Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/d5d690-fe16-449c-a6de-69df81f2d83d/1/mwj052FQMJu9IksB-J7CA8H8Vts.mft
File: mwj052FQMJu9IksB-J7CA8H8Vts.mft (raw, json)
Hash identifier: CehNZrq+JSAgwfxm0Szxip/00evmFv48vf9il5feoZk=
Subject key identifier: 95:C0:06:9B:30:DC:D8:5B:1E:78:C3:D7:1E:CB:25:81:7A:65:5D:B9
Authority key identifier: 9B:08:F4:E7:61:50:30:9B:BD:22:4B:01:F8:9E:C2:03:C1:FC:56:DB
Certificate issuer: /CN=9b08f4e76150309bbd224b01f89ec203c1fc56db
Certificate serial: 0194BBCF0258A585A0C24D36ABA40FEAE017
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwj052FQMJu9IksB-J7CA8H8Vts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/d5d690-fe16-449c-a6de-69df81f2d83d/1/mwj052FQMJu9IksB-J7CA8H8Vts.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 10:01:33 +0000
Manifest this update: Fri 31 Jan 2025 10:01:33 +0000
Manifest next update: Sat 01 Feb 2025 10:01:33 +0000
Files and hashes: 1: mwj052FQMJu9IksB-J7CA8H8Vts.crl (hash: czcP5mFF+uKOFA7/ZmVD8IkVCVXwdYkz9WM8yyAHBoQ=)
2: yMCWx_vwP00jLW3_uRevvXcRMmk.roa (hash: xnNpTecLSpiwvjQT9lRJw8IJFmY7Zwk40Z4AZXbx8O4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cf:02:58:a5:85:a0:c2:4d:36:ab:a4:0f:ea:e0:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b08f4e76150309bbd224b01f89ec203c1fc56db
Validity
Not Before: Jan 31 10:01:33 2025 GMT
Not After : Feb 1 10:01:33 2025 GMT
Subject: CN=95c0069b30dcd85b1e78c3d71ecb25817a655db9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:9a:f1:5d:69:b0:a1:44:10:2a:08:76:b0:a1:
68:97:1d:2d:80:6d:c1:19:00:82:19:c2:5d:6c:79:
e8:be:7d:a7:5a:9c:f2:43:b9:7e:7f:70:a5:81:96:
91:cb:42:26:00:92:f6:6c:19:ce:b0:1d:71:e1:4c:
a7:a6:5b:d2:3d:85:a2:e8:a1:28:18:67:24:f6:a8:
7b:11:ea:e1:0e:bd:08:29:ff:df:2e:58:a1:73:30:
0a:07:5c:d2:b2:df:3e:ca:48:a5:03:71:16:a4:d5:
e1:ef:8f:f1:d2:0f:d6:cd:8c:07:e4:35:9d:04:e9:
f6:ec:ff:e3:ff:1c:e7:9e:b1:ff:a1:c0:d7:67:21:
67:62:0b:dc:8f:84:a0:73:af:33:e9:98:ab:c3:8e:
d3:b1:78:a1:27:12:a3:98:9f:a0:8a:24:fc:63:38:
4c:30:52:c2:16:59:e0:e6:77:3d:31:f3:06:1a:d4:
69:c9:7e:0c:20:b9:06:d8:5f:13:1d:48:06:1e:25:
de:37:cb:d2:18:be:96:b8:f7:5e:2b:6c:b1:57:23:
9c:e6:b0:3e:3e:27:f1:56:5d:a5:95:f9:94:04:10:
32:41:80:87:42:c8:ad:e5:33:13:60:6f:2c:40:75:
de:76:70:d0:8d:01:c5:e2:c6:bc:5d:ba:7a:cc:38:
27:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:C0:06:9B:30:DC:D8:5B:1E:78:C3:D7:1E:CB:25:81:7A:65:5D:B9
X509v3 Authority Key Identifier:
keyid:9B:08:F4:E7:61:50:30:9B:BD:22:4B:01:F8:9E:C2:03:C1:FC:56:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwj052FQMJu9IksB-J7CA8H8Vts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/d5d690-fe16-449c-a6de-69df81f2d83d/1/mwj052FQMJu9IksB-J7CA8H8Vts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/d5d690-fe16-449c-a6de-69df81f2d83d/1/mwj052FQMJu9IksB-J7CA8H8Vts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:e0:3e:1c:0e:45:8f:89:5e:04:df:c2:0b:20:16:f6:d3:5c:
55:db:cb:2a:c6:72:01:2e:a4:27:64:97:28:31:d1:c0:2c:68:
1d:4a:34:94:05:3e:ac:0f:0b:84:3f:26:89:14:39:b9:ba:2a:
23:f6:92:99:f9:ab:ce:ad:e5:d5:85:74:a8:6f:c8:81:c5:15:
2b:2b:44:1a:70:3d:1d:62:b1:4c:52:6a:4e:b4:96:f5:20:74:
8e:ae:ea:78:84:3e:c0:c9:f2:7f:2d:7a:c6:a8:75:b3:9d:90:
7a:8e:37:59:e5:1d:e6:00:f3:64:22:cf:e7:78:b6:be:cc:80:
af:89:c3:31:e3:15:fa:d1:b2:c9:b2:37:1e:19:ed:4f:46:b0:
db:67:fd:e8:e0:6b:e6:8d:30:7b:99:2b:1b:cc:ad:9c:df:b6:
f0:f6:4e:77:7d:a7:f9:4c:6a:57:7a:e2:e5:6c:0a:47:61:21:
07:20:8b:32:51:8c:2e:53:fb:45:20:71:22:b2:33:e5:53:ed:
da:fd:e6:88:cc:f2:06:c7:e9:92:c3:cb:bf:40:f0:ec:26:73:
6a:c7:74:5e:60:fd:4e:90:e0:ec:4e:5a:58:4c:01:41:75:0d:
d7:01:33:32:35:8d:18:e0:45:4e:c3:fb:22:c4:d6:5f:b4:05:
44:1f:a2:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:39:55 2025 by rpki-client