oeGeHaikhU.crl (hash: ocCt78BqkeK5UligEPmWC7BZisOUF80MhUShjQsHr2k=)
2: iyT2rEaTLGTQJtoCzDixmDHk4q8.roa (hash: DJdcXuwOyrFSr66rkLo/Y+8lRD0xwqdql+52mCZmuDA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:4f:c1:eb:8b:d7:83:d7:fd:d9:63:41:fe:d3:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=306134bcf59f581d6b76630cfa87867876a29215
Validity
Not Before: Jan 31 10:00:47 2025 GMT
Not After : Feb 1 10:00:47 2025 GMT
Subject: CN=4fa7e85646ddb524906b07ca07bb9d4027ef25a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:23:13:66:e2:7c:92:5a:cb:73:e6:d8:c6:e2:
39:67:6c:2d:5f:05:3b:68:19:7b:20:05:11:63:e2:
a1:be:e8:93:88:61:c0:0f:a8:ca:75:53:25:c4:b4:
26:4f:b4:1b:19:40:ac:6e:42:85:1e:3c:cd:22:31:
d8:9f:cc:e4:70:ce:d5:19:3f:1c:a6:27:ea:25:7e:
62:aa:9c:19:af:bf:b1:8b:c4:d3:ac:4c:df:ab:21:
ac:66:66:a6:17:fb:9b:cc:29:c5:a1:61:d3:79:e7:
a0:0e:b3:a3:18:e5:5e:b7:27:d6:dc:24:f2:a7:50:
59:ea:a5:a1:c0:fa:0f:5e:11:d5:94:c2:a9:6b:96:
47:07:87:46:ec:78:7e:f4:0f:12:97:93:5c:f9:ec:
25:63:5c:8c:d8:47:59:56:97:2d:3b:9a:72:ad:67:
04:56:35:ca:65:dc:e4:4e:00:4a:a0:0f:d0:de:dd:
a9:ea:a5:fd:08:43:6e:2a:f7:af:44:50:ad:c4:df:
fb:7f:e9:13:b0:ed:72:aa:14:d4:fc:7f:a1:48:48:
0a:5d:69:da:e9:fb:83:87:37:fe:67:c6:0a:86:f5:
f1:ca:dc:1e:29:ef:0b:45:dd:5d:8d:2d:7b:60:2c:
09:b7:b7:06:3a:99:6d:4a:ba:55:a8:3d:c1:82:bd:
63:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:A7:E8:56:46:DD:B5:24:90:6B:07:CA:07:BB:9D:40:27:EF:25:A8
X509v3 Authority Key Identifier:
keyid:30:61:34:BC:F5:9F:58:1D:6B:76:63:0C:FA:87:86:78:76:A2:92:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGE0vPWfWB1rdmMM-oeGeHaikhU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a8941a-7250-48ec-aaf8-6d8ea9d1cd73/1/MGE0vPWfWB1rdmMM-oeGeHaikhU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a8941a-7250-48ec-aaf8-6d8ea9d1cd73/1/MGE0vPWfWB1rdmMM-oeGeHaikhU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:4e:f2:7c:7a:3a:3f:49:8f:2d:54:56:a0:0a:d5:6b:ac:39:
10:57:e4:7b:e0:8b:b0:71:c6:97:9c:cf:b5:c9:f2:cc:30:3f:
00:c2:61:5b:70:23:24:75:bc:04:c6:29:8a:8d:37:95:8b:30:
67:db:0d:60:ca:67:42:73:9d:b4:39:74:8a:0c:35:09:99:d3:
c9:f9:cc:14:92:36:7a:0c:1a:4f:d7:03:69:1d:91:2b:83:62:
03:2c:de:e0:f8:ef:e1:cc:58:ff:49:b5:8f:38:f2:22:f9:04:
dd:92:af:ff:b1:f4:c0:f2:4c:23:ab:a4:00:7f:41:3e:d9:36:
67:11:78:19:75:c3:c8:69:d9:c4:75:95:45:02:8d:af:fd:4a:
ee:3b:4c:81:4f:eb:ad:d6:07:d3:bb:99:b9:dc:bb:e1:a3:2d:
9b:a0:ee:52:d1:b3:96:f9:0d:2f:48:d3:b1:3c:f6:d3:b5:e4:
99:e2:9d:65:9b:33:fd:bc:88:52:ec:f7:77:95:64:43:84:de:
8b:a3:53:c5:e5:1d:5a:eb:da:29:ab:ab:9d:68:e8:1d:1d:3f:
19:f6:26:cd:cb:81:f0:2a:32:8a:1e:1b:87:ad:81:48:dd:09:
29:7f:7a:b2:ec:28:5c:20:ea:9a:25:be:19:12:a4:66:5b:82:
58:91:33:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:36 2025 by rpki-client