Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
File: M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft (raw, json)
Hash identifier: FKrw/iIUgp//DS9j0BZqD9U0iktmg85qE4bMQelzSLw=
Subject key identifier: 33:59:1F:D4:A1:D6:39:DE:99:FC:79:ED:3A:EC:8C:46:12:8F:AB:7A
Authority key identifier: 33:4B:09:74:3E:D2:AF:D6:AF:B4:7C:58:36:0E:E3:11:2A:95:CD:34
Certificate issuer: /CN=334b09743ed2afd6afb47c58360ee3112a95cd34
Certificate serial: 0194BBCE618C85D04ED3047AC0B4946FE5F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
Manifest number: 0404
Signing time: Fri 31 Jan 2025 10:00:52 +0000
Manifest this update: Fri 31 Jan 2025 10:00:52 +0000
Manifest next update: Sat 01 Feb 2025 10:00:52 +0000
Files and hashes: 1: KGg38ybeN3fvyEo89Wp9trP-DE4.roa (hash: o4s5h0G+Hrss7Tf1oF8r4jzhp+l0giYxBrA89MUtebs=)
2: M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl (hash: RRtYhPaPF2hz1/7efotex3m3zoVnU072KChc9eHbY1s=)
3: P4Ok1kDh3dB-OfcpRjQxiOoay-8.roa (hash: KIn/EsS9ND9RtV2Bj6/EsO8jeh9wAaPztupLYU69+Mk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:61:8c:85:d0:4e:d3:04:7a:c0:b4:94:6f:e5:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=334b09743ed2afd6afb47c58360ee3112a95cd34
Validity
Not Before: Jan 31 10:00:52 2025 GMT
Not After : Feb 1 10:00:52 2025 GMT
Subject: CN=33591fd4a1d639de99fc79ed3aec8c46128fab7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b2:41:c1:e5:dc:99:e5:53:2f:f4:16:36:1a:
b0:ea:ca:ba:d9:b6:62:03:e6:3a:54:3a:f7:c2:fc:
28:d2:33:86:87:ae:2b:ba:08:60:8f:28:5e:0d:54:
83:1f:c7:0f:0e:e9:9c:c5:6c:53:43:ef:88:86:78:
98:0a:7c:2b:9a:69:f2:9a:a5:fa:ab:b3:9c:a7:cd:
d5:34:8a:f9:b7:93:9b:f8:36:6a:20:4a:54:42:51:
60:f3:d6:d5:57:bc:2c:59:24:aa:65:94:d2:4e:7d:
4a:a2:6b:a5:da:fe:3d:46:c9:b3:e7:2c:61:49:a6:
b0:db:c7:41:96:2a:f9:ad:12:ff:90:4b:92:ed:68:
72:6c:0e:9c:d4:18:28:0c:e9:69:10:2d:16:c6:8f:
b1:7b:ee:45:5d:b3:1f:c7:d9:79:9d:76:f4:e3:a2:
c5:71:94:37:59:ec:a2:f2:89:7f:fa:9a:59:eb:39:
2a:7d:60:79:da:73:e3:60:4b:98:07:7d:03:3e:14:
2c:c2:55:b7:3f:b8:84:9e:f4:bd:49:25:f3:52:28:
f1:59:46:41:a6:b1:7f:27:9b:fa:31:00:0b:9c:c3:
6b:41:1a:37:89:c2:22:6b:48:2a:41:fc:ce:6e:12:
c8:84:1f:49:ed:77:db:5c:84:51:b2:78:3c:7d:01:
86:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:59:1F:D4:A1:D6:39:DE:99:FC:79:ED:3A:EC:8C:46:12:8F:AB:7A
X509v3 Authority Key Identifier:
keyid:33:4B:09:74:3E:D2:AF:D6:AF:B4:7C:58:36:0E:E3:11:2A:95:CD:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:82:06:c2:0b:6d:c7:26:2d:fd:6b:0c:dd:a5:6c:b9:ff:c4:
21:cc:b0:b2:e6:67:14:4d:51:aa:21:5d:aa:53:c4:ea:c0:0d:
d7:5c:25:eb:4e:b4:7b:ed:ff:04:fb:d8:bc:eb:18:96:18:7a:
ee:a1:9f:8c:d8:be:11:f9:58:b3:27:bb:a1:1b:f6:68:45:d7:
11:39:45:36:81:80:13:f4:c9:4e:7e:78:11:f1:71:df:a6:06:
ba:5a:92:54:f2:41:65:c3:f0:e7:72:9b:5c:0e:a4:c5:87:2d:
2d:be:43:cb:03:b2:9e:b5:f0:e6:b9:b9:3d:d3:ef:18:28:12:
d7:be:8f:8b:2a:c3:38:e8:7d:11:5b:91:6a:b9:87:84:58:fe:
bf:0e:51:ba:00:09:a9:22:ec:e8:f9:8e:64:78:5c:3b:01:8a:
d5:df:8e:eb:02:98:54:e2:d9:b8:ce:bb:0a:d8:f0:1d:05:be:
79:c0:48:07:7b:5a:82:17:3d:43:cd:bc:16:b2:35:f8:49:0b:
42:59:ac:69:b4:f3:cf:22:cc:7e:88:40:44:1b:bb:6e:23:fa:
46:50:bd:55:bf:12:74:10:e7:3e:1a:ab:71:82:6f:7b:b1:8e:
a8:2e:43:a0:c7:c4:e1:ac:5c:9b:22:0d:a3:b3:a0:46:8d:35:
c5:e3:16:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:04 2025 by rpki-client