Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/MKNPnR29IKqH-w9ivStsXjDGFKI.mft
File: MKNPnR29IKqH-w9ivStsXjDGFKI.mft (raw, json)
Hash identifier: bs7H6FCa3BtPfDf7CUTvB6ZEwHpQcT+N6edQJxH7Mdw=
Subject key identifier: 3D:6F:BD:E8:AC:6A:82:58:EA:F8:88:F1:1A:E4:7D:65:E1:F8:D3:32
Authority key identifier: 30:A3:4F:9D:1D:BD:20:AA:87:FB:0F:62:BD:2B:6C:5E:30:C6:14:A2
Certificate issuer: /CN=30a34f9d1dbd20aa87fb0f62bd2b6c5e30c614a2
Certificate serial: 0194BD8562BBEC8600086BE7A8858DCBA4FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MKNPnR29IKqH-w9ivStsXjDGFKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/MKNPnR29IKqH-w9ivStsXjDGFKI.mft
Manifest number: 04DE
Signing time: Fri 31 Jan 2025 18:00:22 +0000
Manifest this update: Fri 31 Jan 2025 18:00:22 +0000
Manifest next update: Sat 01 Feb 2025 18:00:22 +0000
Files and hashes: 1: MKNPnR29IKqH-w9ivStsXjDGFKI.crl (hash: CiOZwouOQv9SD7IbBGYo41l/PM2KXu3TLDlNebsI1ms=)
2: lblIM2FJQ_WVf-a4mFWu5Otgr-A.roa (hash: dTACe68AOYRTGOWM2bf2NFYllivUWP/q40LE4fNKxno=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:62:bb:ec:86:00:08:6b:e7:a8:85:8d:cb:a4:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30a34f9d1dbd20aa87fb0f62bd2b6c5e30c614a2
Validity
Not Before: Jan 31 18:00:22 2025 GMT
Not After : Feb 1 18:00:22 2025 GMT
Subject: CN=3d6fbde8ac6a8258eaf888f11ae47d65e1f8d332
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e4:54:07:ea:e9:2c:69:ef:69:f4:17:9f:bb:
84:f4:0f:a1:a6:18:ad:72:7a:52:18:7b:6b:60:10:
fd:02:9e:3a:11:00:6f:d7:e4:59:b2:0c:4b:49:af:
04:31:71:d2:e0:45:ec:86:74:c4:ff:d3:fc:30:fa:
34:ae:8d:e6:3a:71:bb:38:4c:ca:95:02:67:54:0e:
32:fc:9d:6c:67:c6:46:ab:72:96:72:97:75:67:cb:
a0:3f:a1:03:31:38:08:f5:75:8c:8f:fa:2a:61:3c:
ba:87:10:87:d1:bf:c4:83:e5:8d:e2:93:ee:08:f7:
df:1e:1b:2d:de:f7:72:6d:07:dc:0c:f2:e0:4c:63:
af:f7:9c:8a:fe:b6:66:94:ab:c4:d4:12:f2:3b:0b:
f1:03:f4:ec:42:e7:ce:ab:87:89:a4:cb:14:81:5a:
5e:6c:aa:95:4f:54:03:3a:bf:14:8a:92:23:16:76:
e9:30:63:f6:7f:ea:bb:05:1d:e3:49:48:0e:cb:88:
94:e9:c4:61:1b:3a:9d:70:d1:da:4b:e2:d9:ee:d0:
97:fc:a6:81:01:97:d6:c2:d6:0b:5a:4e:35:19:7b:
55:51:52:de:77:43:c6:94:6b:59:ce:b0:88:2e:28:
7e:7b:3a:a6:e2:cb:28:2e:12:a9:cd:7d:6e:67:74:
12:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:6F:BD:E8:AC:6A:82:58:EA:F8:88:F1:1A:E4:7D:65:E1:F8:D3:32
X509v3 Authority Key Identifier:
keyid:30:A3:4F:9D:1D:BD:20:AA:87:FB:0F:62:BD:2B:6C:5E:30:C6:14:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MKNPnR29IKqH-w9ivStsXjDGFKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/MKNPnR29IKqH-w9ivStsXjDGFKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/MKNPnR29IKqH-w9ivStsXjDGFKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:a3:69:1f:a7:e6:ca:77:c4:77:79:02:37:4b:bb:68:ec:7d:
46:50:8d:f3:f7:ea:e3:3a:4a:ee:18:18:90:69:87:f8:36:96:
3d:73:63:84:c8:cf:6c:fd:09:63:83:6c:3b:ae:4a:0d:5f:bf:
d9:77:18:fd:0a:5b:d5:2e:b4:36:d3:66:a5:ec:86:52:a8:48:
50:30:8b:5f:ba:d0:f6:80:c1:83:32:d2:3f:e1:32:15:5b:3a:
8d:8f:45:96:31:47:78:28:11:61:04:19:3d:8f:34:18:40:7e:
84:59:9b:77:65:34:53:66:7a:15:a2:48:dd:9e:94:cd:97:a1:
e9:85:ac:49:ad:bd:10:11:47:e0:ef:46:e5:0c:6a:b6:71:35:
89:f0:5f:45:69:d0:ff:52:3d:2a:a7:e3:c2:0d:19:1c:b4:cd:
69:46:4d:2e:5e:4a:92:d1:0f:50:cc:60:5e:63:0f:60:3a:22:
c6:15:46:7a:3c:38:0f:86:05:2c:ec:ba:14:64:a4:ad:66:56:
2a:b4:b8:68:44:0d:b4:34:f9:b2:1c:71:38:81:16:95:7c:9c:
44:39:99:ad:8f:8a:8d:46:f7:76:20:43:1a:59:90:64:7b:bb:
b1:f7:d2:c9:7f:2c:c3:36:1c:6f:d1:25:f9:c7:eb:f1:be:b2:
34:11:8f:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:47:11 2025 by rpki-client