Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/eb301d-ab50-4c3e-8c78-9df37109c81d/1/m-du9KpJjCFSTdftrRbeHT2wAuM.mft
File: m-du9KpJjCFSTdftrRbeHT2wAuM.mft (raw, json)
Hash identifier: UjBOC6cGQmg5RJboebPbmclezvjacRSxQaWSby0oVyU=
Subject key identifier: 26:79:FE:7B:1B:31:79:77:BB:EE:26:92:0B:2B:37:6E:21:A7:17:3E
Authority key identifier: 9B:E7:6E:F4:AA:49:8C:21:52:4D:D7:ED:AD:16:DE:1D:3D:B0:02:E3
Certificate issuer: /CN=9be76ef4aa498c21524dd7edad16de1d3db002e3
Certificate serial: 0194BBCE0CDB5CBA330DAA2F94460C2F16D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m-du9KpJjCFSTdftrRbeHT2wAuM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/eb301d-ab50-4c3e-8c78-9df37109c81d/1/m-du9KpJjCFSTdftrRbeHT2wAuM.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 10:00:30 +0000
Manifest this update: Fri 31 Jan 2025 10:00:30 +0000
Manifest next update: Sat 01 Feb 2025 10:00:30 +0000
Files and hashes: 1: HoDvxsQA4iXxpxVk1_co_JtvvPE.roa (hash: cWutlJOtBJ4KMx+ET4BMORGB6H9YK5+9Bn/1o272ZUM=)
2: m-du9KpJjCFSTdftrRbeHT2wAuM.crl (hash: I+g30zFhejDDvdfqlV8hyzsfZHAuaVDd+e7S0xR778A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:0c:db:5c:ba:33:0d:aa:2f:94:46:0c:2f:16:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9be76ef4aa498c21524dd7edad16de1d3db002e3
Validity
Not Before: Jan 31 10:00:30 2025 GMT
Not After : Feb 1 10:00:30 2025 GMT
Subject: CN=2679fe7b1b317977bbee26920b2b376e21a7173e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:8e:a4:47:3c:b8:52:b3:d7:80:6a:57:c5:e6:
1a:27:5b:48:c6:cf:8f:46:a8:43:24:d6:0b:2c:49:
dc:c9:0a:6b:51:21:dc:02:f1:96:c0:f4:a7:0d:fe:
90:4e:5f:e6:87:ca:6f:22:37:d5:c8:e0:60:82:2c:
1a:b6:32:66:76:53:f8:72:c8:c2:50:e0:de:42:bc:
b5:a4:f8:a7:e1:ec:1c:54:92:9b:91:75:d9:46:72:
04:5e:01:03:32:77:ce:dd:1f:31:a9:5e:51:18:a7:
e1:f0:3a:e8:3f:a7:26:59:3d:98:18:3f:ee:df:38:
02:40:9f:3a:09:76:02:c5:bc:03:5c:d1:71:33:e8:
e3:36:0e:25:a3:d3:25:28:d8:f0:da:31:d1:97:9d:
34:14:70:4e:d5:84:70:7a:56:bb:4d:8c:04:25:b0:
59:a5:85:76:6e:d1:b7:e3:58:87:c9:48:d0:52:ed:
e7:ac:b8:04:fc:e9:e4:9c:20:f9:e3:8b:00:fd:ea:
7b:2d:3e:d9:0a:6b:9c:2f:4e:7f:42:d3:e1:b7:de:
0e:b6:61:92:a0:ac:c1:1e:06:af:e7:53:d6:c2:bd:
19:20:9b:c9:b8:bc:5f:79:07:a6:ce:17:f2:bc:ce:
7f:a8:50:6e:82:44:3e:e7:87:0a:d8:22:a6:a4:99:
d5:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:79:FE:7B:1B:31:79:77:BB:EE:26:92:0B:2B:37:6E:21:A7:17:3E
X509v3 Authority Key Identifier:
keyid:9B:E7:6E:F4:AA:49:8C:21:52:4D:D7:ED:AD:16:DE:1D:3D:B0:02:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m-du9KpJjCFSTdftrRbeHT2wAuM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/eb301d-ab50-4c3e-8c78-9df37109c81d/1/m-du9KpJjCFSTdftrRbeHT2wAuM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/eb301d-ab50-4c3e-8c78-9df37109c81d/1/m-du9KpJjCFSTdftrRbeHT2wAuM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:e5:46:96:1f:b6:00:2f:3c:ed:7d:ee:a2:97:2f:55:38:6b:
3e:49:b8:e3:fe:54:c4:3e:7c:29:ad:f0:fe:51:9c:50:5d:af:
7b:07:da:a1:32:ab:7c:a4:33:e9:05:37:18:2c:70:23:5f:69:
c5:bf:98:00:91:7e:0a:a7:e2:8a:16:d6:4c:27:8d:6e:45:70:
fe:8d:25:60:d6:49:3d:ab:51:57:00:77:64:f4:51:92:b6:d8:
9d:74:8f:59:ec:b2:15:1f:6b:1d:f2:5b:96:1b:55:80:07:3b:
2e:43:7a:1e:93:6a:68:4f:39:58:71:b2:4b:78:d5:7c:17:f0:
9f:d5:4b:5a:a5:22:a5:b3:c8:cc:f6:50:48:8d:27:3a:56:e9:
22:75:04:3c:48:1e:3d:28:98:d8:a1:fb:8b:74:c5:e0:f4:7d:
d3:5a:de:e4:6f:da:ce:39:ed:6e:c8:ce:f8:0e:3f:07:40:d0:
73:dd:23:77:38:66:91:ce:ee:12:dc:6e:7e:fb:a8:cf:21:10:
77:4c:4b:06:74:0c:e8:1e:69:41:5b:98:36:82:04:74:d1:0d:
3a:fd:15:bb:9b:20:41:ae:93:0e:e5:9c:f8:04:fe:f6:32:c4:
c7:28:cd:d6:e5:6d:a9:8d:29:e9:76:de:77:44:04:14:c7:22:
93:e3:d3:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 10:20:44 2025 by rpki-client