Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/267ead-f26a-4b12-9abb-f1d6597aba7e/1/MQg6vX-XmWMam72oo09EIwH8bm8.mft
File: MQg6vX-XmWMam72oo09EIwH8bm8.mft (raw, json)
Hash identifier: 9Hz3canZ0szQwhmsMXJqhkHO4aCe4f4wnix8e6+N12A=
Subject key identifier: B8:EB:AB:2C:5F:D4:28:23:DC:28:A9:A6:59:AD:72:9A:A5:D6:E9:74
Authority key identifier: 31:08:3A:BD:7F:97:99:63:1A:9B:BD:A8:A3:4F:44:23:01:FC:6E:6F
Certificate issuer: /CN=31083abd7f9799631a9bbda8a34f442301fc6e6f
Certificate serial: 0193CD9FFD58D3D4B72A201D8BAF71F8CE76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MQg6vX-XmWMam72oo09EIwH8bm8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/267ead-f26a-4b12-9abb-f1d6597aba7e/1/MQg6vX-XmWMam72oo09EIwH8bm8.mft
Manifest number: 0BA1
Signing time: Mon 16 Dec 2024 04:00:34 +0000
Manifest this update: Mon 16 Dec 2024 04:00:34 +0000
Manifest next update: Tue 17 Dec 2024 04:00:34 +0000
Files and hashes: 1: MQg6vX-XmWMam72oo09EIwH8bm8.crl (hash: FQ+47WsZ+vTrtlN96UXDbor1JOj10WY1XQvukESjZOw=)
2: c8BLxRwyhNHXKOZVC0aQH4d4IYY.roa (hash: jazhxGuZxgPfFQ9flUW0RIJQ5NUtZGOz9mXRaoj/1lw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:cd:9f:fd:58:d3:d4:b7:2a:20:1d:8b:af:71:f8:ce:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31083abd7f9799631a9bbda8a34f442301fc6e6f
Validity
Not Before: Dec 16 04:00:34 2024 GMT
Not After : Dec 17 04:00:34 2024 GMT
Subject: CN=b8ebab2c5fd42823dc28a9a659ad729aa5d6e974
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:1e:8e:f2:ee:4d:b2:85:e1:ac:40:a8:28:dc:
78:94:1c:d4:e9:50:af:75:17:54:36:14:5b:b9:ba:
be:65:50:3c:cc:23:92:85:84:d0:ac:0b:d0:0c:bc:
bb:e7:c1:b6:3c:06:af:c4:e9:be:38:5f:72:53:ad:
9b:d2:ce:51:5a:6b:ea:36:d3:51:1c:f3:19:54:08:
3a:4c:22:52:58:80:6e:de:bb:de:da:a4:de:7c:b7:
b1:de:ff:52:45:d3:58:a2:97:d2:23:39:55:87:ce:
b4:02:8a:60:85:84:c9:14:bb:7d:95:96:92:a6:a5:
1d:3e:70:1e:48:24:ee:f6:32:e5:32:ee:e9:0c:76:
db:10:de:90:a5:d2:fd:3f:4e:90:27:a8:0a:84:8d:
cc:58:12:07:a7:f4:5b:b6:77:4a:11:a8:b9:bc:05:
dd:8b:b2:a6:a6:bc:24:78:72:ae:b8:8b:96:2c:1b:
4d:f3:e2:fa:20:2e:c6:ea:1e:71:7e:0b:8b:7b:ac:
aa:05:84:8b:d8:38:b6:de:96:4f:c1:4d:61:0d:82:
c6:66:15:cf:40:08:b3:07:51:a0:22:60:3b:ff:d7:
ce:3a:1c:f2:42:fb:dc:a0:a8:3b:d1:ff:db:d0:d7:
b9:3b:3a:57:e8:3f:ab:1c:d1:c9:fb:29:f0:bb:9d:
27:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:EB:AB:2C:5F:D4:28:23:DC:28:A9:A6:59:AD:72:9A:A5:D6:E9:74
X509v3 Authority Key Identifier:
keyid:31:08:3A:BD:7F:97:99:63:1A:9B:BD:A8:A3:4F:44:23:01:FC:6E:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MQg6vX-XmWMam72oo09EIwH8bm8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/267ead-f26a-4b12-9abb-f1d6597aba7e/1/MQg6vX-XmWMam72oo09EIwH8bm8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/267ead-f26a-4b12-9abb-f1d6597aba7e/1/MQg6vX-XmWMam72oo09EIwH8bm8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:36:46:30:99:dc:84:74:63:62:7b:95:0b:55:1d:5c:ef:56:
3c:32:99:37:51:cb:ff:60:66:5a:44:28:98:5d:af:de:1e:e3:
31:c2:1f:25:4a:d6:fe:d4:ce:c7:02:86:70:f1:a5:22:51:bb:
17:d3:ff:e6:23:67:e6:c9:3b:ff:8e:68:16:5d:cb:59:c2:92:
aa:45:35:fa:54:95:c8:ce:6c:5f:f6:72:58:64:07:11:c4:a4:
1c:4f:b1:83:b6:b3:21:0a:37:d3:a0:99:cd:f7:f8:d5:cf:6f:
38:f4:7e:09:7f:6b:eb:40:05:c0:61:4b:48:9b:51:e8:75:3e:
0f:54:73:54:53:0f:c8:31:20:00:58:d5:a3:b9:7b:41:76:d1:
4a:62:cd:46:85:f3:1f:a2:e7:48:01:5b:52:5a:ee:38:ee:3d:
68:c2:4b:d5:05:1e:30:a5:56:fe:74:2f:e5:c7:6f:cc:40:57:
dd:55:e8:a8:d8:90:c7:1e:fb:0a:e7:c8:1e:bc:84:7e:31:80:
b3:63:89:48:77:58:90:f5:a9:80:0a:1c:4c:9a:82:40:29:5b:
fc:1e:7d:fd:fd:e2:e5:fd:6b:50:0c:24:b2:42:c4:e7:3d:86:
98:1a:34:e1:51:72:87:2e:88:ba:f9:cc:16:d4:64:f8:0c:1f:
92:5c:07:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:36:38 2025 by rpki-client