Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/badedf-d0e9-45a9-af75-10edb541e6ff/1/MGwIZtwlII5sB9SiHX2AULUI1qI.mft
File: MGwIZtwlII5sB9SiHX2AULUI1qI.mft (raw, json)
Hash identifier: uyX1rQNCLsm0+vaWRHbd2+zD8W0t694PczoW4tAoVe8=
Subject key identifier: 13:23:35:46:02:1C:39:13:FA:53:77:28:CE:09:F9:B3:B3:9B:AD:9C
Authority key identifier: 30:6C:08:66:DC:25:20:8E:6C:07:D4:A2:1D:7D:80:50:B5:08:D6:A2
Certificate issuer: /CN=306c0866dc25208e6c07d4a21d7d8050b508d6a2
Certificate serial: 0195E046CC8BE181DFD9FBCE2A1EDB8D3D82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MGwIZtwlII5sB9SiHX2AULUI1qI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/badedf-d0e9-45a9-af75-10edb541e6ff/1/MGwIZtwlII5sB9SiHX2AULUI1qI.mft
Manifest number: 1336
Signing time: Sat 29 Mar 2025 05:01:31 +0000
Manifest this update: Sat 29 Mar 2025 05:01:31 +0000
Manifest next update: Sun 30 Mar 2025 05:01:31 +0000
Files and hashes: 1: 0cSUdPzh_fyOTfC0ruB0gTg1QhM.roa (hash: wUgynLVwcF9qr8K69Rsxkk1YVCBtq1S8/W1PvBOd+ok=)
2: 6ijDtJkuoccCgLkguN9W1JJhdPo.roa (hash: Sp0vA+9FLAdG8kzazXtCjmipaXXNSCP/zgC375qVZ5o=)
3: DhdGK18Qr8BfEi425qb4XqU3Df0.roa (hash: zUZN1xRmcwh2/G+LSnUGvmnpV/nEFzaIhdcZknHnKqM=)
4: HdR6Ah0Qe32r7472JEBtQ7R-uic.roa (hash: 9q8qH00PICKWGR7GNHvqSbuGck7QEOPOmn1zpnijT28=)
5: MGwIZtwlII5sB9SiHX2AULUI1qI.crl (hash: uhdnC9lqTZ12dxFQg8LJXq/GKPDaqDmqfIktlQor6fU=)
6: TgvbB6i4HXWnjLNcKegQywUTDJ0.roa (hash: YcgfPOv/+fj5b6yQFbK2Xl9gZETkgOC07GVbs5vfuds=)
7: YJWzlQkM6ftNHV4yjRuuX05jZgk.roa (hash: 7ihFcpvO1ZNzg+G5DeJYt7AlezmKaK/DCjnqfua0DrQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:46:cc:8b:e1:81:df:d9:fb:ce:2a:1e:db:8d:3d:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=306c0866dc25208e6c07d4a21d7d8050b508d6a2
Validity
Not Before: Mar 29 05:01:31 2025 GMT
Not After : Mar 30 05:01:31 2025 GMT
Subject: CN=13233546021c3913fa537728ce09f9b3b39bad9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:9c:0c:a7:d6:1c:8d:e6:ca:c5:a5:1b:a3:62:
c4:5f:a3:35:82:62:50:54:82:7e:5b:63:6e:c7:e9:
67:5f:23:4c:ff:b1:dc:eb:e0:93:c9:92:ba:22:ff:
76:cd:a5:d5:4f:00:49:84:f6:c2:1b:8d:6d:32:37:
be:ea:73:a4:71:77:33:0a:23:27:8c:dd:2f:38:60:
a1:0b:76:b8:91:26:6d:27:01:6a:38:85:4c:b7:8a:
d0:20:31:a7:e3:d2:ad:14:c8:aa:f4:fa:2f:fe:f5:
65:d8:4f:a7:17:7d:03:bc:4c:30:43:27:7d:a3:c5:
c6:ed:94:0f:2d:f4:31:b1:bf:eb:c1:b7:29:f8:a6:
e0:75:43:d9:6c:5e:29:ff:e3:06:a2:3d:ae:5a:bd:
ee:1a:14:b9:eb:11:16:54:2b:c3:e8:20:77:ae:b1:
60:8b:75:b8:c4:1c:9c:36:ae:08:0c:52:24:32:b0:
e9:55:4f:fa:79:17:ec:1b:0b:9f:5d:99:98:6d:4e:
27:6d:ae:d2:05:18:1b:da:f3:d2:62:56:be:91:06:
10:23:3c:5c:3e:63:cb:e9:3a:24:bc:18:ed:93:0e:
22:70:cc:c9:a0:2d:71:cb:a6:6e:cc:90:30:ee:31:
65:1d:4c:d4:30:17:ce:4c:d6:c2:21:0b:45:3d:ab:
ce:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:23:35:46:02:1C:39:13:FA:53:77:28:CE:09:F9:B3:B3:9B:AD:9C
X509v3 Authority Key Identifier:
keyid:30:6C:08:66:DC:25:20:8E:6C:07:D4:A2:1D:7D:80:50:B5:08:D6:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGwIZtwlII5sB9SiHX2AULUI1qI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/badedf-d0e9-45a9-af75-10edb541e6ff/1/MGwIZtwlII5sB9SiHX2AULUI1qI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/badedf-d0e9-45a9-af75-10edb541e6ff/1/MGwIZtwlII5sB9SiHX2AULUI1qI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:08:44:de:c9:b8:a0:b5:27:d0:2d:ce:f2:6e:72:bd:66:aa:
1c:94:d9:0d:8e:34:ee:38:a0:df:f6:4d:35:7a:16:05:e7:db:
6e:cd:ab:b1:96:61:c6:a8:1f:9e:47:df:85:d5:9f:ef:04:a0:
6e:ff:42:d7:f8:dd:05:95:75:b8:82:98:9c:35:22:8c:6a:f3:
3b:d8:d5:2d:a2:09:82:d3:f7:45:e9:a8:28:bd:56:16:b0:bc:
05:a5:82:d3:5b:a0:d2:b2:99:5b:ff:9c:f5:cd:02:21:69:a4:
13:f7:66:d8:12:74:81:1e:62:b9:a8:53:33:c7:74:b9:b7:68:
0a:0f:3d:eb:1d:04:ec:3a:2a:90:78:78:7b:23:f3:d0:a8:62:
78:89:2d:8e:cf:eb:e4:b9:45:d2:47:d9:fe:50:05:ba:53:4e:
ac:e1:70:22:f2:bf:6d:c4:1a:5f:ac:b8:49:e6:39:df:0d:e0:
b5:f6:6f:1c:f8:72:ac:c0:3e:00:7f:6a:b5:2a:07:26:77:68:
20:7a:28:f1:e5:9c:dc:70:5c:89:ab:f6:18:64:9f:76:90:d1:
67:96:80:75:da:3c:1a:e6:2b:74:14:b4:0e:50:d2:a9:20:67:
83:2f:94:7b:d7:c2:92:1f:3d:2b:9e:28:eb:05:d8:c4:3f:d6:
1e:20:65:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:52:41 2025 by rpki-client