Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/a400b2-bab4-4119-a3d1-89981c8f9e7b/1/MHXYfBl6D6BNqPIlNY0_r3hvfQs.mft
File: MHXYfBl6D6BNqPIlNY0_r3hvfQs.mft (raw, json)
Hash identifier: i+jdAfGYidLTa9HkoVn9ujEuF+lA9/3i6X3a79G68mg=
Subject key identifier: D9:4C:DC:03:EA:57:94:CE:EC:7B:32:EE:EC:54:F5:B0:02:9B:CD:73
Authority key identifier: 30:75:D8:7C:19:7A:0F:A0:4D:A8:F2:25:35:8D:3F:AF:78:6F:7D:0B
Certificate issuer: /CN=3075d87c197a0fa04da8f225358d3faf786f7d0b
Certificate serial: 0194BD1766AB999B06BAEB441375B6D503D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MHXYfBl6D6BNqPIlNY0_r3hvfQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/a400b2-bab4-4119-a3d1-89981c8f9e7b/1/MHXYfBl6D6BNqPIlNY0_r3hvfQs.mft
Manifest number: 0215
Signing time: Fri 31 Jan 2025 16:00:14 +0000
Manifest this update: Fri 31 Jan 2025 16:00:14 +0000
Manifest next update: Sat 01 Feb 2025 16:00:14 +0000
Files and hashes: 1: MHXYfBl6D6BNqPIlNY0_r3hvfQs.crl (hash: syQgDV+SPe86Lq8oomg5Od1GQVoX/K5vkAJmdoP6AYk=)
2: _Op4bSAp0gWDx4UfTJUc97va5qw.roa (hash: tJEKSC7Hrru5HEiTFvhI8vLaAa+FAs4tPlo2cnkUBAA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:66:ab:99:9b:06:ba:eb:44:13:75:b6:d5:03:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3075d87c197a0fa04da8f225358d3faf786f7d0b
Validity
Not Before: Jan 31 16:00:14 2025 GMT
Not After : Feb 1 16:00:14 2025 GMT
Subject: CN=d94cdc03ea5794ceec7b32eeec54f5b0029bcd73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:7b:c3:89:4f:8b:d8:ae:14:8f:64:31:c2:10:
e0:ae:08:67:62:4a:e5:11:6c:12:69:c6:42:f5:68:
7b:b5:5a:25:8e:59:38:36:17:77:f9:aa:eb:11:09:
18:a0:6a:f0:5f:48:f2:da:cb:71:5a:cb:e2:c2:46:
99:1e:10:d0:32:be:95:f6:1f:54:35:df:0a:45:c7:
bb:68:0a:78:c1:7b:ec:8b:72:24:34:d0:79:1e:45:
bf:7b:fb:20:bd:aa:76:bd:96:d4:fd:51:a1:be:e3:
6e:14:ce:66:5a:fd:e0:2d:7e:f8:c8:a8:ec:44:b0:
8e:57:9a:80:b5:f6:e0:31:19:cb:54:3d:28:b9:b2:
54:09:6b:6d:4d:71:2a:66:c8:90:91:86:ff:35:4a:
9f:45:e7:e0:fb:df:68:7e:9a:a1:aa:9d:d0:a6:56:
10:fa:18:3b:63:4e:10:d0:9a:94:83:c1:f8:ed:e5:
9a:89:26:ad:60:8e:09:15:53:e0:8d:5d:d1:8c:17:
be:5f:68:c4:7a:75:30:f6:22:48:f8:e0:08:3b:1f:
7e:63:f4:3c:d4:16:74:df:ab:14:0e:a9:8b:6b:25:
59:5a:40:12:2c:1f:f3:65:30:fd:78:1e:fd:95:45:
2a:51:d2:14:92:50:9f:a4:b7:e5:4a:69:e4:ec:fd:
23:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:4C:DC:03:EA:57:94:CE:EC:7B:32:EE:EC:54:F5:B0:02:9B:CD:73
X509v3 Authority Key Identifier:
keyid:30:75:D8:7C:19:7A:0F:A0:4D:A8:F2:25:35:8D:3F:AF:78:6F:7D:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MHXYfBl6D6BNqPIlNY0_r3hvfQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/a400b2-bab4-4119-a3d1-89981c8f9e7b/1/MHXYfBl6D6BNqPIlNY0_r3hvfQs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/a400b2-bab4-4119-a3d1-89981c8f9e7b/1/MHXYfBl6D6BNqPIlNY0_r3hvfQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:ff:d0:60:ed:8c:6a:32:8b:4e:17:e9:00:61:e9:5a:e6:da:
ec:78:8b:28:9b:4d:40:c5:f0:c0:70:13:6a:6f:38:93:17:2f:
7b:1a:93:24:42:50:58:3b:4a:58:a9:da:f3:ff:3f:41:d7:11:
45:9c:45:19:fa:64:61:4f:c7:33:3d:a0:3f:3b:ed:00:f8:b5:
54:9a:b8:55:3c:07:34:74:7f:63:a9:5f:78:be:3d:5e:18:ff:
14:5c:f0:3a:17:0a:32:1c:66:2d:37:b5:f4:62:6e:f4:10:ea:
bd:87:40:18:22:d4:72:0f:20:ce:f1:d9:b6:d4:17:be:d4:43:
13:48:f3:8e:41:07:0b:46:0d:3c:5f:61:4b:3b:87:7a:90:e4:
07:04:3a:5f:5e:75:22:44:bc:dc:bc:84:0b:da:b8:00:12:d7:
d5:ef:1a:13:a9:23:b7:cd:dd:6a:18:93:d5:58:34:63:32:ab:
7a:32:e0:54:a0:64:ec:24:a6:59:51:9e:43:d8:5b:e7:fc:79:
63:f2:f5:79:6b:09:67:95:ad:fd:67:83:a5:9a:47:5b:41:f8:
05:63:24:72:99:4a:74:84:d6:2a:b6:3f:f3:37:fa:c4:76:5d:
54:45:51:bf:98:98:26:d2:91:91:f1:c4:11:72:1b:7b:d0:13:
0d:c1:cf:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:28:10 2025 by rpki-client