Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/e74b81-5ff7-4823-9267-0d3e662b0ee0/1/MJKxFwYvYGX6oc39OJFeS7nJJLs.mft
File: MJKxFwYvYGX6oc39OJFeS7nJJLs.mft (raw, json)
Hash identifier: BPkE6fihlyXCrwemqzs3g9SRoWkqt5jZ3DSHjoFIsCk=
Subject key identifier: 1D:59:52:46:18:55:94:7B:89:80:3F:8F:92:51:14:B4:AE:82:D2:77
Authority key identifier: 30:92:B1:17:06:2F:60:65:FA:A1:CD:FD:38:91:5E:4B:B9:C9:24:BB
Certificate issuer: /CN=3092b117062f6065faa1cdfd38915e4bb9c924bb
Certificate serial: 01948E8758D98D1BA562C5DE55F2F0407387
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MJKxFwYvYGX6oc39OJFeS7nJJLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/e74b81-5ff7-4823-9267-0d3e662b0ee0/1/MJKxFwYvYGX6oc39OJFeS7nJJLs.mft
Manifest number: 0EF3
Signing time: Wed 22 Jan 2025 15:00:22 +0000
Manifest this update: Wed 22 Jan 2025 15:00:22 +0000
Manifest next update: Thu 23 Jan 2025 15:00:22 +0000
Files and hashes: 1: Df2biRKzI0GRqVwee9geZJPoqNE.roa (hash: niRdMj+wofGmmTCaPQzwp4KH6uD8D+ovTgho72qJUvQ=)
2: MJKxFwYvYGX6oc39OJFeS7nJJLs.crl (hash: oPOYNkTEGCB+ddHtk4UQ+5O2mpfbIFICn6tcviDlpsk=)
3: dItGQTbmGZEaYwBU9Yq4YOVLqSI.roa (hash: szU14ZY7TnY09k1Q8QSiZL5j1zx2tfwKt9z7Z7fdfRU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:8e:87:58:d9:8d:1b:a5:62:c5:de:55:f2:f0:40:73:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3092b117062f6065faa1cdfd38915e4bb9c924bb
Validity
Not Before: Jan 22 15:00:22 2025 GMT
Not After : Jan 23 15:00:22 2025 GMT
Subject: CN=1d5952461855947b89803f8f925114b4ae82d277
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:54:15:ff:1a:16:dc:ed:04:4e:12:93:5d:8a:
ea:92:d3:19:6a:ec:5c:52:e1:57:18:34:1f:76:d7:
61:c9:b1:38:02:65:22:26:ae:4b:b3:30:6d:5b:af:
e3:3f:00:b6:77:92:60:97:bf:f8:f7:8a:89:66:32:
bf:d5:37:4a:86:8c:03:7c:34:e7:94:c2:5f:e9:32:
84:36:13:0c:a3:79:bb:d1:89:54:3e:13:35:0a:82:
c6:bf:c1:a2:08:dd:72:5d:e4:24:6f:f5:f3:94:c1:
a4:00:f2:c1:9c:6b:06:1b:06:56:ef:2e:50:78:01:
5c:3b:b2:aa:35:ad:a4:c9:09:72:06:92:1f:92:33:
07:7f:b1:cc:22:b3:93:40:92:e9:20:89:5b:2a:c2:
2a:f9:67:f7:4a:3f:3a:d5:3e:33:a5:86:2a:ab:11:
a5:cb:30:fa:a6:af:00:3f:ee:d8:e8:c7:e8:db:91:
ad:93:b5:54:75:b0:fa:d1:0e:11:39:14:4a:a6:af:
36:8e:32:14:29:01:1a:6c:82:e7:c0:96:7e:44:7c:
84:b2:e7:d1:bb:51:1b:a4:39:f6:10:86:d0:07:3a:
7e:86:89:ed:7e:ca:33:fc:2a:cb:f6:45:09:fb:19:
55:3e:cf:f9:11:85:8d:1d:27:58:1c:f5:d3:78:0e:
68:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:59:52:46:18:55:94:7B:89:80:3F:8F:92:51:14:B4:AE:82:D2:77
X509v3 Authority Key Identifier:
keyid:30:92:B1:17:06:2F:60:65:FA:A1:CD:FD:38:91:5E:4B:B9:C9:24:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MJKxFwYvYGX6oc39OJFeS7nJJLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e74b81-5ff7-4823-9267-0d3e662b0ee0/1/MJKxFwYvYGX6oc39OJFeS7nJJLs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e74b81-5ff7-4823-9267-0d3e662b0ee0/1/MJKxFwYvYGX6oc39OJFeS7nJJLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e1:8f:7a:c7:a1:9f:92:a6:13:d9:5f:7d:6c:49:67:ff:f0:0b:
2e:ac:a7:dc:cb:b9:23:02:3a:cd:f8:bf:f0:ac:81:e8:d4:70:
0e:13:fa:78:f2:4e:7d:0b:8e:94:08:23:1f:6e:ea:30:12:7b:
75:98:3b:7d:a1:71:56:76:d6:ad:ac:36:01:d8:ed:2a:7c:b8:
38:0b:47:b2:64:d5:1f:17:a0:d4:46:ff:1e:f5:b9:c5:4e:5d:
3f:61:cd:35:56:5b:1b:bf:0f:b4:d0:d3:b3:98:a0:87:be:58:
a6:51:ce:98:0e:34:7c:a6:8e:2f:18:ab:70:d5:29:85:32:f6:
06:69:70:b1:79:fe:0b:10:8b:5d:cb:47:c0:07:b6:8e:eb:1b:
20:24:c1:63:68:33:be:cf:1a:b6:ba:e9:d9:f1:cc:67:60:ce:
1a:a7:15:0e:df:72:f3:6f:65:89:33:0a:86:bb:7f:5c:b8:42:
a8:96:9f:7c:51:83:4e:f0:fd:83:4c:25:e7:d3:28:73:0f:ea:
56:37:58:8b:ba:83:85:ed:7a:b9:1d:d9:98:3f:c5:18:28:bd:
72:1d:58:92:c2:ff:5c:12:03:be:d8:92:41:01:96:60:de:ba:
49:33:bb:7c:18:4a:51:4b:37:11:22:f1:d3:4f:b7:12:23:f7:
79:41:e0:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 23 19:16:12 2025 by rpki-client on console.sobornost.net