Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/fe3d1a-ec07-4033-b40c-ca24361e7e4d/1/MRhnu6fuzPKwTBIquOws8ecvxeo.mft
File: MRhnu6fuzPKwTBIquOws8ecvxeo.mft (raw, json)
Hash identifier: ZgVIUDivjtDNTXVYcs0adtoXeItHLNVUKcj2dL8lwHY=
Subject key identifier: 09:B9:04:9A:FB:8F:ED:AB:0F:A3:AA:52:51:B0:39:4D:74:87:BC:A0
Authority key identifier: 31:18:67:BB:A7:EE:CC:F2:B0:4C:12:2A:B8:EC:2C:F1:E7:2F:C5:EA
Certificate issuer: /CN=311867bba7eeccf2b04c122ab8ec2cf1e72fc5ea
Certificate serial: 0195E0EB221FD00737003EC11A863BC0C8B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MRhnu6fuzPKwTBIquOws8ecvxeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/fe3d1a-ec07-4033-b40c-ca24361e7e4d/1/MRhnu6fuzPKwTBIquOws8ecvxeo.mft
Manifest number: 097C
Signing time: Sat 29 Mar 2025 08:01:00 +0000
Manifest this update: Sat 29 Mar 2025 08:01:00 +0000
Manifest next update: Sun 30 Mar 2025 08:01:00 +0000
Files and hashes: 1: 9LPqpkIeNIaDSjjo7AOyAYTyhLc.roa (hash: soTAduWcheeUJCzzhhLzacDsCRQw6shBkj/UDzhlxwg=)
2: MRhnu6fuzPKwTBIquOws8ecvxeo.crl (hash: IfHboPYspqUN3irCUkUlBom/p+4enHqgbkOJgn6zTpU=)
3: Oweo7u97UcaDvU5cgvfnY2HVBiA.roa (hash: 9UVd3DPB1mzF9n8MAqzmlxVsZVW6nxguJq5SMTbJCP4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:eb:22:1f:d0:07:37:00:3e:c1:1a:86:3b:c0:c8:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=311867bba7eeccf2b04c122ab8ec2cf1e72fc5ea
Validity
Not Before: Mar 29 08:01:00 2025 GMT
Not After : Mar 30 08:01:00 2025 GMT
Subject: CN=09b9049afb8fedab0fa3aa5251b0394d7487bca0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:25:c8:4c:aa:5f:d4:de:98:4d:11:d3:fa:68:
21:2b:7d:fc:64:a7:70:c1:08:8c:db:b6:9f:41:66:
11:08:d2:42:c0:35:26:40:1e:aa:e6:37:c6:c2:bf:
54:ae:82:1d:4c:8e:2f:17:5c:5c:25:22:82:5f:8d:
83:cd:08:07:f9:74:65:35:63:9b:51:85:80:b6:4e:
07:8f:07:e8:29:f1:5f:c3:94:65:a2:e6:82:ee:fe:
fe:10:b5:68:44:e2:ba:62:a8:29:52:61:dd:26:be:
a8:af:db:86:f9:ee:7e:6a:53:e3:d5:25:1b:73:6a:
a9:4b:ec:ef:f8:6a:db:e7:7d:49:3f:07:fc:ad:83:
8b:f6:d6:8d:e5:0e:29:49:48:48:c6:ef:87:19:11:
d8:37:1e:a2:20:1e:19:55:30:aa:18:12:28:cc:fe:
a0:51:61:eb:51:41:74:dc:41:c1:68:d0:c4:8f:82:
97:dc:bb:e3:72:8d:33:78:33:7c:c5:06:e2:fb:7a:
96:a2:33:87:09:f9:8f:24:5c:3a:60:d4:93:57:1c:
3d:1c:6e:e1:04:0e:7b:27:8b:cd:da:f0:77:b1:32:
16:19:82:a7:d9:19:7a:71:fb:c8:9c:9e:b7:c5:37:
ec:d4:83:8e:a4:e3:e8:d2:a9:dc:26:b9:c1:bf:bf:
b5:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:B9:04:9A:FB:8F:ED:AB:0F:A3:AA:52:51:B0:39:4D:74:87:BC:A0
X509v3 Authority Key Identifier:
keyid:31:18:67:BB:A7:EE:CC:F2:B0:4C:12:2A:B8:EC:2C:F1:E7:2F:C5:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MRhnu6fuzPKwTBIquOws8ecvxeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/fe3d1a-ec07-4033-b40c-ca24361e7e4d/1/MRhnu6fuzPKwTBIquOws8ecvxeo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/fe3d1a-ec07-4033-b40c-ca24361e7e4d/1/MRhnu6fuzPKwTBIquOws8ecvxeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:b1:93:bb:41:7c:e8:39:45:eb:a1:4f:9f:92:aa:69:d9:a2:
0c:3d:62:0e:ba:42:f6:2b:15:70:8a:3e:5b:b1:40:0a:73:f1:
b8:8d:7b:7b:21:9b:e9:95:4f:8c:97:ff:70:a5:8c:f6:03:90:
62:f9:a0:ef:59:7e:31:05:3e:68:bb:c6:a2:88:e3:57:3a:81:
88:24:77:ee:f8:31:01:f2:57:c0:f4:35:de:38:a2:52:71:8d:
42:d8:46:53:2a:c6:f5:96:ef:47:90:8e:4a:41:05:30:2c:7a:
12:b5:04:e8:31:ec:be:4b:f3:88:5e:72:85:88:4b:c9:d2:83:
3d:b9:19:2c:c9:2b:6c:cf:ca:fe:40:8e:c7:4c:62:3b:50:f4:
ce:0c:15:59:76:07:b6:08:b8:0d:e6:76:7d:50:39:95:88:01:
e8:db:5e:9c:69:87:86:32:0c:c9:9b:1f:b1:40:a2:4b:3c:98:
3c:c9:70:98:49:f1:5d:1a:76:8e:93:41:82:a2:dc:a4:c7:fb:
0e:19:cb:3b:35:6a:1f:f5:7b:55:d5:c1:d4:c6:16:73:51:23:
ed:03:36:d8:60:bc:15:41:b3:c9:09:09:c5:2c:b6:b0:98:9c:
47:f3:b0:13:de:49:e8:40:c5:52:38:b5:cf:22:fe:95:3a:83:
a5:e6:41:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 21:07:48 2025 by rpki-client