Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/fbad19-c87c-4f30-b0b6-e57163d41359/1/MCX--cpkBFgtGnTaf4u-krACgqo.mft
File: MCX--cpkBFgtGnTaf4u-krACgqo.mft (raw, json)
Hash identifier: L2ieXKdZghyTNY3CAxwiG3Y/309SzNtHJIM3cIcOEPI=
Subject key identifier: C1:AC:0C:DF:D9:5C:A6:32:C9:59:D2:7D:85:E0:3B:A6:6E:EA:DF:F4
Authority key identifier: 30:25:FE:F9:CA:64:04:58:2D:1A:74:DA:7F:8B:BE:92:B0:02:82:AA
Certificate issuer: /CN=3025fef9ca6404582d1a74da7f8bbe92b00282aa
Certificate serial: 018C8AF6AF316E2F601AC8C2A3DA5D65CB42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MCX--cpkBFgtGnTaf4u-krACgqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/fbad19-c87c-4f30-b0b6-e57163d41359/1/MCX--cpkBFgtGnTaf4u-krACgqo.mft
Manifest number: 0FEB
Signing time: Thu 21 Dec 2023 06:01:11 +0000
Manifest this update: Thu 21 Dec 2023 06:01:11 +0000
Manifest next update: Fri 22 Dec 2023 06:01:11 +0000
Files and hashes: 1: F2EUK0eBYJiTkkNQ8yHUtmMrXac.roa (hash: 0nwUrmfdZ1yd3Dow/uQnz7VUMfL2wmcpsXF0ja0I5Mw=)
2: KVNoG-NSey3xHFUpil3iLHxeYPs.roa (hash: antpbhFxB+bPqxmd39yyQFSOSW81XNkJf6FkVKhTPC8=)
3: MCX--cpkBFgtGnTaf4u-krACgqo.crl (hash: dYx+m3vYDy1nthFfXaV82dcOFMdHHbBBTi4IbfVVWNk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:8a:f6:af:31:6e:2f:60:1a:c8:c2:a3:da:5d:65:cb:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3025fef9ca6404582d1a74da7f8bbe92b00282aa
Validity
Not Before: Dec 21 06:01:11 2023 GMT
Not After : Dec 22 06:01:11 2023 GMT
Subject: CN=c1ac0cdfd95ca632c959d27d85e03ba66eeadff4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:60:ec:63:12:d2:4e:69:61:4f:e7:f8:79:19:
5c:ab:21:e4:48:f5:54:34:7d:80:b1:4c:c8:29:44:
35:18:de:09:8a:a4:56:46:2a:5d:4f:e9:56:ed:8b:
97:a9:5c:ee:94:c0:df:28:34:18:4e:19:c9:a1:73:
36:14:cf:55:02:cb:1d:77:50:e4:9a:91:67:b4:71:
65:c8:74:ca:ed:e8:85:f7:b4:23:a9:ae:15:46:28:
be:cb:2d:7f:f1:55:9f:7e:85:08:5a:43:bd:c9:1d:
fb:b3:63:72:4b:ec:f0:e6:ff:df:1f:32:4a:8a:8f:
20:c6:fe:25:9a:c3:41:9d:a1:45:9b:f5:ac:62:9b:
76:8c:43:75:6f:b7:c2:b2:de:a5:d5:06:1d:01:37:
56:1f:ed:c6:5e:e3:f3:f9:f0:78:c2:ee:bf:76:01:
4c:27:eb:a3:88:8c:6c:a7:5d:e6:30:e8:0f:5f:27:
0e:84:bd:41:d2:96:12:bc:97:6d:98:86:ce:b5:aa:
20:ec:85:37:1b:62:a2:75:fb:83:b2:04:0a:25:00:
7c:fb:4e:1c:4b:95:96:43:e2:42:88:0f:31:23:c5:
06:86:cf:68:06:55:90:4b:3c:cf:c0:ab:c7:a0:35:
d0:35:e6:d9:91:2f:f3:52:d3:15:10:f6:59:fd:e5:
9f:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:AC:0C:DF:D9:5C:A6:32:C9:59:D2:7D:85:E0:3B:A6:6E:EA:DF:F4
X509v3 Authority Key Identifier:
keyid:30:25:FE:F9:CA:64:04:58:2D:1A:74:DA:7F:8B:BE:92:B0:02:82:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MCX--cpkBFgtGnTaf4u-krACgqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/fbad19-c87c-4f30-b0b6-e57163d41359/1/MCX--cpkBFgtGnTaf4u-krACgqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/fbad19-c87c-4f30-b0b6-e57163d41359/1/MCX--cpkBFgtGnTaf4u-krACgqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:c3:72:8b:0c:ca:f3:e9:50:22:01:6a:ba:cf:92:df:22:87:
ce:9b:2f:98:5c:62:26:ef:fb:bb:82:a7:46:a1:b2:0c:fb:57:
47:a6:d1:ef:d2:ca:c6:e5:89:3b:61:a5:2f:f8:61:d3:92:09:
d8:ca:f6:07:09:67:e3:15:9b:8e:5c:db:79:00:17:b3:79:ed:
f2:06:26:90:f2:9d:44:88:02:5b:6f:99:82:23:6e:e2:b6:01:
de:0d:d0:76:16:a3:cf:45:75:0c:68:0a:8a:01:fe:b2:b4:32:
b3:7e:f0:3d:4d:4e:1c:c9:86:fa:73:4a:19:eb:78:ae:dc:f9:
3a:b0:bf:fe:a9:ae:b2:db:b7:c3:2b:6d:1c:74:c8:64:14:a2:
19:f2:d5:08:8a:a8:c4:d1:cf:f3:90:62:e9:5d:2b:cf:1e:cc:
e8:e5:49:d8:8d:1a:55:9a:21:c0:f9:19:bd:79:65:3f:fa:62:
fe:c4:8f:18:63:4d:d6:d3:3b:3f:9a:e3:5d:f1:a0:16:a3:c6:
d6:6f:26:87:d2:f1:6e:ee:e9:06:44:b1:5d:16:c0:61:aa:d4:
2a:de:48:74:e6:95:9d:d1:0e:fc:1c:6c:df:ed:50:01:17:a8:
31:50:58:19:76:72:b7:a4:e7:3a:0d:97:3f:a3:aa:80:58:82:
64:9c:6b:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:11:55 2025 by rpki-client