Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/06ca5d-d0c4-4215-8968-b6d4c4fc0c21/1/kMuqazbmzWh0x47UWk-N1xcwMdk.mft
File: kMuqazbmzWh0x47UWk-N1xcwMdk.mft (raw, json)
Hash identifier: GBHkj/VY2WjXh07eLEu/O56vLFQ3gl7zYcDjuuEwWQM=
Subject key identifier: 58:2F:D7:E5:12:C0:9F:B9:28:0D:CD:F3:BF:1E:9A:63:33:7E:98:68
Authority key identifier: 90:CB:AA:6B:36:E6:CD:68:74:C7:8E:D4:5A:4F:8D:D7:17:30:31:D9
Certificate issuer: /CN=90cbaa6b36e6cd6874c78ed45a4f8dd7173031d9
Certificate serial: 0194BC3C9E34FD686D48B87ABDAC0D11F4AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kMuqazbmzWh0x47UWk-N1xcwMdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/06ca5d-d0c4-4215-8968-b6d4c4fc0c21/1/kMuqazbmzWh0x47UWk-N1xcwMdk.mft
Manifest number: 099B
Signing time: Fri 31 Jan 2025 12:01:16 +0000
Manifest this update: Fri 31 Jan 2025 12:01:16 +0000
Manifest next update: Sat 01 Feb 2025 12:01:16 +0000
Files and hashes: 1: c4U2evb93678CsrZ2ZQQemAPoFw.roa (hash: 5ZLOIZ+BzX8i3ipSMR9csvqZ6+nojKYy3y5RkNukgEE=)
2: kMuqazbmzWh0x47UWk-N1xcwMdk.crl (hash: YN15K8XyOVeJy9p5iU+8qL5/vYC0b4v4ebQAEsQuw84=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:9e:34:fd:68:6d:48:b8:7a:bd:ac:0d:11:f4:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90cbaa6b36e6cd6874c78ed45a4f8dd7173031d9
Validity
Not Before: Jan 31 12:01:16 2025 GMT
Not After : Feb 1 12:01:16 2025 GMT
Subject: CN=582fd7e512c09fb9280dcdf3bf1e9a63337e9868
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ee:f4:69:e4:17:ad:62:73:ac:05:85:78:6f:
44:98:c2:76:cc:fd:2d:f5:b9:e7:e6:04:b9:97:42:
57:47:cb:40:c0:ee:3d:ec:a1:3b:c9:7e:26:f8:c1:
09:0f:a3:9f:fd:9e:38:f8:7e:b4:2b:ad:17:21:e7:
d7:16:5b:d0:84:35:d9:cb:71:92:8b:44:df:af:9e:
c3:f3:d9:04:03:62:30:87:da:98:b0:22:c2:bb:96:
f4:77:82:a2:c7:ea:2f:b1:9a:05:54:c6:62:09:e3:
f2:2b:c5:50:28:03:d0:31:4a:68:c4:ac:26:f1:77:
f1:3e:53:9c:c0:e9:fc:10:32:bd:12:c0:69:c7:d9:
9d:3b:ae:07:49:ed:f3:12:f8:45:74:5a:34:95:95:
77:4d:dd:ad:42:39:0c:c9:65:3a:9e:dc:3e:83:59:
63:90:88:df:5c:24:28:20:3a:e5:b0:3a:41:42:f5:
ce:38:b1:a6:82:9c:8f:89:39:a0:8e:d0:ed:99:23:
4e:ea:80:3b:71:34:c9:e2:db:81:fd:ea:62:f2:6e:
e5:02:b0:96:dd:9d:d2:51:c7:c3:d2:35:ca:de:11:
4f:0f:0a:69:13:69:66:79:7d:93:6a:42:2d:91:9a:
33:0c:1e:00:84:ed:4f:2b:89:05:c6:11:d4:cc:48:
54:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:2F:D7:E5:12:C0:9F:B9:28:0D:CD:F3:BF:1E:9A:63:33:7E:98:68
X509v3 Authority Key Identifier:
keyid:90:CB:AA:6B:36:E6:CD:68:74:C7:8E:D4:5A:4F:8D:D7:17:30:31:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kMuqazbmzWh0x47UWk-N1xcwMdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/06ca5d-d0c4-4215-8968-b6d4c4fc0c21/1/kMuqazbmzWh0x47UWk-N1xcwMdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/06ca5d-d0c4-4215-8968-b6d4c4fc0c21/1/kMuqazbmzWh0x47UWk-N1xcwMdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:38:a3:55:f5:2e:d8:c9:59:8a:69:a6:b1:45:82:d3:8f:60:
be:65:90:8c:7e:e3:fe:7b:da:5a:8a:81:63:2b:34:e1:97:13:
c5:fe:c4:84:5b:e7:ce:1c:5f:41:9e:0d:68:63:59:f4:d8:47:
33:48:17:b3:82:be:a1:12:0e:6a:4f:6b:08:bd:80:76:a4:90:
c6:1e:b7:1f:5f:5e:24:da:09:61:a9:8c:fe:c5:08:fe:44:15:
f0:90:d9:a4:20:03:48:35:db:30:d4:bc:1d:6e:52:51:49:bf:
2a:86:e9:ae:b0:9a:d3:c4:3a:ba:06:06:e9:f8:ff:63:09:e5:
ca:96:20:f5:2d:5c:8b:da:cd:29:9a:1a:58:68:6a:70:01:60:
0b:e8:43:d9:19:fb:3e:87:95:f1:b8:12:4a:14:20:af:60:ec:
22:8e:4b:5a:57:a3:d6:4a:33:a5:0e:aa:04:e5:d6:24:d4:69:
a3:9d:e6:62:07:3d:13:52:b7:18:85:66:1e:79:24:7b:9c:39:
1b:c2:a2:a7:c4:63:61:51:e3:1c:ae:17:fa:68:9e:16:48:57:
fd:b4:b7:45:69:e9:c3:e7:4b:7a:42:07:ce:3f:f4:87:1d:0f:
d9:39:1a:cf:68:3d:b7:0d:e9:7f:9a:37:b3:47:d1:c6:24:ff:
5c:f2:58:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:24:49 2025 by rpki-client