Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/255149-8c4b-4cd8-919f-77bb532228b4/1/c46JPc00f32rX3DTUfj84d6qZdE.mft
File: c46JPc00f32rX3DTUfj84d6qZdE.mft (raw, json)
Hash identifier: kIUSOSpFMJ0zoQwqy04DshEK8sRAAw92njp04BnMjMs=
Subject key identifier: 0B:77:0D:09:86:DB:11:5F:C0:4C:BC:45:D6:6E:2F:2D:31:F8:9D:DA
Authority key identifier: 73:8E:89:3D:CD:34:7F:7D:AB:5F:70:D3:51:F8:FC:E1:DE:AA:65:D1
Certificate issuer: /CN=738e893dcd347f7dab5f70d351f8fce1deaa65d1
Certificate serial: 0194BC72935D7A8946412D06818F8B3056B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c46JPc00f32rX3DTUfj84d6qZdE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/255149-8c4b-4cd8-919f-77bb532228b4/1/c46JPc00f32rX3DTUfj84d6qZdE.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 13:00:12 +0000
Manifest this update: Fri 31 Jan 2025 13:00:12 +0000
Manifest next update: Sat 01 Feb 2025 13:00:12 +0000
Files and hashes: 1: 3ktEzDL0WvhnsuJm2C6DIk-mHBM.roa (hash: OJtb++yW5+MtXw5QSymaUjcZIRPMQ11YahPbPvwPK4Q=)
2: c46JPc00f32rX3DTUfj84d6qZdE.crl (hash: 7TVcjWNNTHrRkDwsm/XsKAUZCW4un60FVSSLPRZTl6k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:93:5d:7a:89:46:41:2d:06:81:8f:8b:30:56:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=738e893dcd347f7dab5f70d351f8fce1deaa65d1
Validity
Not Before: Jan 31 13:00:12 2025 GMT
Not After : Feb 1 13:00:12 2025 GMT
Subject: CN=0b770d0986db115fc04cbc45d66e2f2d31f89dda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:1e:87:76:32:d4:2c:03:b3:5d:5c:c0:aa:59:
d8:75:67:a9:7a:d2:26:2a:56:7d:1c:4e:aa:ea:41:
0b:f6:ee:82:ba:4f:66:24:e4:28:d0:2b:4f:1a:5f:
6f:fc:15:02:4e:42:b8:9a:b4:95:fd:47:bc:b8:95:
4e:14:aa:db:3b:41:9d:45:ca:5c:21:ae:27:43:16:
50:e3:e6:b5:cd:98:02:a1:e1:c2:ba:a0:d8:6f:48:
a7:c4:85:9b:0c:f8:c6:f8:b9:a9:6b:e2:52:0c:cf:
6c:b8:fa:12:dd:bb:fe:18:70:ab:1d:b9:df:4c:a2:
96:c9:1a:cd:71:21:dd:26:bb:3b:7d:95:1e:af:6f:
31:c4:45:9f:35:c8:a0:29:ce:89:73:c1:04:d2:1d:
5e:ec:98:ac:42:13:d1:74:76:e3:80:80:2d:f8:cb:
1f:6c:33:e8:1f:31:52:ba:c0:a1:71:2e:41:9e:ac:
71:38:05:d6:97:ca:b1:5b:78:fe:70:f6:b8:ce:df:
90:18:b9:e8:76:2c:f6:b2:ab:e7:cd:24:0e:b8:32:
dd:70:31:c7:21:3b:58:3c:37:d7:ff:72:24:e8:4e:
72:0e:d5:1e:71:83:5a:c0:68:fb:16:3e:08:73:54:
14:90:d0:e6:af:26:ac:9e:26:18:2a:cd:0f:6e:c5:
36:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:77:0D:09:86:DB:11:5F:C0:4C:BC:45:D6:6E:2F:2D:31:F8:9D:DA
X509v3 Authority Key Identifier:
keyid:73:8E:89:3D:CD:34:7F:7D:AB:5F:70:D3:51:F8:FC:E1:DE:AA:65:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c46JPc00f32rX3DTUfj84d6qZdE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/255149-8c4b-4cd8-919f-77bb532228b4/1/c46JPc00f32rX3DTUfj84d6qZdE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/255149-8c4b-4cd8-919f-77bb532228b4/1/c46JPc00f32rX3DTUfj84d6qZdE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:5d:44:f9:80:0b:6f:c3:ee:61:36:e0:02:14:4d:8f:21:b1:
39:15:f8:7f:7d:50:07:04:09:5c:1a:36:84:48:fd:82:b3:70:
58:96:5e:72:93:e1:fa:05:73:50:95:f8:98:7d:da:b6:45:d5:
55:90:e4:b9:9e:75:a9:c3:36:2e:dd:d4:ba:8f:f2:e2:0a:6a:
67:1d:c0:57:8b:7b:06:df:44:cc:7a:3d:51:2e:19:cd:45:78:
da:47:35:d0:a4:00:9d:5a:01:14:41:ec:4d:18:81:77:40:6e:
20:b1:c8:79:d1:25:80:f3:cc:09:3c:e9:9a:1a:1c:05:ae:13:
b4:b5:b5:e6:7a:ba:e0:f1:85:14:fc:34:ac:c1:7d:bd:24:81:
30:30:f1:93:b4:97:da:46:81:9b:08:c6:df:c6:86:35:90:9e:
4c:62:23:d1:45:89:7a:05:1b:f7:93:c9:48:1e:76:47:6c:73:
46:6f:7d:15:80:79:c9:ee:16:c9:6d:04:0e:c9:6e:1c:18:2f:
45:9a:cf:0d:ce:6d:e3:a6:0e:2a:e2:4f:9a:8c:90:58:1e:76:
46:c8:b3:07:d0:c7:fa:db:6c:2f:6b:43:71:a1:17:d5:67:1a:
0d:63:5c:a7:60:7d:68:66:e0:89:ea:95:8c:de:1a:04:7a:ef:
31:f3:64:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:24 2025 by rpki-client