Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/c3ceef-d755-4355-9304-6b16c788a90f/1/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.mft
File: mSOBKhWX6WBeKpv0ms-NY4mBpfQ.mft (raw, json)
Hash identifier: elLf74t0vv48aorUdhq2N2RIh6PqYLgQdLafKEC0+s0=
Subject key identifier: B6:CD:4E:FD:61:37:D2:17:EF:7D:E5:B6:49:78:53:8E:D0:25:AB:AA
Authority key identifier: 99:23:81:2A:15:97:E9:60:5E:2A:9B:F4:9A:CF:8D:63:89:81:A5:F4
Certificate issuer: /CN=9923812a1597e9605e2a9bf49acf8d638981a5f4
Certificate serial: 0194BD4EBEF150D1D9A5D77FE28207E750BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/c3ceef-d755-4355-9304-6b16c788a90f/1/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.mft
Manifest number: 0421
Signing time: Fri 31 Jan 2025 17:00:41 +0000
Manifest this update: Fri 31 Jan 2025 17:00:41 +0000
Manifest next update: Sat 01 Feb 2025 17:00:41 +0000
Files and hashes: 1: Hg9K5nZYj4y2LREbfAkkrFG5Zls.roa (hash: F2au21rdmN5JT8fnaZxO8lAlqsDmX3/SHMl+Sh2h2I8=)
2: PYZw-6nO0E-fCuRk7f6-YtCO0xE.roa (hash: HII+EpmrCTFcWzx501ezrd96ebkYigxDHvPMzn/KKcI=)
3: mSOBKhWX6WBeKpv0ms-NY4mBpfQ.crl (hash: QDsS1hcsDx4GMSdIH51vQfGPiMlhb0BJuMzYxEzn23U=)
4: x7qF1swc6KDeUuxg1VrqWurToxo.roa (hash: YrT3FZ1bNCws8FjDrY5Tigrw49fzDr1WY2YjpG9Nkf0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:be:f1:50:d1:d9:a5:d7:7f:e2:82:07:e7:50:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9923812a1597e9605e2a9bf49acf8d638981a5f4
Validity
Not Before: Jan 31 17:00:41 2025 GMT
Not After : Feb 1 17:00:41 2025 GMT
Subject: CN=b6cd4efd6137d217ef7de5b64978538ed025abaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ce:a2:a4:e6:4d:4a:6c:8a:f2:c8:ad:3e:ed:
bf:3b:4d:05:c0:ee:0d:af:be:33:83:ca:29:a5:50:
fb:73:d3:89:96:36:b1:ba:26:71:75:cc:c5:21:e2:
8f:ac:1f:16:94:ae:ac:f4:b2:ea:0a:c4:aa:26:ac:
b6:1c:55:86:d6:6d:14:9b:f6:e4:44:64:79:4e:8f:
ce:ed:e4:56:4c:ac:03:70:4d:39:3a:a8:45:0c:92:
f3:82:11:c4:3b:c8:fc:ea:8d:ee:1e:39:14:c3:83:
1f:2c:16:70:94:e2:1f:e6:75:a6:a7:f4:d2:5c:fd:
39:59:f5:a8:b7:da:58:50:33:3a:bf:9b:f7:48:f4:
3f:dd:5c:bb:25:6b:c7:43:a8:05:35:bb:7f:6b:c1:
fa:4f:90:33:24:d5:83:f0:65:1d:f2:f3:72:7f:97:
99:bd:77:00:2b:9c:d2:43:a6:7c:91:d8:a4:74:b8:
93:c3:5f:f4:01:81:ea:89:68:83:2e:2a:b1:d3:32:
aa:87:ee:f6:2e:3a:93:32:fc:d8:c5:24:12:ad:96:
fe:45:24:d9:a1:b2:87:3d:4e:68:23:f8:4d:4e:e7:
02:7c:05:69:25:40:18:ff:18:d9:df:39:8b:23:6e:
24:2d:81:29:40:2e:48:a5:38:60:54:6b:55:6d:1a:
b2:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:CD:4E:FD:61:37:D2:17:EF:7D:E5:B6:49:78:53:8E:D0:25:AB:AA
X509v3 Authority Key Identifier:
keyid:99:23:81:2A:15:97:E9:60:5E:2A:9B:F4:9A:CF:8D:63:89:81:A5:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/c3ceef-d755-4355-9304-6b16c788a90f/1/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/c3ceef-d755-4355-9304-6b16c788a90f/1/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:72:7a:d6:db:75:d7:1f:04:b9:90:c2:b3:6e:41:1d:87:ac:
68:a4:36:26:6f:e0:59:05:49:62:0f:f3:68:69:32:10:e2:e1:
5a:d6:2f:fc:6d:63:f3:b5:30:37:95:16:65:90:aa:c9:3e:ea:
9e:0a:c3:ec:fe:c6:16:47:ff:9d:35:7f:21:9f:7a:f2:83:8e:
fe:7a:a0:e9:39:53:ea:06:15:06:8f:cd:a4:3c:9e:62:f5:c5:
34:d7:aa:55:a8:c8:46:65:d9:63:97:e9:3e:bf:dd:3c:27:85:
21:ff:26:1f:66:3b:45:06:bd:48:49:bf:0a:86:85:d6:eb:71:
ed:02:bd:a1:64:0c:76:c0:50:50:aa:76:53:43:3b:93:8c:d4:
77:4b:20:b7:ae:e0:be:8a:25:bd:77:b9:3d:8d:a9:64:a2:e3:
81:77:b3:4c:20:be:29:5a:51:5e:bf:91:e5:b8:03:06:8d:32:
32:80:f1:21:b2:f3:4a:c4:8e:db:ff:10:c7:eb:13:cc:83:05:
ac:c7:96:0c:6d:b3:25:44:3d:ee:76:08:d8:9e:fc:fc:14:96:
59:12:41:b4:1d:ac:2a:a6:59:0c:b7:63:22:7d:33:1c:ee:a6:
27:e3:1f:1d:1c:88:83:73:5f:f3:37:1f:b3:c2:34:86:8c:22:
89:86:1a:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:21 2025 by rpki-client