Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/853849-be2e-432f-87a6-a64dad67b735/1/mCbZDesQFiidwO-MRLU06fsnG1s.mft
File: mCbZDesQFiidwO-MRLU06fsnG1s.mft (raw, json)
Hash identifier: 0YJNEptNXc6aSFLZR/vSPaghkfDqF8BhIoEBDWKLTWw=
Subject key identifier: 4E:5B:80:F0:B8:7E:C3:92:98:D0:03:EA:51:8B:FE:21:72:0C:25:95
Authority key identifier: 98:26:D9:0D:EB:10:16:28:9D:C0:EF:8C:44:B5:34:E9:FB:27:1B:5B
Certificate issuer: /CN=9826d90deb1016289dc0ef8c44b534e9fb271b5b
Certificate serial: 0194BC3BDFEF04C60FA05FB95E33859ED5DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCbZDesQFiidwO-MRLU06fsnG1s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/853849-be2e-432f-87a6-a64dad67b735/1/mCbZDesQFiidwO-MRLU06fsnG1s.mft
Manifest number: 1165
Signing time: Fri 31 Jan 2025 12:00:28 +0000
Manifest this update: Fri 31 Jan 2025 12:00:28 +0000
Manifest next update: Sat 01 Feb 2025 12:00:28 +0000
Files and hashes: 1: FbTSJ7mjm5cq99L1AIerA5b7n7U.roa (hash: wyC2uEbA5IXzXYZMj5wku9Zxs7BB1RHGpysgY+TRxt4=)
2: mCbZDesQFiidwO-MRLU06fsnG1s.crl (hash: R0FRrt3bHGX659sR1OTlrS+ImsYkrxbKblGw17ET4GI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:df:ef:04:c6:0f:a0:5f:b9:5e:33:85:9e:d5:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9826d90deb1016289dc0ef8c44b534e9fb271b5b
Validity
Not Before: Jan 31 12:00:28 2025 GMT
Not After : Feb 1 12:00:28 2025 GMT
Subject: CN=4e5b80f0b87ec39298d003ea518bfe21720c2595
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:41:6f:29:3d:90:61:90:cb:8d:73:32:94:b3:
90:09:bd:26:15:3e:8f:d7:32:af:dd:7e:1f:19:c0:
08:8b:42:a7:be:06:12:42:6e:7f:af:f4:5e:11:6b:
45:35:3f:48:8b:5d:49:01:2d:10:01:8c:f1:58:0d:
87:63:4d:0e:51:3f:94:5f:fe:c0:3c:33:0e:94:96:
e3:9c:64:10:3c:08:6e:1a:dc:21:40:8e:33:3e:c1:
16:ac:4f:2c:92:06:39:98:73:4c:39:c7:66:43:58:
76:9a:22:fa:8e:12:50:cc:fc:19:53:f7:8d:bf:a0:
ac:6f:02:49:61:cb:ad:37:de:5b:26:6d:a3:f0:ef:
c9:db:35:08:b4:09:43:ff:74:63:b1:2a:35:46:b7:
73:2f:46:66:c4:92:5f:c4:c5:31:ba:5c:78:34:5e:
ae:80:8a:34:26:78:e5:b7:27:2f:75:d9:ef:a1:53:
e2:03:a8:94:65:b8:47:e6:4a:9b:6a:09:1a:6d:c2:
0c:26:e2:fb:31:eb:7e:ea:49:92:eb:1e:f7:97:2d:
f2:ea:2f:34:d9:7b:28:ae:d5:f5:ba:25:8d:5f:c2:
d9:31:c2:68:36:47:91:a5:31:2d:cb:81:95:b5:07:
9b:77:e2:31:7a:80:6e:90:df:c6:88:6f:75:d4:78:
fb:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:5B:80:F0:B8:7E:C3:92:98:D0:03:EA:51:8B:FE:21:72:0C:25:95
X509v3 Authority Key Identifier:
keyid:98:26:D9:0D:EB:10:16:28:9D:C0:EF:8C:44:B5:34:E9:FB:27:1B:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCbZDesQFiidwO-MRLU06fsnG1s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/853849-be2e-432f-87a6-a64dad67b735/1/mCbZDesQFiidwO-MRLU06fsnG1s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/853849-be2e-432f-87a6-a64dad67b735/1/mCbZDesQFiidwO-MRLU06fsnG1s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:e8:ed:6f:89:2e:f0:38:01:6a:40:78:f9:c1:b4:f1:66:5f:
b0:d6:84:73:ac:62:f6:75:71:a0:ef:70:75:df:8a:09:8a:9d:
10:31:38:b3:27:af:f8:94:f3:e7:ef:2e:c1:3d:95:15:51:e7:
47:af:70:51:03:8b:53:1b:00:62:f1:16:21:00:d6:09:7d:3e:
bf:56:ef:52:5f:2d:14:c9:c1:55:64:64:c8:a0:d4:d6:b3:d5:
7a:8a:26:86:14:b1:fe:3c:2e:1d:f4:c1:96:fb:63:7e:03:a7:
52:b9:dd:74:9b:e9:41:23:ff:36:32:77:34:b7:42:84:7b:0e:
4f:18:4b:e6:e0:3b:40:29:43:4b:2c:b5:c1:75:5d:a6:f3:e3:
e1:3c:ad:39:b8:72:13:bf:18:4f:42:51:6d:ec:07:3f:8a:c3:
1c:ec:2a:13:18:cb:b6:07:bf:66:58:13:e1:6d:6c:6a:40:c4:
4c:7e:de:79:16:b7:27:2f:e3:9a:13:77:ef:ec:c4:14:c8:c3:
91:93:65:b9:c7:62:32:5b:61:b8:4d:7a:83:52:05:26:3f:5a:
cf:ef:e2:a7:c5:b5:6a:30:2a:fd:6b:17:52:e0:11:6a:89:3a:
c8:cf:d0:e3:f0:65:10:3d:c9:e2:d3:d4:74:53:4a:10:65:da:
bd:99:d3:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:51 2025 by rpki-client