Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/6cf769-9b58-4847-8f1f-edc54072ae89/1/rMMoWMzalYbG2WceMQ1RwoJoxFk.mft
File: rMMoWMzalYbG2WceMQ1RwoJoxFk.mft (raw, json)
Hash identifier: +a0Xv5wtiC6Azdm3F6vZt4rUE95Bmwhjwb5V7iVmksA=
Subject key identifier: D2:FD:55:4D:30:BF:63:48:5A:BF:08:BE:00:65:FD:1B:40:CD:2C:77
Authority key identifier: AC:C3:28:58:CC:DA:95:86:C6:D9:67:1E:31:0D:51:C2:82:68:C4:59
Certificate issuer: /CN=acc32858ccda9586c6d9671e310d51c28268c459
Certificate serial: 0194BD8575216F80FC3BA7A8C14ADE3BB122
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rMMoWMzalYbG2WceMQ1RwoJoxFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/6cf769-9b58-4847-8f1f-edc54072ae89/1/rMMoWMzalYbG2WceMQ1RwoJoxFk.mft
Manifest number: 13C7
Signing time: Fri 31 Jan 2025 18:00:27 +0000
Manifest this update: Fri 31 Jan 2025 18:00:27 +0000
Manifest next update: Sat 01 Feb 2025 18:00:27 +0000
Files and hashes: 1: 5wpBu9lqq6Eh5bxmApWBHSmv8rU.roa (hash: OWwgDNZvQnVhoKGxoJou3ziQhvyReIZ9m1NH7rz0BqA=)
2: rMMoWMzalYbG2WceMQ1RwoJoxFk.crl (hash: D1L0mn8OObRJrbWDWTFfoNmOuDmPegjfu0j+nvmxfxM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:75:21:6f:80:fc:3b:a7:a8:c1:4a:de:3b:b1:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acc32858ccda9586c6d9671e310d51c28268c459
Validity
Not Before: Jan 31 18:00:27 2025 GMT
Not After : Feb 1 18:00:27 2025 GMT
Subject: CN=d2fd554d30bf63485abf08be0065fd1b40cd2c77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:69:03:e0:6e:a4:c1:d9:d2:4b:39:39:a6:61:
b7:9b:73:ff:0c:63:64:f5:ef:c1:a6:55:c5:ac:bc:
90:b6:75:69:d6:43:36:ef:39:04:91:3e:fb:07:97:
42:d9:92:97:51:ca:23:a1:83:67:e9:c1:dd:27:ef:
9b:59:af:9e:4e:0c:fd:0c:d3:bf:b3:c1:f3:d9:03:
85:68:1f:30:42:35:2d:f2:73:8a:9f:05:f4:e2:54:
de:78:5b:17:72:c1:16:5f:78:d5:2c:2e:d7:24:47:
2c:df:5c:32:ec:62:0d:bb:6d:a7:62:83:02:c7:b1:
dc:49:bd:63:89:81:08:7d:f6:24:09:28:20:99:05:
52:25:9c:47:5a:ea:d2:fb:1c:ae:8c:9b:1e:92:17:
71:b9:8d:2d:73:65:3f:cf:50:3b:b5:cf:02:76:fc:
8a:de:18:97:f2:8a:6a:3d:ad:8f:0a:3d:de:ed:7a:
fb:cb:be:09:08:61:c1:9a:a4:3c:2a:93:7d:cd:25:
53:45:be:7c:44:b6:f4:64:80:8e:ad:c7:4a:08:2f:
cd:9b:98:0f:3d:94:76:da:7a:7c:7a:0c:1b:72:e9:
67:14:cf:80:a1:e8:8f:0f:30:22:d6:fc:82:26:8a:
ec:11:77:63:65:99:e7:64:76:d4:9a:db:1f:51:fd:
c2:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:FD:55:4D:30:BF:63:48:5A:BF:08:BE:00:65:FD:1B:40:CD:2C:77
X509v3 Authority Key Identifier:
keyid:AC:C3:28:58:CC:DA:95:86:C6:D9:67:1E:31:0D:51:C2:82:68:C4:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rMMoWMzalYbG2WceMQ1RwoJoxFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6cf769-9b58-4847-8f1f-edc54072ae89/1/rMMoWMzalYbG2WceMQ1RwoJoxFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6cf769-9b58-4847-8f1f-edc54072ae89/1/rMMoWMzalYbG2WceMQ1RwoJoxFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:49:bf:23:ed:1e:b1:32:bb:92:b2:7d:51:76:62:9b:0a:95:
ac:a4:9e:08:5c:90:25:69:f2:98:19:44:0c:14:b8:7d:a1:ea:
e7:b1:42:f4:88:93:82:6a:73:1c:3a:25:dd:7e:c7:65:52:b7:
3c:c3:02:eb:1e:4e:59:cb:18:28:bd:ab:a7:98:57:f0:a0:3d:
fe:76:87:0e:6a:0d:14:39:06:fb:e6:79:f4:b3:43:83:5f:31:
ba:92:67:9b:fc:3a:e7:12:c7:b4:f7:64:40:37:ce:ca:e1:18:
24:7e:bc:d3:5a:a0:d6:ef:b7:28:7d:90:ce:41:78:45:f4:69:
68:f9:11:52:86:d9:19:ef:0c:c4:3c:cf:12:ae:44:f6:84:e7:
f9:86:4a:c0:ed:39:b8:67:13:5c:00:48:11:48:84:a5:2d:21:
e2:49:91:d3:16:e0:14:11:dc:7a:cd:5a:a1:6a:f8:4f:39:40:
45:58:6c:4e:f6:49:af:f7:72:f4:14:82:cc:3e:13:b4:80:8f:
e1:a7:28:42:05:8a:24:a4:f8:68:d0:4a:0f:96:30:0c:f8:de:
d1:ea:2a:38:e9:43:a9:a2:de:2b:61:43:31:ec:23:fe:dd:c2:
6a:51:ea:ca:16:6a:f4:5c:d2:6e:db:51:12:76:7d:ca:90:d5:
5d:e1:ff:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:39:32 2025 by rpki-client