Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/e74b81-5ff7-4823-9267-0d3e662b0ee0/1/MJKxFwYvYGX6oc39OJFeS7nJJLs.mft
File: MJKxFwYvYGX6oc39OJFeS7nJJLs.mft (raw, json)
Hash identifier: H75wn5q9zglHn0tdoKEH8dfnwW5LGTb2xMPDzeVWZZU=
Subject key identifier: 8E:E5:E9:6E:91:55:6B:4D:00:97:56:C2:F1:61:A7:0A:52:8F:55:23
Authority key identifier: 30:92:B1:17:06:2F:60:65:FA:A1:CD:FD:38:91:5E:4B:B9:C9:24:BB
Certificate issuer: /CN=3092b117062f6065faa1cdfd38915e4bb9c924bb
Certificate serial: 01953E44800428593C8E8AAE4EFD327090B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MJKxFwYvYGX6oc39OJFeS7nJJLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/e74b81-5ff7-4823-9267-0d3e662b0ee0/1/MJKxFwYvYGX6oc39OJFeS7nJJLs.mft
Manifest number: 0F4E
Signing time: Tue 25 Feb 2025 18:00:31 +0000
Manifest this update: Tue 25 Feb 2025 18:00:31 +0000
Manifest next update: Wed 26 Feb 2025 18:00:31 +0000
Files and hashes: 1: Df2biRKzI0GRqVwee9geZJPoqNE.roa (hash: niRdMj+wofGmmTCaPQzwp4KH6uD8D+ovTgho72qJUvQ=)
2: MJKxFwYvYGX6oc39OJFeS7nJJLs.crl (hash: d5uv7Dxn3EHASZX25kOW7OYRg75szYCIhsxuR7jfW+Y=)
3: dItGQTbmGZEaYwBU9Yq4YOVLqSI.roa (hash: szU14ZY7TnY09k1Q8QSiZL5j1zx2tfwKt9z7Z7fdfRU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:3e:44:80:04:28:59:3c:8e:8a:ae:4e:fd:32:70:90:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3092b117062f6065faa1cdfd38915e4bb9c924bb
Validity
Not Before: Feb 25 18:00:31 2025 GMT
Not After : Feb 26 18:00:31 2025 GMT
Subject: CN=8ee5e96e91556b4d009756c2f161a70a528f5523
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:72:24:9f:08:0e:ef:9d:6a:27:c5:34:06:fc:
de:b3:bf:cb:94:96:25:7b:f8:c8:68:fa:dd:ae:8c:
45:9a:ba:af:5e:08:ae:94:d3:59:01:e6:a0:79:c3:
61:1b:bf:3b:c0:96:29:85:0d:b1:f0:47:11:cd:04:
7d:31:18:04:eb:ad:22:9d:4c:c5:c0:db:6b:0c:c4:
01:b6:74:24:88:44:d7:2b:7f:3a:c4:4c:b2:e2:b8:
50:9f:93:3c:57:34:94:dd:4f:58:6e:77:97:a7:9b:
5a:de:e8:3a:59:5a:b4:86:19:69:f8:ca:a4:e3:05:
3a:2d:4d:d2:9c:c9:0d:41:68:7f:00:2e:1c:3c:c3:
8d:4c:bd:26:49:df:a0:b2:0d:12:ef:1f:c1:5c:43:
03:d0:63:b3:a6:44:5a:83:d8:8d:50:5f:3e:50:af:
c2:f9:1a:26:a9:af:e4:77:9e:65:46:0e:14:b0:c2:
ad:3e:de:29:79:6a:72:2e:d5:b9:a3:5c:b5:08:7d:
5b:84:a2:87:48:03:d2:0b:23:62:15:24:11:6b:40:
f8:23:4d:f0:f0:75:4f:f9:6f:3b:68:d9:aa:a6:89:
69:9c:0b:65:ef:52:ab:06:bc:1c:b8:09:dc:07:8a:
bc:77:ae:60:18:19:41:ee:23:04:f8:d7:43:0b:82:
7c:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:E5:E9:6E:91:55:6B:4D:00:97:56:C2:F1:61:A7:0A:52:8F:55:23
X509v3 Authority Key Identifier:
keyid:30:92:B1:17:06:2F:60:65:FA:A1:CD:FD:38:91:5E:4B:B9:C9:24:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MJKxFwYvYGX6oc39OJFeS7nJJLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e74b81-5ff7-4823-9267-0d3e662b0ee0/1/MJKxFwYvYGX6oc39OJFeS7nJJLs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e74b81-5ff7-4823-9267-0d3e662b0ee0/1/MJKxFwYvYGX6oc39OJFeS7nJJLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:2f:f5:3c:60:e4:fa:14:1c:b5:ab:0b:c3:1e:92:a5:73:c1:
42:ad:fc:a4:b2:a7:14:08:7a:ab:28:7d:ae:91:77:b7:35:09:
fd:f9:83:d5:5f:2d:c2:81:35:09:ee:54:18:c5:0a:79:61:8f:
2b:24:9c:e9:53:da:4f:25:b5:c6:92:f2:d1:3a:24:d8:d0:97:
49:be:4a:65:1f:54:9f:13:7f:fa:97:34:7b:dd:27:49:b8:50:
b4:b5:dc:0c:f4:f3:5c:26:bb:76:4b:f2:7c:b5:d0:c7:b5:b1:
6c:f5:f8:e5:bb:4a:1f:70:4d:15:7a:10:52:14:5e:cc:35:dd:
cc:86:ee:69:1e:46:98:be:01:f6:d4:8a:a9:c4:55:9f:a1:0d:
1e:db:8a:01:34:b1:43:ca:14:b8:55:f4:d9:6d:81:c1:c4:c2:
44:d3:87:2d:5f:6f:d8:13:48:7a:40:0e:dc:1f:0f:e0:08:c7:
a3:31:84:f0:ee:a9:30:3c:9a:01:7b:18:ed:51:9d:3e:01:d3:
0b:30:79:3b:69:dc:27:3c:fb:2a:13:28:7a:08:e5:c1:67:9e:
1e:74:5e:2f:af:ad:d7:d6:f6:5e:c6:8e:84:90:0e:01:b6:6c:
1f:bf:b8:8c:7f:1c:85:07:9c:1a:56:76:35:8a:a2:bf:80:47:
e1:44:a6:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 13:20:45 2025 by rpki-client