Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/dfaa1d-c183-413b-b52a-4bab9f07e397/1/MIBAAletBvcQp6t-A5w7net3QNQ.mft
File: MIBAAletBvcQp6t-A5w7net3QNQ.mft (raw, json)
Hash identifier: Lp/Sa5qPSLzmlQSwhfB1B1qYRfX/dT/WBshgmHf+aKs=
Subject key identifier: AE:F5:24:0F:51:F6:04:04:61:F4:5F:59:4D:3D:FA:AC:86:4C:C0:DC
Authority key identifier: 30:80:40:02:57:AD:06:F7:10:A7:AB:7E:03:9C:3B:9D:EB:77:40:D4
Certificate issuer: /CN=3080400257ad06f710a7ab7e039c3b9deb7740d4
Certificate serial: 019578A20F0011F2F95A0E549898C2E594E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MIBAAletBvcQp6t-A5w7net3QNQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/dfaa1d-c183-413b-b52a-4bab9f07e397/1/MIBAAletBvcQp6t-A5w7net3QNQ.mft
Manifest number: 47
Signing time: Sun 09 Mar 2025 02:00:41 +0000
Manifest this update: Sun 09 Mar 2025 02:00:41 +0000
Manifest next update: Mon 10 Mar 2025 02:00:41 +0000
Files and hashes: 1: MIBAAletBvcQp6t-A5w7net3QNQ.crl (hash: 9X6sa+It8CSyv5M5Ed2EGH9MtPs9dsqLmrR4Y7rwC40=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:78:a2:0f:00:11:f2:f9:5a:0e:54:98:98:c2:e5:94:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3080400257ad06f710a7ab7e039c3b9deb7740d4
Validity
Not Before: Mar 9 02:00:41 2025 GMT
Not After : Mar 10 02:00:41 2025 GMT
Subject: CN=aef5240f51f6040461f45f594d3dfaac864cc0dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ae:2b:76:21:fb:90:ce:3e:af:c2:aa:05:ed:
a6:7f:d7:17:a2:fc:f3:fd:ef:0b:59:83:62:be:59:
c0:6f:2b:5f:3c:4e:a9:b7:1e:3f:7d:0a:92:e8:bd:
22:de:0a:9a:71:8d:89:fe:ab:be:31:98:be:8c:7d:
53:a2:54:ca:4f:36:8e:7b:1c:a8:f7:1c:8e:72:ef:
4f:62:36:5b:46:ea:56:7f:11:90:1b:2f:44:45:7b:
f3:1a:3a:4d:14:83:af:34:f9:1b:c2:89:f5:66:58:
0b:8e:59:3c:4c:eb:4f:01:69:d6:d2:18:87:72:65:
ba:5a:3b:05:a6:29:4a:41:d3:3b:dc:d0:84:11:12:
e8:79:e8:52:4c:5e:62:1a:a7:64:28:81:fd:47:65:
d8:80:0f:c0:01:65:8c:6e:dc:c7:68:ad:51:96:3c:
1d:ef:15:77:75:aa:56:97:3a:64:c6:17:87:a0:92:
ea:1c:97:1e:0a:c0:6d:23:ae:2f:15:2d:56:cc:e3:
2f:64:af:79:06:e4:ba:d9:49:6d:83:56:fc:fb:ec:
63:d6:f5:0c:20:f1:80:3b:c1:a5:fa:e6:49:03:c3:
1f:c8:08:5b:48:f4:35:4d:54:01:21:b4:c1:99:1f:
7a:14:5b:d7:c6:cf:b8:c4:b4:3e:62:8a:a4:e7:df:
f9:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:F5:24:0F:51:F6:04:04:61:F4:5F:59:4D:3D:FA:AC:86:4C:C0:DC
X509v3 Authority Key Identifier:
keyid:30:80:40:02:57:AD:06:F7:10:A7:AB:7E:03:9C:3B:9D:EB:77:40:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MIBAAletBvcQp6t-A5w7net3QNQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/dfaa1d-c183-413b-b52a-4bab9f07e397/1/MIBAAletBvcQp6t-A5w7net3QNQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/dfaa1d-c183-413b-b52a-4bab9f07e397/1/MIBAAletBvcQp6t-A5w7net3QNQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:73:cf:e0:17:09:80:91:7e:46:99:47:48:70:61:2f:c2:ac:
c2:cc:89:8e:9e:82:2e:6a:68:ff:24:a5:0f:e6:23:79:76:88:
bd:ed:0c:17:ba:9a:76:07:97:c0:ba:60:8d:8f:bd:b7:f9:f7:
df:0e:3c:b0:da:e0:8a:eb:c2:4b:92:59:ce:87:6c:20:ad:4e:
ca:e3:aa:0b:02:34:f5:da:bf:47:f0:1f:fd:52:06:8a:77:54:
ea:64:ed:21:46:40:aa:6f:80:62:ca:5e:9a:d2:60:35:8e:43:
c3:35:3f:f4:68:b9:89:6e:4b:78:08:9a:09:fa:7a:0a:19:94:
5c:19:05:cd:09:a5:04:b4:f4:fd:13:16:04:ef:0f:a7:cf:1c:
c0:d6:96:38:5c:30:59:ab:31:10:13:86:53:2e:8c:fe:ec:4d:
f1:9b:a8:97:3c:3d:45:80:ec:05:c1:56:6f:3b:0f:62:09:b5:
e4:2e:dc:ba:1b:0e:68:6c:f2:d9:91:81:73:a1:7d:21:08:ca:
1f:4d:1b:19:19:5f:5f:b2:de:67:df:46:2a:f0:43:1f:3c:78:
e7:54:f6:31:f9:c6:ff:38:ea:12:63:d6:41:d3:17:a8:40:bd:
ec:b5:34:2c:77:50:10:c0:c0:69:9a:bf:53:cc:2f:f9:a0:93:
44:74:14:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 08:18:20 2025 by rpki-client