Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/08f9b4-115c-4488-b567-5cf7c0621065/1/83Uc-MOi02yXRMllGYmZRaxgeCA.mft
File: 83Uc-MOi02yXRMllGYmZRaxgeCA.mft (raw, json)
Hash identifier: K0sQeN797m6Sjobk0QOsCV6wP5rKbFJJkXRWrUlCeuc=
Subject key identifier: 6B:34:20:B2:67:C2:56:F1:A9:87:48:8A:88:9E:EE:D8:05:5E:16:5F
Authority key identifier: F3:75:1C:F8:C3:A2:D3:6C:97:44:C9:65:19:89:99:45:AC:60:78:20
Certificate issuer: /CN=f3751cf8c3a2d36c9744c96519899945ac607820
Certificate serial: 0194BC3C27EC4E3CAF58531CABA2995A66BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/83Uc-MOi02yXRMllGYmZRaxgeCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/08f9b4-115c-4488-b567-5cf7c0621065/1/83Uc-MOi02yXRMllGYmZRaxgeCA.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 12:00:46 +0000
Manifest this update: Fri 31 Jan 2025 12:00:46 +0000
Manifest next update: Sat 01 Feb 2025 12:00:46 +0000
Files and hashes: 1: 83Uc-MOi02yXRMllGYmZRaxgeCA.crl (hash: e983iNxviVQSex4ke+LtXRzXHWmVjJBWrIW+nhXjbIY=)
2: RQIIwfPKKX5p7u0Y-C_D5Y-bKBI.roa (hash: KiLJtwlRDmcGob+kpYuioRY1Q/RLPjcl0rdsa4MFnrs=)
3: xelQwmSnZUsP7vwyXYG-OjnLzks.roa (hash: VANd7e1T8sboSWcnlJJpwtTBZNkVD3ZVwPQJ+ivjoHw=)
4: ycYE11LlQ1a-t4T_yP1coVz5lU0.roa (hash: aqEuNcxSiCWBJQINtSpWdlIDutYbO4J8N5pMivaTnAc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:27:ec:4e:3c:af:58:53:1c:ab:a2:99:5a:66:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3751cf8c3a2d36c9744c96519899945ac607820
Validity
Not Before: Jan 31 12:00:46 2025 GMT
Not After : Feb 1 12:00:46 2025 GMT
Subject: CN=6b3420b267c256f1a987488a889eeed8055e165f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d5:b1:f3:d8:3b:b6:dc:27:91:cb:ac:4c:51:
ab:b3:6e:00:3e:b2:74:94:88:b8:75:48:97:00:f7:
f2:75:29:6d:04:0d:7a:a3:6c:98:9b:e9:b9:81:f9:
70:45:b5:d9:10:88:01:3e:3d:7a:09:b8:78:78:b6:
7f:a0:ab:a7:53:a7:ef:c4:87:0a:63:5c:47:cc:0c:
1c:f3:55:a5:4a:58:2b:2b:64:2c:7a:1f:ba:dd:bb:
4c:20:9a:9d:1d:26:09:ff:2a:a0:94:b5:4b:9c:44:
09:36:7c:5c:05:5a:a7:cb:12:d0:9f:d3:cc:7b:61:
de:0a:98:42:2f:bc:40:fe:81:48:b3:22:84:73:aa:
d2:63:e6:34:2e:54:11:71:65:18:21:5d:8f:59:8c:
89:ff:97:69:51:ef:1e:f4:6b:1c:2f:4b:80:59:88:
e5:7f:c6:e3:f1:ec:0e:f6:f7:32:2a:24:dc:64:bd:
5a:d7:77:47:2e:84:de:99:7a:3c:e6:38:b9:0f:42:
e5:19:31:c6:cd:8c:a3:88:ae:a0:16:39:fd:bc:cb:
65:37:a2:1b:28:26:73:a3:14:b1:c8:62:7f:4c:00:
33:d7:33:d5:de:50:7e:9b:10:f7:5c:62:5f:a4:01:
26:f8:27:34:ab:f0:a7:eb:67:8c:ba:0c:b7:66:ca:
d4:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:34:20:B2:67:C2:56:F1:A9:87:48:8A:88:9E:EE:D8:05:5E:16:5F
X509v3 Authority Key Identifier:
keyid:F3:75:1C:F8:C3:A2:D3:6C:97:44:C9:65:19:89:99:45:AC:60:78:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/83Uc-MOi02yXRMllGYmZRaxgeCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/08f9b4-115c-4488-b567-5cf7c0621065/1/83Uc-MOi02yXRMllGYmZRaxgeCA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/08f9b4-115c-4488-b567-5cf7c0621065/1/83Uc-MOi02yXRMllGYmZRaxgeCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:4f:f3:71:9f:76:90:4d:c7:70:03:8e:cf:b6:d0:ff:5f:90:
0b:b7:d4:a2:e6:5e:50:43:8f:3e:5c:b5:08:51:31:f9:c3:86:
9c:ff:75:b4:62:dc:b7:ee:c4:5b:c8:71:02:d7:86:30:67:d4:
3c:1b:07:81:91:b6:2f:19:2e:33:d0:dc:bc:26:25:dd:48:e9:
f3:dd:8a:c5:02:7a:d6:57:94:17:9e:7b:4d:a3:4d:98:30:cd:
f1:8a:b2:32:0e:5c:b2:73:aa:82:85:47:0f:b5:97:c8:b9:6c:
92:1e:97:e7:7e:16:ad:51:5f:bc:2b:d5:c5:7b:75:7b:e1:83:
73:4a:dd:7d:3c:48:65:c2:e7:cd:60:58:cc:e3:03:d4:bb:54:
c9:c3:6c:4d:2e:03:0c:74:ef:4b:e9:5b:06:06:fd:f6:19:77:
9c:1a:b5:0e:e9:cf:b0:43:dd:41:a0:58:01:75:a6:75:0a:51:
70:0d:39:d1:c9:d8:40:97:93:4b:2f:6a:7b:f2:9d:80:73:02:
ec:f2:87:2d:f5:26:f0:a5:89:28:46:45:b5:32:67:04:20:fb:
db:d6:cf:77:97:9a:2f:6f:c9:3e:f6:e7:fd:55:df:9a:71:af:
61:e6:9b:ad:f2:ff:40:f3:47:e1:bc:71:f0:ea:60:7d:0b:72:
99:4c:e5:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:28:28 2025 by rpki-client