Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.mft
File: MK_3UgloSjVGaQYdI9op-OovHV4.mft (raw, json)
Hash identifier: cDb/CD92uqfLLWCMo9zeV22AqjmkGvKn7ht6KF4oVDA=
Subject key identifier: BC:F2:2A:57:6E:97:F8:31:9E:19:8C:FA:F7:87:65:D3:91:31:9E:41
Authority key identifier: 30:AF:F7:52:09:68:4A:35:46:69:06:1D:23:DA:29:F8:EA:2F:1D:5E
Certificate issuer: /CN=30aff75209684a354669061d23da29f8ea2f1d5e
Certificate serial: 0194BD17D7E71F0FD288113A002450C4A429
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MK_3UgloSjVGaQYdI9op-OovHV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 16:00:43 +0000
Manifest this update: Fri 31 Jan 2025 16:00:43 +0000
Manifest next update: Sat 01 Feb 2025 16:00:43 +0000
Files and hashes: 1: C-bdkM4lL8tTpeZXpiv45nhPUuM.roa (hash: dO9wg4oa3fmXkWxOi24v6xA9xh5CDmqHbzYIcdtWFXo=)
2: IbRWuE5EQO-8LgU2mAsS5QizVAY.roa (hash: s+vcUKeYVky97TEOonv9opKh34KAYu2tRcLDRkyQ5gI=)
3: MK_3UgloSjVGaQYdI9op-OovHV4.crl (hash: yWRuyq1YfS/RYIceN+tPxe7bDT/4PWvOEfGa0mQ8FzE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:d7:e7:1f:0f:d2:88:11:3a:00:24:50:c4:a4:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30aff75209684a354669061d23da29f8ea2f1d5e
Validity
Not Before: Jan 31 16:00:43 2025 GMT
Not After : Feb 1 16:00:43 2025 GMT
Subject: CN=bcf22a576e97f8319e198cfaf78765d391319e41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:39:c4:bc:e8:b2:1b:ad:6b:55:81:a3:74:c2:
10:3a:c1:7d:44:a0:55:9a:cc:ea:b7:18:4b:49:30:
fa:2e:f1:0d:73:3c:05:50:b2:79:7b:62:74:bc:14:
63:3b:0b:14:6e:62:63:9b:3e:e2:95:21:7a:21:2d:
42:c4:09:ce:df:ef:91:fc:10:85:ee:db:7d:6d:d8:
bb:a9:be:4c:a8:4d:6b:ea:42:b1:fb:98:c7:e0:4a:
6f:47:c4:7e:c3:f7:5f:b8:49:85:fe:3d:7b:42:72:
36:af:7d:b4:35:df:ca:27:66:fb:20:2b:6a:ca:09:
02:db:f3:90:0b:b0:93:97:3d:91:a4:c1:97:5d:5e:
5c:e2:e7:ea:f6:d6:53:51:14:3e:0f:99:1e:99:a3:
12:a9:0f:25:0e:99:7c:e0:f9:99:b6:37:9d:93:52:
17:18:e9:1c:ec:1b:1b:6c:3e:69:9d:1d:06:10:8c:
2a:06:47:c1:44:df:e7:53:4a:9f:11:31:0d:82:02:
ed:85:19:ec:f8:a5:e8:25:65:83:ae:4c:f1:9a:fd:
84:7f:95:93:1a:38:75:50:c0:fc:21:c3:31:ac:80:
78:01:15:4b:9a:38:cf:33:ca:0f:07:53:dc:2c:a3:
8f:8a:74:34:6d:91:fd:92:34:b0:17:83:c7:e0:71:
28:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:F2:2A:57:6E:97:F8:31:9E:19:8C:FA:F7:87:65:D3:91:31:9E:41
X509v3 Authority Key Identifier:
keyid:30:AF:F7:52:09:68:4A:35:46:69:06:1D:23:DA:29:F8:EA:2F:1D:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MK_3UgloSjVGaQYdI9op-OovHV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:d5:c2:e7:1d:be:96:2c:4e:d1:14:ab:f5:a0:99:13:23:9d:
8f:23:3a:8c:ce:e6:c4:94:77:41:32:46:7a:08:c1:d7:75:88:
36:ee:dc:e8:9d:ae:fa:f8:fe:76:fb:ef:7c:92:2b:fd:25:5b:
87:3c:7a:30:71:08:a0:6d:60:72:82:0f:30:ac:fc:5d:4d:3d:
cf:09:07:65:3f:11:37:32:39:3d:74:92:d6:13:df:f8:fd:bb:
e8:b3:f1:59:5d:26:be:cb:90:fc:14:60:02:00:40:61:c0:f6:
7c:d3:b0:45:20:b2:1a:8a:ba:96:04:02:fc:63:82:ca:49:57:
a0:66:7e:94:22:d9:6b:f0:8c:3e:ba:20:9a:71:62:25:37:a0:
ab:53:df:3a:18:4b:44:74:f6:fb:d0:6e:0d:6a:56:66:dc:72:
7d:8d:b1:de:99:4b:7c:bf:67:8f:65:26:a6:1b:9e:c9:82:6b:
62:f3:f5:9d:cb:5f:6c:fd:b0:0d:c9:f4:15:b8:31:9c:bd:69:
8e:3e:8a:fe:a2:c5:9d:8b:fe:76:5e:c7:f8:1a:b7:0d:51:21:
50:05:49:12:cc:a0:bc:17:26:1b:8e:bf:11:78:ad:2e:59:7c:
e5:70:33:89:02:57:f3:03:33:cc:92:6e:fe:db:8f:78:d5:6b:
84:31:e1:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:38:02 2025 by rpki-client