Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/dfaa1d-c183-413b-b52a-4bab9f07e397/1/MIBAAletBvcQp6t-A5w7net3QNQ.mft
File: MIBAAletBvcQp6t-A5w7net3QNQ.mft (raw, json)
Hash identifier: J/uakTGxZftzD0Se7ftxw+qcKoz2DDBOO9b4H4ohe8k=
Subject key identifier: FC:0F:1F:F1:37:A4:3A:F2:02:60:FF:17:D0:DD:8E:8D:20:3C:8F:2B
Authority key identifier: 30:80:40:02:57:AD:06:F7:10:A7:AB:7E:03:9C:3B:9D:EB:77:40:D4
Certificate issuer: /CN=3080400257ad06f710a7ab7e039c3b9deb7740d4
Certificate serial: 0195485A537FA4D64D7AD58AF034C26299F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MIBAAletBvcQp6t-A5w7net3QNQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/dfaa1d-c183-413b-b52a-4bab9f07e397/1/MIBAAletBvcQp6t-A5w7net3QNQ.mft
Manifest number: 2E
Signing time: Thu 27 Feb 2025 17:00:33 +0000
Manifest this update: Thu 27 Feb 2025 17:00:33 +0000
Manifest next update: Fri 28 Feb 2025 17:00:33 +0000
Files and hashes: 1: MIBAAletBvcQp6t-A5w7net3QNQ.crl (hash: WzwwkgwL7wTDIduAVQHWiihKvvqiB7X50PDqpgEWrRE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:48:5a:53:7f:a4:d6:4d:7a:d5:8a:f0:34:c2:62:99:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3080400257ad06f710a7ab7e039c3b9deb7740d4
Validity
Not Before: Feb 27 17:00:33 2025 GMT
Not After : Feb 28 17:00:33 2025 GMT
Subject: CN=fc0f1ff137a43af20260ff17d0dd8e8d203c8f2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:94:fd:4e:87:e5:7a:e2:8f:1c:99:11:0a:8a:
19:b8:e0:7f:2c:bb:b0:a5:61:92:c5:23:ce:ff:a3:
16:37:90:d0:89:e6:bd:ff:d2:29:c1:a5:8f:a5:96:
b9:d4:db:91:5a:13:27:d3:39:93:92:64:ee:36:29:
a7:c7:19:12:97:5d:a3:63:7e:67:95:57:b5:c5:7e:
c5:d9:9b:7e:8b:cf:a2:35:2e:89:7e:c7:75:58:37:
b4:bd:ba:74:43:87:38:d6:5b:d5:64:6a:50:32:4a:
4a:96:92:7b:54:57:1c:f5:1f:ad:9f:78:c6:f5:d9:
f5:25:fd:b2:84:4c:4c:2c:57:bd:96:a1:f5:33:36:
09:c9:7a:b7:0a:0e:5c:bc:f3:93:e8:9f:a9:18:0e:
92:a2:44:fc:01:9b:1f:10:3d:bc:87:4d:4c:64:50:
2d:da:a4:82:a9:83:be:81:46:44:29:b9:9c:fb:d2:
ea:9d:ce:97:fd:6b:23:89:8c:d7:05:69:65:bd:ac:
92:03:e8:fe:b6:89:34:8c:2d:70:e4:e9:e2:2b:3b:
6d:48:6d:3f:1d:0f:a1:5c:14:be:e6:b0:a8:df:d1:
d0:38:b4:12:4e:05:62:01:61:82:ec:82:97:4b:2f:
7a:39:a0:3c:18:43:2b:27:6e:2b:c9:0f:7f:fc:87:
d6:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:0F:1F:F1:37:A4:3A:F2:02:60:FF:17:D0:DD:8E:8D:20:3C:8F:2B
X509v3 Authority Key Identifier:
keyid:30:80:40:02:57:AD:06:F7:10:A7:AB:7E:03:9C:3B:9D:EB:77:40:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MIBAAletBvcQp6t-A5w7net3QNQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/dfaa1d-c183-413b-b52a-4bab9f07e397/1/MIBAAletBvcQp6t-A5w7net3QNQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/dfaa1d-c183-413b-b52a-4bab9f07e397/1/MIBAAletBvcQp6t-A5w7net3QNQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:6c:90:82:3d:12:d0:9b:32:6e:af:18:fa:0e:0a:24:ef:21:
19:83:09:0b:5f:ff:bf:cf:e7:88:2a:16:19:89:4a:42:f6:93:
43:d1:8d:b3:a4:f1:8c:8b:71:b6:f0:a2:77:36:7c:96:02:2a:
c6:a9:da:77:cd:4f:21:94:91:57:a3:58:fa:c7:44:12:41:0e:
91:53:c5:8d:61:05:06:bf:bd:18:f2:21:12:5e:0b:3e:77:a6:
fe:7e:54:0c:af:5e:0d:d7:22:87:c2:8e:ee:0b:4e:31:89:1b:
16:30:10:3d:5a:4b:80:c7:99:13:b4:ab:e0:fa:9a:e5:1c:68:
fa:2e:f5:90:92:85:2f:54:ac:83:e0:ab:22:5d:88:5d:8f:f3:
67:54:2c:69:c6:cd:3d:e5:25:3f:b3:ac:49:62:72:8b:0c:07:
c1:44:8f:70:ff:25:16:99:f1:8c:3d:4d:f6:84:df:b6:c6:bf:
b2:aa:fa:2a:ce:36:ba:0e:1a:c6:28:43:4d:59:74:4e:7b:41:
28:b6:63:71:63:d8:ef:6d:d1:51:ff:64:ec:b9:ef:27:02:ef:
bf:ee:35:e6:f5:dd:bc:69:4f:a0:4c:f1:07:b1:fe:2a:55:c3:
fe:12:0b:5b:8b:4e:91:00:ca:7e:d4:b4:36:f7:5c:2f:56:96:
99:c8:73:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 8 04:50:53 2025 by rpki-client on console.sobornost.net