Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/Mgax0ge2XA69PyP6djABbYe0E0k.mft
File: Mgax0ge2XA69PyP6djABbYe0E0k.mft (raw, json)
Hash identifier: abZcnECrhuMXtr5ozVtBoNZZalAi///Nh0yasu/G5PE=
Subject key identifier: A4:4C:B5:1D:39:FA:4A:AC:E9:1E:59:12:AD:2C:E6:2A:D6:A1:4F:4B
Authority key identifier: 32:06:B1:D2:07:B6:5C:0E:BD:3F:23:FA:76:30:01:6D:87:B4:13:49
Certificate issuer: /CN=3206b1d207b65c0ebd3f23fa7630016d87b41349
Certificate serial: 0195E046C92334C8CD2D585F841CD1D26058
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mgax0ge2XA69PyP6djABbYe0E0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/Mgax0ge2XA69PyP6djABbYe0E0k.mft
Manifest number: 04E0
Signing time: Sat 29 Mar 2025 05:01:29 +0000
Manifest this update: Sat 29 Mar 2025 05:01:29 +0000
Manifest next update: Sun 30 Mar 2025 05:01:29 +0000
Files and hashes: 1: M2KDR8dr7-7ZyhSIDyzwELKYUdM.roa (hash: p4F925/VSgNOhwfLh+ZxgpZFhtfFkVdXlw/7VfsIDVw=)
2: Mgax0ge2XA69PyP6djABbYe0E0k.crl (hash: MDI/NFCyDoIXio4d0k9NCKhp8nr6BbuHi6371JGdODo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:46:c9:23:34:c8:cd:2d:58:5f:84:1c:d1:d2:60:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3206b1d207b65c0ebd3f23fa7630016d87b41349
Validity
Not Before: Mar 29 05:01:29 2025 GMT
Not After : Mar 30 05:01:29 2025 GMT
Subject: CN=a44cb51d39fa4aace91e5912ad2ce62ad6a14f4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b2:1d:26:68:0f:3a:11:ff:72:45:4f:36:b6:
a1:c3:7a:f3:6a:35:92:77:dd:5f:27:ca:be:f6:83:
4b:3e:9d:15:7e:29:81:7e:69:c0:52:11:18:1e:5c:
1a:fb:80:ac:e1:23:53:97:9c:2c:0b:55:8a:af:9f:
80:0e:e5:bc:75:a9:f8:c5:d9:b8:8c:07:35:2b:d5:
36:35:64:98:a9:ee:6d:c2:29:35:7c:c3:ce:72:37:
ba:cf:41:13:e0:ab:bc:d0:34:30:84:eb:0f:0c:78:
47:18:ed:a4:5d:fe:e2:be:7c:99:24:63:11:40:fc:
ed:aa:5e:eb:22:0f:4e:82:b2:82:32:d3:e3:38:9f:
93:b2:2c:5e:47:b0:b2:87:b3:0a:2e:83:99:65:7e:
ac:c7:c7:90:2b:de:84:cb:d6:79:4f:06:5a:a1:e7:
1f:49:11:dc:31:4b:fc:f5:23:e8:2d:19:a6:f1:83:
ae:d9:f0:16:31:16:f4:fa:0f:ed:93:12:2e:f7:41:
02:1f:53:2c:4a:40:30:f0:30:73:bb:f6:4c:58:fd:
37:75:56:d8:d2:20:5a:d9:94:e8:ce:af:96:6a:75:
d6:ac:76:11:70:1c:dc:7b:cd:b5:59:37:ab:94:70:
a0:97:5e:b4:cb:fa:97:32:4f:3c:a2:b9:c9:76:3d:
ba:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:4C:B5:1D:39:FA:4A:AC:E9:1E:59:12:AD:2C:E6:2A:D6:A1:4F:4B
X509v3 Authority Key Identifier:
keyid:32:06:B1:D2:07:B6:5C:0E:BD:3F:23:FA:76:30:01:6D:87:B4:13:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mgax0ge2XA69PyP6djABbYe0E0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/Mgax0ge2XA69PyP6djABbYe0E0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/Mgax0ge2XA69PyP6djABbYe0E0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:cc:51:cf:3d:57:0a:29:b2:f6:de:fa:32:f4:62:d6:b4:4a:
0f:9a:48:c1:64:45:39:e7:47:bb:21:72:77:90:70:91:fb:fb:
57:61:12:bb:57:94:15:a3:d4:f8:40:61:ec:d8:47:3c:e4:21:
e3:fe:66:ec:90:28:bb:71:95:fb:3a:a7:02:6e:08:5d:4f:8a:
5b:19:40:2e:1f:8c:5f:3d:40:7a:90:a5:07:18:c4:26:a1:a5:
55:7d:69:5f:4b:3e:f0:68:7e:03:cf:cf:c0:89:1b:93:37:bc:
ee:1b:f8:41:ad:b0:9c:54:43:65:ba:43:96:f2:e0:7d:a1:9f:
a3:5e:e9:f4:78:79:e4:f1:82:75:60:80:34:c1:37:8f:1f:1a:
e6:95:6b:d3:5f:13:34:a9:ff:79:83:78:b4:32:53:7c:53:bd:
18:f9:6d:d6:a6:b9:89:cb:fa:50:e7:0c:3c:f8:e0:1c:dd:18:
d2:d0:ae:82:83:f2:a0:b0:0d:36:a3:38:a3:e0:b6:f5:ad:c7:
e8:b8:67:e9:a6:3d:cb:9c:3d:99:f8:16:a5:d2:f9:11:ac:ca:
5e:a7:46:6b:dc:7d:d9:01:4c:dc:6f:20:04:7b:5c:1e:11:c7:
78:05:87:6c:f0:8e:83:b7:ea:ca:9a:79:6e:1b:06:0a:7c:35:
ab:01:21:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXgRskjNMjNLVhfhBzR0mBYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyMDZiMWQyMDdiNjVjMGViZDNmMjNmYTc2MzAwMTZkODdi
NDEzNDkwHhcNMjUwMzI5MDUwMTI5WhcNMjUwMzMwMDUwMTI5WjAzMTEwLwYDVQQD
EyhhNDRjYjUxZDM5ZmE0YWFjZTkxZTU5MTJhZDJjZTYyYWQ2YTE0ZjRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz7IdJmgPOhH/ckVPNrahw3rzajWS
d91fJ8q+9oNLPp0VfimBfmnAUhEYHlwa+4Cs4SNTl5wsC1WKr5+ADuW8dan4xdm4
jAc1K9U2NWSYqe5twik1fMPOcje6z0ET4Ku80DQwhOsPDHhHGO2kXf7ivnyZJGMR
QPztql7rIg9OgrKCMtPjOJ+TsixeR7Cyh7MKLoOZZX6sx8eQK96Ey9Z5TwZaoecf
SRHcMUv89SPoLRmm8YOu2fAWMRb0+g/tkxIu90ECH1MsSkAw8DBzu/ZMWP03dVbY
0iBa2ZTozq+WanXWrHYRcBzce821WTerlHCgl160y/qXMk88ornJdj26lQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKRMtR05+kqs6R5ZEq0s5irWoU9LMB8GA1UdIwQY
MBaAFDIGsdIHtlwOvT8j+nYwAW2HtBNJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWdheDBnZTJYQTY5UHlQNmRqQUJiWWUwRTBrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy82OTNmZTItZmJhZi00MzBmLThhMjIt
MWJhZTkzY2ZhMDc4LzEvTWdheDBnZTJYQTY5UHlQNmRqQUJiWWUwRTBrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy82OTNmZTItZmJhZi00MzBmLThhMjItMWJhZTkzY2ZhMDc4
LzEvTWdheDBnZTJYQTY5UHlQNmRqQUJiWWUwRTBrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYMxRzz1X
Cimy9t76MvRi1rRKD5pIwWRFOedHuyFyd5Bwkfv7V2ESu1eUFaPU+EBh7NhHPOQh
4/5m7JAou3GV+zqnAm4IXU+KWxlALh+MXz1AepClBxjEJqGlVX1pX0s+8Gh+A8/P
wIkbkze87hv4Qa2wnFRDZbpDlvLgfaGfo17p9Hh55PGCdWCANME3jx8a5pVr018T
NKn/eYN4tDJTfFO9GPlt1qa5icv6UOcMPPjgHN0Y0tCugoPyoLANNqM4o+C29a3H
6Lhn6aY9y5w9mfgWpdL5EazKXqdGa9x92QFM3G8gBHtcHhHHeAWHbPCOg7fqypp5
bhsGCnw1qwEhGw==
-----END CERTIFICATE-----
Generated at Sun Apr 6 12:02:08 2025 by rpki-client