Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.mft
File: Cx5y89CVf1puO9G4RKEqYUdEkCc.mft (raw, json)
Hash identifier: vtb1+p+bXGUjEQgJQpQFGViSRvIZCnXNj8fxcmW/izo=
Subject key identifier: 84:AE:5E:00:20:1D:CA:B9:5D:F0:7F:00:5B:2B:FC:E5:C0:1C:26:73
Authority key identifier: 0B:1E:72:F3:D0:95:7F:5A:6E:3B:D1:B8:44:A1:2A:61:47:44:90:27
Certificate issuer: /CN=0b1e72f3d0957f5a6e3bd1b844a12a6147449027
Certificate serial: 0194BBCDBB323DDE48FF6569E71E9583D552
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cx5y89CVf1puO9G4RKEqYUdEkCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.mft
Manifest number: 143F
Signing time: Fri 31 Jan 2025 10:00:09 +0000
Manifest this update: Fri 31 Jan 2025 10:00:09 +0000
Manifest next update: Sat 01 Feb 2025 10:00:09 +0000
Files and hashes: 1: 1qKATTVt2l9Amr30ivUd4qpcDQ8.roa (hash: D9mOfQXdZlNktupQVZacZwiNwms/ptwHflaY7QzV5Xk=)
2: 54AIlsCbzgy0XCYwE0wdAC4kiqw.roa (hash: yJyuDkNiVUNUnxXEpeacfSUjn5at6QtcOaws+zppt2w=)
3: Cx5y89CVf1puO9G4RKEqYUdEkCc.crl (hash: U3sVsOQQZITTdzsSg47yIizctyYSgrBe527DhkADW+s=)
4: I9n8PdlI12zk3ftrt5ZejA1FrCU.roa (hash: kf3O7lpj7s7VfmT2vuNx6GwPZjLLFUhTpSV85VBR1i4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:bb:32:3d:de:48:ff:65:69:e7:1e:95:83:d5:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b1e72f3d0957f5a6e3bd1b844a12a6147449027
Validity
Not Before: Jan 31 10:00:09 2025 GMT
Not After : Feb 1 10:00:09 2025 GMT
Subject: CN=84ae5e00201dcab95df07f005b2bfce5c01c2673
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e8:d5:df:2c:c1:ec:21:15:6c:2b:df:ad:0f:
67:a1:27:38:7f:7a:90:90:30:c1:6c:7b:e8:1f:d7:
7b:d1:78:cd:b9:de:72:eb:22:19:11:06:96:ce:9b:
a1:93:85:50:4e:d8:2c:00:c7:fa:8f:d1:90:1c:2b:
bb:f6:9a:50:4c:6c:67:0c:df:4d:f4:17:44:9b:74:
41:7e:c2:32:32:c8:a5:25:71:c1:1d:01:a4:3b:6e:
04:0a:e3:1d:6c:91:a4:a6:43:a7:5e:12:40:f3:a4:
b2:33:05:34:6b:60:cb:d9:63:97:19:5a:2a:58:ac:
dd:8b:31:9e:69:9e:e5:83:9f:07:22:64:c1:d1:f5:
9b:fa:20:7c:cb:4f:4d:87:5a:40:34:90:a6:e1:52:
84:f5:bc:43:66:f8:3b:1d:e9:f3:6e:bc:3f:e7:e1:
58:85:e0:92:05:db:a8:fa:f0:98:24:68:a1:0a:4a:
34:02:7e:56:83:52:97:fa:f0:83:e9:ea:1f:2e:b4:
dc:ed:ac:37:5d:b3:7e:cd:53:02:3c:4b:c6:65:e7:
4c:24:11:06:b7:dd:fd:f9:de:97:08:e0:fd:79:50:
11:5a:01:d6:2b:c8:a7:38:cf:5e:78:c2:d7:29:6b:
21:c3:1f:d3:2c:07:10:17:c8:11:64:86:a8:96:2f:
bd:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:AE:5E:00:20:1D:CA:B9:5D:F0:7F:00:5B:2B:FC:E5:C0:1C:26:73
X509v3 Authority Key Identifier:
keyid:0B:1E:72:F3:D0:95:7F:5A:6E:3B:D1:B8:44:A1:2A:61:47:44:90:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cx5y89CVf1puO9G4RKEqYUdEkCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:cd:77:ad:8f:36:45:16:be:a7:53:a8:4c:c1:71:01:0a:97:
e2:72:b0:78:3c:d2:95:9b:19:44:42:d5:3c:5b:47:ed:62:ab:
bf:97:ff:cb:bc:92:63:93:95:69:98:8c:a2:3b:7c:3b:f2:0e:
d5:d6:a6:17:93:6c:2c:74:c1:9b:34:f2:83:9d:c2:2d:2f:91:
36:29:3e:3a:b1:07:3e:8b:3d:9f:f4:05:8b:4a:8b:32:b1:e7:
7f:f0:0a:d9:e6:d6:6a:06:0d:b2:a7:78:2b:14:2e:09:8c:56:
18:52:ec:aa:6d:6b:1f:0d:f5:38:77:82:51:5d:e1:d9:5a:21:
d9:a3:6d:0b:8f:d7:18:3e:8e:e0:a5:da:c2:b3:a6:d2:9c:70:
31:67:d6:ca:48:5f:12:f1:d6:b1:74:fb:8c:22:ca:00:84:5d:
a2:96:82:58:97:5f:f0:47:75:be:28:27:00:26:df:25:44:73:
c8:42:28:64:8c:f9:37:97:0f:75:27:aa:77:c9:c6:99:51:5c:
fb:35:ad:3a:a9:ad:35:00:09:54:ff:4d:bc:ad:08:ba:c5:a9:
2e:cf:4d:bd:36:49:69:0d:1a:f6:0b:7b:d1:4a:f0:b0:8c:b9:
2e:b3:b0:6e:e0:ff:1e:31:80:5b:91:20:48:e3:aa:9b:cd:28:
ee:fd:7b:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 17:39:48 2025 by rpki-client