Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/99be4d-f8ec-4430-a9cd-7e12b87d06c2/1/MPjiwMh-k3meIyhPNrhhXbeHg6s.mft
File: MPjiwMh-k3meIyhPNrhhXbeHg6s.mft (raw, json)
Hash identifier: 03Bb9oduWUBAoJEjhiSQ1ZH1uPz7650l+opPih835C8=
Subject key identifier: C8:38:75:AA:BE:4D:DD:F4:AD:8D:89:2D:9B:CD:52:E8:16:5D:FC:B0
Authority key identifier: 30:F8:E2:C0:C8:7E:93:79:9E:23:28:4F:36:B8:61:5D:B7:87:83:AB
Certificate issuer: /CN=30f8e2c0c87e93799e23284f36b8615db78783ab
Certificate serial: 01962F74DFC639073EF635E5D97CDBE0C328
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MPjiwMh-k3meIyhPNrhhXbeHg6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/99be4d-f8ec-4430-a9cd-7e12b87d06c2/1/MPjiwMh-k3meIyhPNrhhXbeHg6s.mft
Manifest number: 13E9
Signing time: Sun 13 Apr 2025 14:01:50 +0000
Manifest this update: Sun 13 Apr 2025 14:01:50 +0000
Manifest next update: Mon 14 Apr 2025 14:01:50 +0000
Files and hashes: 1: 1-RWOiprTQ-uVnwhklGyyfsDfjnk.roa (hash: KKoCIqZllKz4mT5mjhqOfo5AkvT5jJCo40l+tooCAf8=)
2: MPjiwMh-k3meIyhPNrhhXbeHg6s.crl (hash: tA2sI80w+SRqT2LKIDF0J3dPCOUS60bW73rFyJ211pk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2f:74:df:c6:39:07:3e:f6:35:e5:d9:7c:db:e0:c3:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30f8e2c0c87e93799e23284f36b8615db78783ab
Validity
Not Before: Apr 13 14:01:50 2025 GMT
Not After : Apr 14 14:01:50 2025 GMT
Subject: CN=c83875aabe4dddf4ad8d892d9bcd52e8165dfcb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:1e:17:46:e2:fd:2b:1a:4d:72:b6:43:7b:3a:
22:98:2f:86:a6:c9:e4:73:ac:41:dc:aa:48:5b:52:
ef:2d:4e:dd:aa:7f:af:af:1a:f2:f6:4a:ae:2b:1f:
69:e5:86:fe:cc:97:fc:22:4e:fb:a7:6e:f3:d4:73:
2a:b7:d9:91:f3:39:e1:29:07:91:9f:58:ed:ca:74:
1b:4a:bb:df:f6:0e:76:d3:60:a4:1b:b3:87:2c:f3:
8b:d1:df:0e:29:ff:a4:81:16:61:94:2e:9e:68:7c:
c0:b4:53:26:3b:f8:7e:a7:19:13:69:58:7a:4e:ef:
d5:25:0e:b0:49:ed:f6:f6:09:37:8f:be:31:bc:97:
e4:fd:ef:05:7c:a9:aa:6a:49:c3:f1:f2:88:c8:85:
80:fe:ed:55:95:83:e8:63:b1:06:ef:eb:0f:37:48:
32:5e:95:f6:05:6c:0f:24:b1:c8:54:79:2e:19:ff:
f0:b1:e1:0f:1b:6e:8f:2f:69:bb:b6:b3:5c:4d:7f:
bc:b2:54:18:fa:d0:6e:2c:0e:8e:13:fa:ab:d6:ab:
af:be:bc:34:26:0d:a2:90:80:fa:69:54:5d:47:a2:
e9:4d:fd:73:e7:36:1a:16:cd:59:da:25:81:ca:9e:
42:2b:93:e2:75:49:c9:2f:25:a5:12:31:ce:30:8a:
99:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:38:75:AA:BE:4D:DD:F4:AD:8D:89:2D:9B:CD:52:E8:16:5D:FC:B0
X509v3 Authority Key Identifier:
keyid:30:F8:E2:C0:C8:7E:93:79:9E:23:28:4F:36:B8:61:5D:B7:87:83:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MPjiwMh-k3meIyhPNrhhXbeHg6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/99be4d-f8ec-4430-a9cd-7e12b87d06c2/1/MPjiwMh-k3meIyhPNrhhXbeHg6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/99be4d-f8ec-4430-a9cd-7e12b87d06c2/1/MPjiwMh-k3meIyhPNrhhXbeHg6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:bd:26:f0:eb:44:cf:30:a2:4b:ab:80:00:bf:e0:a9:65:df:
d1:9d:0a:4c:a0:2d:16:7b:b9:a9:8a:4a:e3:2a:ab:19:7b:84:
9f:2b:f3:53:29:b1:99:3b:ad:ba:ce:77:b6:c0:20:17:0b:e0:
e3:e1:dd:75:2c:de:65:dc:f3:31:76:8e:98:79:51:70:97:ef:
ae:92:85:c5:d5:69:2b:a0:37:7f:e9:f4:04:00:4d:8d:d3:f6:
ae:aa:75:f1:e9:c3:d3:97:6f:7e:ed:f8:df:7c:85:a2:f6:b7:
f1:f5:64:ca:01:04:b2:d7:63:aa:b7:87:b7:d7:41:39:af:3a:
a9:f0:cb:91:8c:5f:c3:54:d6:b2:f4:4d:21:be:be:c4:ce:9d:
59:a1:29:5b:6a:30:50:45:0f:67:24:a2:21:c8:15:33:17:b8:
9e:17:f8:f9:4a:f4:d7:11:33:65:3c:e6:f9:44:0f:61:b5:eb:
1a:fb:3d:3e:f8:d1:d4:67:68:61:d7:5c:34:5a:f1:e6:ee:00:
29:5e:49:3a:7c:87:6c:ec:c9:90:da:0a:58:a2:3a:d4:05:fa:
a9:a0:eb:85:ce:dd:f6:1b:cd:f0:94:03:bb:5f:9a:09:fa:6f:
ce:cb:73:37:e7:4b:95:6e:89:c6:70:8c:bb:0c:78:b9:50:f8:
57:11:c6:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:31 2025 by rpki-client on console.sobornost.net