Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/4d2e67-5ac2-427d-8b7b-d25a9df15925/1/mnVMcdYssjlI2RGe2ncv3jjme2c.mft
File: mnVMcdYssjlI2RGe2ncv3jjme2c.mft (raw, json)
Hash identifier: juIfvNMk5OITuZDrMcIQpvvhK4GOk2K7Cs4bs2/aiXE=
Subject key identifier: BB:CF:97:A0:D4:33:EF:C2:ED:64:8A:71:95:73:B0:AF:7B:72:E3:5F
Authority key identifier: 9A:75:4C:71:D6:2C:B2:39:48:D9:11:9E:DA:77:2F:DE:38:E6:7B:67
Certificate issuer: /CN=9a754c71d62cb23948d9119eda772fde38e67b67
Certificate serial: 0194BD175EBB9AB5FF55391BF9DAF01EB11B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mnVMcdYssjlI2RGe2ncv3jjme2c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/4d2e67-5ac2-427d-8b7b-d25a9df15925/1/mnVMcdYssjlI2RGe2ncv3jjme2c.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 16:00:12 +0000
Manifest this update: Fri 31 Jan 2025 16:00:12 +0000
Manifest next update: Sat 01 Feb 2025 16:00:12 +0000
Files and hashes: 1: GdhJf3HoY_u0PeGVqS4KptbEqf4.roa (hash: xtcOOYTemNKZRvBhp2Ch+jc7TYfVbK+JDVCRBNQIEfY=)
2: mnVMcdYssjlI2RGe2ncv3jjme2c.crl (hash: ff5xaqCdYu8eLRxnsKfmFd5qoXsYdlThDSDnQDvu41o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:5e:bb:9a:b5:ff:55:39:1b:f9:da:f0:1e:b1:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a754c71d62cb23948d9119eda772fde38e67b67
Validity
Not Before: Jan 31 16:00:12 2025 GMT
Not After : Feb 1 16:00:12 2025 GMT
Subject: CN=bbcf97a0d433efc2ed648a719573b0af7b72e35f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:2d:40:27:a2:9c:af:05:51:2e:43:ab:74:da:
2c:78:78:da:c4:d9:d2:33:be:1e:67:d8:db:a1:4c:
ad:29:05:e9:cb:ee:d1:db:89:c2:0e:c9:98:f7:f7:
ee:00:85:25:8e:e8:ce:76:4f:9d:b2:16:51:8a:ee:
78:6f:1f:6f:44:ce:54:70:74:aa:05:aa:0f:a2:83:
f9:b8:ab:84:98:9a:c7:29:a2:a8:3a:42:8a:d4:27:
0a:67:08:bc:02:e8:f8:75:b3:b0:b4:79:97:be:2d:
e9:31:18:ec:1c:ca:98:f7:30:9d:1a:6d:dd:53:55:
df:95:ec:a6:42:1e:c1:2b:b6:b0:66:d2:33:cf:33:
b5:8a:29:c9:ad:53:2a:fe:39:88:80:38:38:c8:b7:
b8:1e:5a:76:36:00:e4:6d:ac:f5:a7:5a:84:83:ee:
44:8c:69:ea:cb:2e:15:b7:31:e8:18:69:fa:81:f2:
b8:d1:ab:5d:3c:d5:31:bd:81:e9:1d:40:16:58:98:
2f:4b:57:3f:1e:46:36:4f:56:ce:39:97:59:be:95:
22:3f:1c:75:d4:f5:ab:70:06:31:dd:d0:21:bc:59:
7f:df:42:88:64:53:a4:9e:b3:88:0e:fa:66:a6:f7:
05:39:92:2f:b6:ea:7f:88:d4:d4:86:24:c8:41:10:
d0:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:CF:97:A0:D4:33:EF:C2:ED:64:8A:71:95:73:B0:AF:7B:72:E3:5F
X509v3 Authority Key Identifier:
keyid:9A:75:4C:71:D6:2C:B2:39:48:D9:11:9E:DA:77:2F:DE:38:E6:7B:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mnVMcdYssjlI2RGe2ncv3jjme2c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/4d2e67-5ac2-427d-8b7b-d25a9df15925/1/mnVMcdYssjlI2RGe2ncv3jjme2c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/4d2e67-5ac2-427d-8b7b-d25a9df15925/1/mnVMcdYssjlI2RGe2ncv3jjme2c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:0b:bb:d8:af:f8:71:cb:c0:a8:7f:d1:c8:f5:30:40:47:c4:
35:31:b4:03:54:97:50:8d:8e:67:91:3a:98:01:6f:72:4a:ab:
a1:f0:a7:3b:db:9b:89:2e:79:bf:7a:fd:e5:a9:f1:f9:52:ea:
e9:07:68:4a:f2:08:cd:3a:01:60:8d:8b:fa:5a:b9:d2:cb:9e:
96:5c:05:a5:76:3d:96:bd:2f:d4:5b:d5:6d:ab:ae:5b:db:05:
75:be:dd:70:81:dc:e4:36:bc:be:e3:98:cb:12:6b:e8:34:52:
6d:02:23:e0:b7:c3:55:ba:08:a1:48:94:81:25:dd:87:eb:e7:
14:8b:0a:e5:21:04:4f:af:14:98:bd:05:a8:0a:37:f0:c9:c3:
e3:12:4f:1d:e0:91:53:7e:5c:60:45:b6:5a:be:64:9b:bd:4a:
9e:fc:c2:c5:ce:1f:01:aa:42:44:65:a4:3a:ce:f9:70:fa:66:
05:6c:19:22:01:4d:23:a6:9b:3a:4d:54:fa:57:2c:11:ac:7f:
f7:ee:f3:cf:a0:d6:50:3f:3b:80:ba:ca:76:79:e9:cd:19:4a:
8f:4a:ef:8a:ff:20:f6:02:26:f8:79:28:51:8a:05:ec:27:ac:
d2:54:30:fd:37:10:81:16:7d:cc:a2:16:0c:7b:0c:2e:ae:9a:
e2:c8:30:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:23 2025 by rpki-client