Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/813010-a96f-4510-9dbc-21f7751ca76c/1/mIRVhKyAlMGAa3Om9T5GuaKOgSs.mft
File: mIRVhKyAlMGAa3Om9T5GuaKOgSs.mft (raw, json)
Hash identifier: paVwVdXeouRgVRetvewjXCs0nTXqgKEr8kiL/Eo7R1o=
Subject key identifier: 73:31:A7:7C:46:C6:37:D8:A5:6D:72:0D:8F:C8:C6:C9:1A:44:42:C6
Authority key identifier: 98:84:55:84:AC:80:94:C1:80:6B:73:A6:F5:3E:46:B9:A2:8E:81:2B
Certificate issuer: /CN=98845584ac8094c1806b73a6f53e46b9a28e812b
Certificate serial: 0194BC72E433B38540806A7B838E3DD905FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mIRVhKyAlMGAa3Om9T5GuaKOgSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/813010-a96f-4510-9dbc-21f7751ca76c/1/mIRVhKyAlMGAa3Om9T5GuaKOgSs.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 13:00:33 +0000
Manifest this update: Fri 31 Jan 2025 13:00:33 +0000
Manifest next update: Sat 01 Feb 2025 13:00:33 +0000
Files and hashes: 1: 1-2hqQTW3ul_bD8JHqn2arc4SQt4.roa (hash: 7Jb+agyXKOWc8cNwhtr84wIX4Xn98h0+c+7K9P4oPMA=)
2: mIRVhKyAlMGAa3Om9T5GuaKOgSs.crl (hash: BFDdXzfKw4unVjvaIld2NKo1i7LXkYydChNYJ439R+k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:e4:33:b3:85:40:80:6a:7b:83:8e:3d:d9:05:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98845584ac8094c1806b73a6f53e46b9a28e812b
Validity
Not Before: Jan 31 13:00:33 2025 GMT
Not After : Feb 1 13:00:33 2025 GMT
Subject: CN=7331a77c46c637d8a56d720d8fc8c6c91a4442c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:1d:f5:65:0a:19:bf:f7:29:8e:ea:25:40:ee:
83:f9:bf:1b:e1:12:f6:9d:e8:b0:88:a1:4d:f6:a9:
d1:6c:9f:9d:29:42:48:37:d2:71:ca:16:18:14:eb:
a8:81:64:32:ef:67:73:45:cd:47:30:02:7a:51:30:
e5:a8:a6:2b:04:13:39:dc:a6:aa:55:8a:19:8f:4d:
10:9e:1d:3b:b9:da:90:f3:d7:60:b8:54:3e:8b:5d:
e9:37:46:78:c8:32:3e:1d:e1:cb:c0:be:49:0d:f3:
d5:fc:17:ea:e0:05:e9:91:4f:49:03:a7:75:49:96:
09:31:d3:88:a5:af:e4:07:b7:0a:68:a2:4f:0c:93:
91:ae:3b:76:6a:86:54:8a:84:a8:0b:ac:91:82:dc:
d0:da:93:35:f2:0c:14:72:5b:d8:01:87:f5:56:43:
d5:1e:0c:b1:2e:1a:ae:97:50:e9:34:5b:eb:79:3a:
3f:94:f9:ac:16:96:04:65:52:76:72:42:2d:88:b8:
d9:02:c6:a0:79:c3:22:9b:57:25:35:ca:bf:24:6c:
64:84:fa:bb:67:08:25:da:87:68:01:8c:42:71:25:
29:9b:76:63:ae:fa:12:a5:07:fe:d4:53:d5:c7:39:
ec:fc:ec:62:cf:0f:24:c6:d0:ac:04:14:18:20:cf:
5d:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:31:A7:7C:46:C6:37:D8:A5:6D:72:0D:8F:C8:C6:C9:1A:44:42:C6
X509v3 Authority Key Identifier:
keyid:98:84:55:84:AC:80:94:C1:80:6B:73:A6:F5:3E:46:B9:A2:8E:81:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mIRVhKyAlMGAa3Om9T5GuaKOgSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/813010-a96f-4510-9dbc-21f7751ca76c/1/mIRVhKyAlMGAa3Om9T5GuaKOgSs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/813010-a96f-4510-9dbc-21f7751ca76c/1/mIRVhKyAlMGAa3Om9T5GuaKOgSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:e8:c6:bf:4d:ed:e4:35:f2:79:9e:c0:88:8c:53:f9:96:74:
18:69:bd:47:48:26:a2:95:7e:cb:1d:74:45:5c:21:db:6e:e6:
34:1f:34:16:0a:28:ae:24:5e:d7:69:ee:32:71:d4:36:8e:d8:
d8:b6:31:a7:94:66:36:d2:33:b0:8b:0d:89:c0:cf:22:8f:49:
79:b0:fc:d2:13:1d:4f:cb:f7:56:bc:a4:80:89:48:46:be:95:
14:3f:e2:e4:21:69:d4:85:d0:d0:1c:3f:30:a9:8a:31:12:82:
d4:81:a5:13:60:c1:9c:40:43:8e:c0:58:43:20:90:09:d0:b9:
8d:5e:3c:91:c2:81:e1:48:f5:57:9f:ae:01:8f:6c:19:ab:df:
4f:f0:2c:9a:0e:80:be:b6:7b:a1:22:34:c4:77:74:80:6b:e0:
1a:66:28:6f:f4:a2:fa:83:a6:02:dc:31:b2:b1:51:23:72:86:
7b:9a:d9:2e:74:64:01:94:c2:76:be:82:ee:b4:71:cf:e0:98:
37:0d:5e:d6:9d:3d:5c:da:2c:d0:7c:79:38:01:f2:e6:46:c1:
b7:9d:70:ac:f0:66:65:0d:f0:df:e9:0c:60:f9:29:75:07:a8:
40:06:a0:fc:fa:54:34:71:3d:0d:bd:07:38:63:ac:35:2a:e2:
c5:6d:6c:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:06:01 2025 by rpki-client