Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/MAsvRrpXChZ3v9WExygirZ2f5bA.mft
File: MAsvRrpXChZ3v9WExygirZ2f5bA.mft (raw, json)
Hash identifier: xYeSUVQNvAuogSaHFTeM4zjgX6x1gUIJAzlgn5fkMok=
Subject key identifier: C3:0A:F0:A1:E8:6F:F8:99:13:61:24:60:46:7B:AA:06:9C:DB:5C:24
Authority key identifier: 30:0B:2F:46:BA:57:0A:16:77:BF:D5:84:C7:28:22:AD:9D:9F:E5:B0
Certificate issuer: /CN=300b2f46ba570a1677bfd584c72822ad9d9fe5b0
Certificate serial: 0194BC3C07F778685F36AA558B54186EDFA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MAsvRrpXChZ3v9WExygirZ2f5bA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/MAsvRrpXChZ3v9WExygirZ2f5bA.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 12:00:38 +0000
Manifest this update: Fri 31 Jan 2025 12:00:38 +0000
Manifest next update: Sat 01 Feb 2025 12:00:38 +0000
Files and hashes: 1: 1-OVd2lrgp3V2rXsCVF3GooeWhcE.roa (hash: KipoSrKFnoRi0oHmHkcFIq8GeOt3ELUBmEPs2x8pv/4=)
2: KR7i1VGMfp6wOUHzM68qa6NoxyE.roa (hash: ndyzcu48CDHqz3NgyXeDet5mZyI1DmpInGav6pQo5SI=)
3: MAsvRrpXChZ3v9WExygirZ2f5bA.crl (hash: GMiuGkcQ4MbjFOLWR+lhwfbmie4Nzt/wHsN0Fqd8TyA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:07:f7:78:68:5f:36:aa:55:8b:54:18:6e:df:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=300b2f46ba570a1677bfd584c72822ad9d9fe5b0
Validity
Not Before: Jan 31 12:00:38 2025 GMT
Not After : Feb 1 12:00:38 2025 GMT
Subject: CN=c30af0a1e86ff89913612460467baa069cdb5c24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:bd:6e:30:c2:2c:2d:94:5f:5d:d8:f3:a1:5d:
b9:77:91:11:a3:ec:f1:e6:69:60:5d:e0:02:20:3b:
2a:2d:01:eb:3d:7f:91:ed:b3:98:b6:52:d2:c8:ff:
8b:1c:5c:1d:a4:91:16:42:75:ac:74:15:d7:e6:9f:
09:8c:4e:4e:5d:fb:ee:3c:85:81:a2:59:63:df:32:
8c:5b:10:31:58:f2:b0:a1:97:53:29:c0:8d:53:2f:
a8:28:78:5d:62:ff:33:c1:e2:10:7d:99:98:40:85:
1f:42:74:7b:45:1a:9d:c1:b0:30:60:a5:0b:23:b4:
2b:2c:5d:01:03:b6:da:d2:31:a0:a0:f0:98:0d:fd:
21:31:59:a7:e6:fd:69:68:1b:51:fa:d9:bd:6e:2b:
7b:f4:34:e9:af:0f:1e:19:fb:0b:4d:a4:4a:c7:d7:
62:79:65:4e:2f:25:95:08:30:1b:87:80:8a:84:c4:
25:a6:96:59:17:96:ba:df:3f:7a:11:c5:ad:ab:c2:
b4:b8:37:92:5d:2a:62:5b:52:40:0a:54:ee:52:d2:
57:21:92:68:9e:42:52:b0:e0:d5:6c:57:3e:c0:e0:
47:cd:7e:49:f7:ad:df:26:a1:7b:bd:e7:cb:30:62:
02:d6:cd:35:93:03:6a:1c:30:04:fc:42:bc:81:ec:
34:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:0A:F0:A1:E8:6F:F8:99:13:61:24:60:46:7B:AA:06:9C:DB:5C:24
X509v3 Authority Key Identifier:
keyid:30:0B:2F:46:BA:57:0A:16:77:BF:D5:84:C7:28:22:AD:9D:9F:E5:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MAsvRrpXChZ3v9WExygirZ2f5bA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/MAsvRrpXChZ3v9WExygirZ2f5bA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/MAsvRrpXChZ3v9WExygirZ2f5bA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:16:f3:a6:95:8b:5d:f2:2a:67:c5:d1:c3:e5:f2:ea:21:80:
57:b6:ea:cc:b5:3e:9d:79:9a:59:33:fb:42:41:c1:1e:11:c2:
fe:47:26:3e:5d:54:f7:07:f9:32:b1:a9:ef:b1:5b:e8:d8:61:
75:77:30:52:29:e7:60:3f:e1:a3:31:67:43:da:9d:a3:bc:f6:
24:d7:d3:41:6d:fe:2f:ca:d4:24:d6:6e:25:1a:64:5a:0b:3d:
f9:60:95:c9:c6:bb:00:fa:28:16:89:6d:c6:ba:36:22:c8:0f:
9e:54:6a:7b:7f:54:45:89:59:25:25:3b:04:ef:bb:81:82:11:
c1:fd:c7:03:28:af:08:a0:7b:ea:66:7c:09:00:59:22:c7:11:
f8:51:03:69:61:fe:49:e3:09:96:87:da:14:f3:c0:90:05:6d:
f4:42:44:b9:60:b3:27:8f:e1:bd:de:eb:5e:e0:7d:53:16:77:
0f:aa:93:28:16:48:bd:90:d6:fc:95:d2:e6:44:05:7f:2d:67:
a3:5e:e2:e8:80:d1:0f:80:39:05:bf:3d:16:b3:40:fc:80:1e:
08:97:23:80:58:68:a7:c1:b5:45:89:5c:59:21:64:54:2d:8f:
ea:91:f3:a5:5d:d1:ca:53:52:ca:30:34:4d:a2:91:5c:15:f3:
c2:1c:d0:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:01 2025 by rpki-client