Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/07d146-ef22-4e5c-bd5c-42ed3e373679/1/MXvyYLzaMCviwgdijPsWRHhhT-U.mft
File: MXvyYLzaMCviwgdijPsWRHhhT-U.mft (raw, json)
Hash identifier: o1S7uQlAXB+5qNLFG0kF87B5ufTOIQvLeO/w+UzS4lU=
Subject key identifier: 1E:F4:A9:05:D1:52:D8:4C:60:39:77:2B:EB:D8:DF:B4:67:B1:40:66
Authority key identifier: 31:7B:F2:60:BC:DA:30:2B:E2:C2:07:62:8C:FB:16:44:78:61:4F:E5
Certificate issuer: /CN=317bf260bcda302be2c207628cfb164478614fe5
Certificate serial: 0194BC3BF52406B4614A8212D1809F93348E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MXvyYLzaMCviwgdijPsWRHhhT-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/07d146-ef22-4e5c-bd5c-42ed3e373679/1/MXvyYLzaMCviwgdijPsWRHhhT-U.mft
Manifest number: 0B9E
Signing time: Fri 31 Jan 2025 12:00:33 +0000
Manifest this update: Fri 31 Jan 2025 12:00:33 +0000
Manifest next update: Sat 01 Feb 2025 12:00:33 +0000
Files and hashes: 1: MXvyYLzaMCviwgdijPsWRHhhT-U.crl (hash: 21xlyxTRY5ozaPDAbE+Wj06DcJHV5an+01E6UJhtc74=)
2: penXvalgbMBLZqcx96rUayqK3NQ.roa (hash: vb/Iw29Kb6TCjGenAwHcr/Ra62ZOMD3/iU+HDEP/27c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:f5:24:06:b4:61:4a:82:12:d1:80:9f:93:34:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=317bf260bcda302be2c207628cfb164478614fe5
Validity
Not Before: Jan 31 12:00:33 2025 GMT
Not After : Feb 1 12:00:33 2025 GMT
Subject: CN=1ef4a905d152d84c6039772bebd8dfb467b14066
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:5f:d6:6b:d3:3f:b7:ca:1e:ed:e0:45:4c:e7:
64:74:cc:49:30:d2:6f:a3:d2:be:d5:4a:f1:3f:ea:
b6:d5:4e:16:bd:b3:b8:38:65:ee:b0:c8:85:16:11:
41:77:15:01:53:71:ea:22:70:85:57:f7:90:d6:61:
32:7b:2f:ce:75:de:cf:b6:45:ee:ee:6d:50:0a:92:
3f:2a:f0:82:90:0e:29:c8:b1:b9:fd:74:99:29:79:
13:83:e7:49:d8:8e:8c:ee:a0:74:14:40:49:1a:44:
54:12:ba:f9:58:32:62:01:e9:41:46:d4:6a:0b:65:
b5:d6:08:c8:ef:a7:18:0c:94:90:f9:33:20:60:20:
2c:cc:cb:78:3b:22:0b:3a:cb:f8:5e:e8:3e:52:07:
69:0f:aa:4e:59:31:5f:04:80:1f:16:60:24:0b:c8:
d2:9f:14:53:6a:4b:2d:05:08:ba:de:c2:2c:8e:4d:
25:75:87:47:e1:4a:fc:1c:44:fd:e5:00:9c:fe:5e:
33:05:6d:8d:ff:42:a6:fe:80:46:2c:fa:ae:70:e6:
de:2d:ca:a7:78:11:45:55:1d:06:da:b6:40:91:b2:
e5:50:a8:05:65:f7:73:1c:98:34:27:3a:a2:f0:b6:
bc:77:d8:02:92:f1:54:2b:97:9e:80:8f:30:62:f9:
a9:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:F4:A9:05:D1:52:D8:4C:60:39:77:2B:EB:D8:DF:B4:67:B1:40:66
X509v3 Authority Key Identifier:
keyid:31:7B:F2:60:BC:DA:30:2B:E2:C2:07:62:8C:FB:16:44:78:61:4F:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MXvyYLzaMCviwgdijPsWRHhhT-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/07d146-ef22-4e5c-bd5c-42ed3e373679/1/MXvyYLzaMCviwgdijPsWRHhhT-U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/07d146-ef22-4e5c-bd5c-42ed3e373679/1/MXvyYLzaMCviwgdijPsWRHhhT-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:7b:c2:5d:bf:04:f0:67:61:eb:1e:7e:16:2b:b4:99:89:8a:
40:39:a8:39:3e:44:11:c5:7f:87:d1:df:47:5a:7b:65:ce:e0:
46:c0:25:f7:02:bd:f7:29:3c:18:90:11:fc:78:b9:be:de:c9:
d4:a3:ea:1b:74:d3:34:4c:e0:55:2d:95:b5:d4:df:86:aa:4d:
81:5e:c6:01:9f:8b:a8:dd:ed:70:86:6c:da:54:b8:96:4a:39:
4a:8d:d6:9f:cc:99:e6:66:3a:1f:18:1e:d5:34:74:c6:b3:ff:
6e:08:a0:ff:a5:e5:06:67:94:78:5d:e0:fd:3c:c6:30:e0:23:
97:5c:d1:51:f0:5d:00:0c:a3:9e:71:7b:2c:15:a1:e4:f2:9f:
5c:91:8c:af:b3:fa:f2:b7:37:e7:4b:df:1c:1f:20:4a:b6:33:
6d:c6:65:e0:4a:7f:67:8a:9c:56:b2:7b:a0:a7:65:bd:70:e0:
83:b2:9b:4c:01:4c:40:17:a6:d0:45:e4:83:97:f1:22:45:0c:
5e:26:1e:06:34:23:b1:7a:72:8d:81:b5:d6:c0:37:44:82:a8:
ea:1a:f5:c0:42:7b:2b:cd:7e:a0:02:16:1b:7a:41:c7:8a:50:
85:cf:20:ee:d2:88:6a:28:3d:dc:6d:34:26:01:f5:31:d3:0a:
29:cb:ef:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:28:03 2025 by rpki-client