Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/b38fd7-9e68-426b-a100-1c0fd89dbcb4/1/t3MMgyIRjIHKhLqxt-CJCpyF6fc.mft
File: t3MMgyIRjIHKhLqxt-CJCpyF6fc.mft (raw, json)
Hash identifier: sJlMJHc1e0zvddqlaZm5U8PCl3fJNxvd9lekqLZ1LEw=
Subject key identifier: 00:40:50:72:4C:EC:01:9A:C9:0E:5A:A1:34:08:09:26:FD:CD:CC:71
Authority key identifier: B7:73:0C:83:22:11:8C:81:CA:84:BA:B1:B7:E0:89:0A:9C:85:E9:F7
Certificate issuer: /CN=b7730c8322118c81ca84bab1b7e0890a9c85e9f7
Certificate serial: 0194BCA9DEE3507A1EBA135F55BF1A20742C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t3MMgyIRjIHKhLqxt-CJCpyF6fc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/b38fd7-9e68-426b-a100-1c0fd89dbcb4/1/t3MMgyIRjIHKhLqxt-CJCpyF6fc.mft
Manifest number: 032D
Signing time: Fri 31 Jan 2025 14:00:36 +0000
Manifest this update: Fri 31 Jan 2025 14:00:36 +0000
Manifest next update: Sat 01 Feb 2025 14:00:36 +0000
Files and hashes: 1: CrtWfCL7i9NVihI1TfWhriARtZk.roa (hash: GvkPNrJjcp+5LqZSEnG2rMaRPFf5goGwB+oAHuiRPHA=)
2: t3MMgyIRjIHKhLqxt-CJCpyF6fc.crl (hash: TAXxJgTTPuk2VLD9iOG7lna7CqUS/Ds78UOQphxmtr4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:de:e3:50:7a:1e:ba:13:5f:55:bf:1a:20:74:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7730c8322118c81ca84bab1b7e0890a9c85e9f7
Validity
Not Before: Jan 31 14:00:36 2025 GMT
Not After : Feb 1 14:00:36 2025 GMT
Subject: CN=004050724cec019ac90e5aa134080926fdcdcc71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:b2:96:88:8c:59:97:a6:2d:04:27:bb:37:c0:
ac:86:47:d8:0f:ed:15:da:60:1e:85:21:d4:fa:10:
fd:68:f8:06:de:e4:4f:88:cc:cc:ec:82:93:4e:a8:
51:f5:f2:aa:55:a1:a4:5f:36:94:cd:03:64:14:cd:
c8:b5:31:bc:4f:99:cf:09:7f:b3:03:f9:a2:b5:d1:
01:3f:e1:8c:dc:04:be:3d:fe:73:18:7a:1b:e3:e9:
bd:7c:fe:1b:0a:3c:22:31:57:2d:91:20:53:e9:17:
14:06:1f:f1:32:b5:d5:ef:23:6e:ff:b6:3d:0a:20:
76:8d:f9:6a:e4:48:b4:37:a8:42:01:72:d6:9c:16:
f4:56:25:ac:56:f0:29:19:78:61:44:a5:df:93:73:
c3:ff:eb:7d:c5:bd:e8:36:0f:e2:1c:2c:24:59:6f:
34:44:3c:ff:8c:ba:07:b5:f2:f9:bc:1d:e4:ad:75:
6b:72:43:c9:88:4d:72:93:21:0e:ea:ee:03:de:12:
43:c3:ff:de:33:41:f4:16:16:6b:cf:68:24:5b:ab:
f4:24:c8:7a:e7:a4:9f:e8:39:39:d3:bb:bd:a2:1b:
ad:4f:e8:80:77:15:90:fe:a4:c6:d2:95:79:82:b2:
a2:b5:32:a2:d9:7f:cc:ed:fe:b5:3a:9c:f9:08:d6:
dd:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:40:50:72:4C:EC:01:9A:C9:0E:5A:A1:34:08:09:26:FD:CD:CC:71
X509v3 Authority Key Identifier:
keyid:B7:73:0C:83:22:11:8C:81:CA:84:BA:B1:B7:E0:89:0A:9C:85:E9:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t3MMgyIRjIHKhLqxt-CJCpyF6fc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b38fd7-9e68-426b-a100-1c0fd89dbcb4/1/t3MMgyIRjIHKhLqxt-CJCpyF6fc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b38fd7-9e68-426b-a100-1c0fd89dbcb4/1/t3MMgyIRjIHKhLqxt-CJCpyF6fc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:46:5c:3c:4a:3a:88:4b:4e:cb:b7:64:b9:e6:9f:c2:f5:99:
ed:70:20:fb:ce:d5:4a:7a:4d:f9:31:72:9b:23:56:fe:1e:87:
66:80:5b:e2:a9:97:e5:8f:dc:45:88:9e:09:50:a1:8a:53:c9:
67:d1:75:da:b9:93:2b:2d:3c:ac:42:24:b7:90:62:7a:37:97:
9a:0e:65:fa:14:f4:94:56:25:6e:c3:c0:21:8a:c7:2b:8d:23:
38:8a:1f:d6:52:b5:c0:1f:a6:f5:2a:dc:0e:ca:f6:9c:78:f0:
ee:e9:c3:3a:df:f8:19:41:d3:cf:64:ea:cd:f7:c1:06:d7:35:
73:34:10:42:0b:78:56:a6:ec:e5:1f:81:86:a7:f9:17:91:ea:
70:44:d8:b5:06:f8:9d:ec:f7:0a:57:ce:1c:8a:e2:6f:6d:53:
8e:ec:f7:19:50:da:38:b6:48:c8:c3:d4:3c:3f:d5:9c:27:c0:
50:e0:7a:56:4a:74:3b:93:21:1f:22:06:8b:2f:a8:17:7e:c9:
ad:5d:2d:6e:e2:38:03:e7:f1:22:fd:ca:ae:4b:34:6f:b2:24:
30:79:88:ff:c4:92:70:40:77:1b:6c:06:c0:85:fc:73:63:b3:
ea:39:f0:22:82:3a:d2:04:65:73:ff:20:45:36:91:35:0b:bc:
63:bf:95:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:52:04 2025 by rpki-client