Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/706f41-0531-43df-b1e9-6f86d0b7e3e0/1/bMdYWreoPsgLVauVe_N7eR52UBY.mft
File: bMdYWreoPsgLVauVe_N7eR52UBY.mft (raw, json)
Hash identifier: 0go//Zl88x5UF6TMBovZ9/TABo/blGuGnyjqGaAjt+s=
Subject key identifier: 4F:1C:BB:FC:F0:A9:3A:06:A2:B4:FA:A8:AD:3D:A1:97:77:7C:BA:EF
Authority key identifier: 6C:C7:58:5A:B7:A8:3E:C8:0B:55:AB:95:7B:F3:7B:79:1E:76:50:16
Certificate issuer: /CN=6cc7585ab7a83ec80b55ab957bf37b791e765016
Certificate serial: 0194BD855535D05D965220856DD4E5E4D874
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bMdYWreoPsgLVauVe_N7eR52UBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/706f41-0531-43df-b1e9-6f86d0b7e3e0/1/bMdYWreoPsgLVauVe_N7eR52UBY.mft
Manifest number: 1196
Signing time: Fri 31 Jan 2025 18:00:19 +0000
Manifest this update: Fri 31 Jan 2025 18:00:19 +0000
Manifest next update: Sat 01 Feb 2025 18:00:19 +0000
Files and hashes: 1: JJLEui4261ZXJVAJCMhhZuF8jH8.roa (hash: /ixKOls/TcJQuO85TTUBz1567wbeYHBB+Wz+IfsDjR8=)
2: bMdYWreoPsgLVauVe_N7eR52UBY.crl (hash: f0XP6eG8cFE2RcPNWu2kkskpxcYdTZ/d1yOkdbExlg8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:55:35:d0:5d:96:52:20:85:6d:d4:e5:e4:d8:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cc7585ab7a83ec80b55ab957bf37b791e765016
Validity
Not Before: Jan 31 18:00:19 2025 GMT
Not After : Feb 1 18:00:19 2025 GMT
Subject: CN=4f1cbbfcf0a93a06a2b4faa8ad3da197777cbaef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:44:b5:39:c3:b0:ef:89:38:10:49:c9:47:d4:
2a:39:96:20:7a:11:c1:18:39:df:cc:2e:9c:f9:ba:
de:89:78:d0:10:7e:39:27:99:92:54:58:61:7b:33:
2b:26:5d:24:d8:02:c2:b9:f9:59:47:73:0e:de:3e:
19:a8:d2:f1:8c:11:b9:69:a1:cc:96:4c:5d:1a:9f:
53:cd:ab:0f:09:f3:09:85:03:99:38:12:b8:e1:de:
77:46:c9:30:af:8e:89:59:87:9c:62:45:b1:cd:a4:
62:55:99:b3:ab:22:e7:66:9e:99:48:ba:03:f1:83:
11:8e:89:d5:e7:4b:ac:f8:c7:94:e7:2e:21:b4:a8:
cd:5b:8d:c3:65:f0:c7:fd:53:4d:d4:6d:ba:7f:dd:
28:9e:1b:28:44:04:93:80:a3:ba:58:f2:6c:1d:06:
f2:63:92:5d:5e:be:60:e1:b4:e6:89:79:1f:b6:7e:
02:9d:ad:37:1f:0b:b4:b3:d8:6a:cf:e0:74:12:ac:
8a:50:76:17:60:f8:29:c2:0b:66:d2:04:8e:48:84:
94:61:54:82:0e:31:03:1c:8d:90:f8:55:d8:59:7c:
a3:b9:14:1c:c8:73:04:44:c9:1c:21:c8:5d:88:86:
4a:6a:8f:9d:69:66:b8:4a:8f:f9:4c:0e:f6:80:51:
02:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:1C:BB:FC:F0:A9:3A:06:A2:B4:FA:A8:AD:3D:A1:97:77:7C:BA:EF
X509v3 Authority Key Identifier:
keyid:6C:C7:58:5A:B7:A8:3E:C8:0B:55:AB:95:7B:F3:7B:79:1E:76:50:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bMdYWreoPsgLVauVe_N7eR52UBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/706f41-0531-43df-b1e9-6f86d0b7e3e0/1/bMdYWreoPsgLVauVe_N7eR52UBY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/706f41-0531-43df-b1e9-6f86d0b7e3e0/1/bMdYWreoPsgLVauVe_N7eR52UBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:40:6b:60:a9:80:fe:55:30:8d:76:2a:41:9e:bb:14:3f:f6:
b2:39:61:a6:5f:34:8b:f1:c1:e6:1f:c8:41:c9:86:61:b3:4c:
0a:bc:7d:6e:34:d9:93:07:8c:31:82:08:6b:8f:99:fb:e9:59:
46:03:aa:13:10:1b:69:93:ba:c8:1a:e1:83:74:32:b1:b7:35:
1b:5c:6b:aa:70:78:fc:90:2f:f3:98:9a:2d:fa:2c:53:3e:51:
4e:e4:c8:b4:ba:14:c5:84:a2:ea:bb:8f:60:5e:32:9d:32:b1:
07:05:c2:0b:eb:13:fb:5e:83:59:89:a8:9f:f4:01:cc:45:e8:
1e:2f:f1:50:e2:30:9b:33:23:59:b2:b8:f3:99:5c:da:58:f2:
c2:32:6b:30:42:2e:ac:de:2e:c3:84:42:d2:13:ce:50:d7:55:
7c:bd:07:5b:34:35:31:7a:43:52:04:91:43:b3:9e:6b:37:f2:
a5:3c:19:4b:a6:40:06:fa:7c:fa:68:da:f4:91:1d:aa:2b:18:
5d:42:a8:98:14:99:f3:33:91:67:05:f0:38:7f:24:55:a2:60:
73:df:f5:53:d2:65:22:7c:ed:8e:4c:c9:74:b0:22:11:4a:95:
1e:94:e4:4a:77:01:02:09:58:d8:84:fe:ee:90:1e:a5:ea:92:
36:ce:c5:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:23 2025 by rpki-client