Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/e4e89f-0aad-4707-865a-40012c82979b/1/Mu4bzYzjk9mKdYOsE_FCXU-vJ8k.mft
File: Mu4bzYzjk9mKdYOsE_FCXU-vJ8k.mft (raw, json)
Hash identifier: y7PoeqQYaWOdJxS8hBoCbo+BobZPipMvWC4mYWZYwQY=
Subject key identifier: 86:F3:25:CE:55:3E:B0:1E:23:57:62:78:15:DA:EF:E0:FD:90:52:E4
Authority key identifier: 32:EE:1B:CD:8C:E3:93:D9:8A:75:83:AC:13:F1:42:5D:4F:AF:27:C9
Certificate issuer: /CN=32ee1bcd8ce393d98a7583ac13f1425d4faf27c9
Certificate serial: 0194BD8538C4CBAED5CE0FD67E23E01C3628
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mu4bzYzjk9mKdYOsE_FCXU-vJ8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/e4e89f-0aad-4707-865a-40012c82979b/1/Mu4bzYzjk9mKdYOsE_FCXU-vJ8k.mft
Manifest number: 140E
Signing time: Fri 31 Jan 2025 18:00:12 +0000
Manifest this update: Fri 31 Jan 2025 18:00:12 +0000
Manifest next update: Sat 01 Feb 2025 18:00:12 +0000
Files and hashes: 1: 2Z7EtqMWz7jdGLOQTCkczOOupVQ.roa (hash: bipDGw88FluLLp9GhPHHNjUegq603G3YCRelI4f1Izo=)
2: FhZd88jZ9jh03466aEP-twQcEMw.roa (hash: GqVz3280439YQWP+4ZwFNVQsgWkyoEgtpCqfdDxqe8Y=)
3: HsoHvy4vaHG-GoulbRb3ifQ_PuU.roa (hash: 69uYqrq0xGq1JO0hUhdXdKRopq7RJQhoaRro9AjlRJc=)
4: Mu4bzYzjk9mKdYOsE_FCXU-vJ8k.crl (hash: hx47jDsBLflMvBDFExYexotX4XtZ0/X+CMs0E2/gg74=)
5: PGMK1-OlWgKaP3bJNRajQpxu8vA.roa (hash: VP1Lh654Pjz3OCgsDqSZJzeq8ULo1rSLNHx/bHWXvAQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:38:c4:cb:ae:d5:ce:0f:d6:7e:23:e0:1c:36:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32ee1bcd8ce393d98a7583ac13f1425d4faf27c9
Validity
Not Before: Jan 31 18:00:12 2025 GMT
Not After : Feb 1 18:00:12 2025 GMT
Subject: CN=86f325ce553eb01e2357627815daefe0fd9052e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:61:78:40:b5:38:09:29:36:28:9f:11:1a:99:
db:9b:a1:9a:74:24:d5:c6:61:30:8c:45:8a:9d:83:
6f:d7:ee:e7:92:9c:e4:3d:a9:98:89:f9:08:97:3b:
e5:85:d0:cc:d5:f5:70:10:40:7d:4a:9c:e5:78:fb:
d0:7f:3f:97:a9:12:ec:bc:b6:4a:b6:c8:bf:d3:58:
04:a8:5f:2a:b0:52:4f:69:74:37:22:42:37:c8:04:
5a:42:04:02:9d:09:bb:d9:f6:c6:7e:ce:eb:3a:bd:
9b:b7:df:57:36:f5:eb:39:76:86:d1:ca:72:3a:a5:
b8:bf:88:03:0e:e2:2c:20:a1:1f:b8:88:35:80:68:
12:f0:2e:47:0e:93:d7:aa:a4:9c:13:bd:59:62:30:
5f:22:35:e9:9b:d5:9d:cd:9e:6a:20:9d:64:e6:58:
61:cf:94:b3:aa:25:a8:d9:b5:63:50:17:e3:b4:e5:
55:53:bf:73:f2:c5:52:df:8a:e1:1f:7e:b5:cc:d0:
d2:ec:4e:df:9d:b6:3c:fa:9f:3f:c0:5b:19:1d:b3:
d9:db:ac:8f:20:10:67:5a:d0:42:86:1e:b3:af:2f:
ef:8f:86:79:97:fd:57:20:f8:42:3f:c9:9c:4e:4b:
76:15:ea:20:9e:c4:c7:5e:43:0d:82:73:44:9b:61:
fa:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:F3:25:CE:55:3E:B0:1E:23:57:62:78:15:DA:EF:E0:FD:90:52:E4
X509v3 Authority Key Identifier:
keyid:32:EE:1B:CD:8C:E3:93:D9:8A:75:83:AC:13:F1:42:5D:4F:AF:27:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mu4bzYzjk9mKdYOsE_FCXU-vJ8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/e4e89f-0aad-4707-865a-40012c82979b/1/Mu4bzYzjk9mKdYOsE_FCXU-vJ8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/e4e89f-0aad-4707-865a-40012c82979b/1/Mu4bzYzjk9mKdYOsE_FCXU-vJ8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:e4:8f:6c:b7:8c:55:5b:d3:8a:3a:da:70:6a:b7:09:82:08:
cf:2b:b8:c0:25:52:0f:1c:a4:ee:22:a3:11:b1:a7:84:53:b6:
41:d7:5a:d1:b9:0e:18:cd:c0:1b:ff:31:ad:eb:0c:75:14:ba:
03:87:99:44:ca:98:91:95:ee:19:86:b9:cb:85:4a:05:8f:0f:
22:e7:b9:61:f8:ba:42:34:b7:ec:d7:59:db:66:26:22:5e:c0:
41:df:c3:7e:ea:2d:c0:21:2e:bc:77:11:95:a3:00:05:22:08:
91:14:85:3e:26:a8:bf:ba:9e:40:10:5f:0f:c0:a7:e4:4b:82:
db:23:92:3b:f1:86:21:f4:d3:b6:9c:6e:04:6b:05:d6:df:86:
42:98:dd:eb:f6:69:0d:b7:c5:2a:27:3a:9f:ad:aa:37:4c:96:
74:36:ae:67:db:15:b4:1b:9f:72:9e:c2:7f:64:7b:77:d0:72:
67:d3:68:ec:89:9c:60:4c:d3:4c:48:24:cc:c7:a1:74:2c:19:
88:73:e2:c9:bb:a0:ba:00:15:fa:f4:ec:14:aa:32:57:01:4c:
69:e6:9d:f2:5f:da:59:84:0c:89:b0:3e:94:fd:48:f2:04:7e:
bf:85:17:a3:49:d5:61:01:b4:66:f4:f1:b0:ba:be:c7:bc:a2:
56:76:a2:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:17 2025 by rpki-client