Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/6536f9-87dd-4edd-b01c-b23172eb81fb/1/mSAfYJ56iT2obPDrvKS79HJ51hc.mft
File: mSAfYJ56iT2obPDrvKS79HJ51hc.mft (raw, json)
Hash identifier: 5IPy0+EzfzJaAd1bTq01FU/vUO1n69Xzj4ecqxsmwuA=
Subject key identifier: 42:A3:5B:1E:F1:A2:A0:A2:81:CC:48:6B:BA:5A:8D:4A:70:35:CB:D3
Authority key identifier: 99:20:1F:60:9E:7A:89:3D:A8:6C:F0:EB:BC:A4:BB:F4:72:79:D6:17
Certificate issuer: /CN=99201f609e7a893da86cf0ebbca4bbf47279d617
Certificate serial: 0194BC3BD03FDDB17A898337DC033087BB2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mSAfYJ56iT2obPDrvKS79HJ51hc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/6536f9-87dd-4edd-b01c-b23172eb81fb/1/mSAfYJ56iT2obPDrvKS79HJ51hc.mft
Manifest number: 02C1
Signing time: Fri 31 Jan 2025 12:00:23 +0000
Manifest this update: Fri 31 Jan 2025 12:00:23 +0000
Manifest next update: Sat 01 Feb 2025 12:00:23 +0000
Files and hashes: 1: 4eCNH1R9CpTtO2SN6ER3IXHq3JI.roa (hash: Q9zvCe6qoTuNlUxMuJhOFGoFxuAGyHxDdlXdoOlYcPc=)
2: mSAfYJ56iT2obPDrvKS79HJ51hc.crl (hash: Qyt09dwcziwn6+ioQdspy/XHw1GFLb5jTjTPf2H9g5w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:d0:3f:dd:b1:7a:89:83:37:dc:03:30:87:bb:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99201f609e7a893da86cf0ebbca4bbf47279d617
Validity
Not Before: Jan 31 12:00:23 2025 GMT
Not After : Feb 1 12:00:23 2025 GMT
Subject: CN=42a35b1ef1a2a0a281cc486bba5a8d4a7035cbd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ca:46:ad:f4:da:40:ea:51:a0:1f:de:0a:34:
1a:13:33:14:e8:12:8a:3f:47:5d:ff:f2:e8:6a:8b:
d3:b1:48:70:59:fc:49:fb:a7:2e:38:ba:b8:43:79:
58:41:9c:db:6f:bd:5e:dd:27:cb:de:9d:7d:a7:3a:
ab:be:7b:cf:32:0c:f1:97:14:76:85:26:04:ca:f1:
f3:ff:a0:9f:96:b6:16:dc:ab:ec:be:89:6a:6c:38:
9e:60:8a:67:5c:e3:fb:cd:0b:14:8b:39:2b:e0:f8:
05:f5:e5:41:29:32:d3:96:96:83:7b:88:8e:e1:19:
d1:2d:aa:63:a2:99:69:1a:4c:ea:b5:b4:e7:5b:2b:
06:cb:2c:bb:78:f8:37:b5:39:9c:4e:1e:a0:5f:c7:
91:01:8d:cd:10:4c:8f:e9:ce:61:2c:57:b3:de:a2:
15:9b:0e:45:a5:e5:b8:a5:23:af:68:a7:f5:8e:72:
77:b3:96:90:57:54:31:11:09:48:ee:55:a6:4e:bc:
82:1a:d3:c7:0a:3b:15:48:a4:6d:61:2d:6b:5f:ad:
54:2b:17:16:11:46:d8:32:96:d0:60:63:03:6e:7b:
6e:49:d7:29:26:29:52:fe:45:93:75:5f:2e:2e:ac:
81:79:3c:26:df:26:5d:06:1e:18:3d:74:27:d2:a3:
9d:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:A3:5B:1E:F1:A2:A0:A2:81:CC:48:6B:BA:5A:8D:4A:70:35:CB:D3
X509v3 Authority Key Identifier:
keyid:99:20:1F:60:9E:7A:89:3D:A8:6C:F0:EB:BC:A4:BB:F4:72:79:D6:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSAfYJ56iT2obPDrvKS79HJ51hc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6536f9-87dd-4edd-b01c-b23172eb81fb/1/mSAfYJ56iT2obPDrvKS79HJ51hc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6536f9-87dd-4edd-b01c-b23172eb81fb/1/mSAfYJ56iT2obPDrvKS79HJ51hc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:08:60:f5:8d:8e:ac:e5:97:eb:ae:d5:c1:9e:eb:d3:18:7e:
0b:b8:ea:d1:83:e5:54:ae:1b:49:fe:05:c1:e2:8a:95:49:56:
33:b9:15:7e:bd:77:16:9b:d7:7f:ab:3b:0c:2a:53:96:29:28:
f0:e7:5d:0c:ef:35:ce:b6:10:4b:a0:b9:b7:f0:e8:91:6b:10:
03:9a:6f:49:88:c9:f5:e8:16:1c:ba:af:ae:3c:4c:1a:9d:a3:
19:ce:ad:55:51:70:3e:7e:52:49:15:2b:db:48:ab:bd:90:a0:
84:a3:56:57:ac:8d:4c:1c:6f:b0:4e:c2:89:43:14:37:2c:4b:
bd:e7:8d:ec:b2:e3:e9:07:e4:15:09:d2:66:3d:64:e5:77:08:
7a:97:67:93:0e:cc:b2:ef:ce:b1:3a:f2:18:1d:35:44:45:f7:
7c:c3:97:ac:ba:64:5b:d5:13:6a:75:36:f3:b1:09:d9:67:f1:
aa:20:c4:3b:b1:1e:43:24:fa:25:c3:42:85:40:11:85:9c:13:
a5:d0:1d:40:6a:9f:90:b7:ef:df:22:cc:6c:83:5c:47:5d:18:
1c:08:77:bd:69:b5:51:9f:17:17:f0:e1:53:71:6a:e7:eb:a3:
e8:1c:d8:c8:5a:17:30:9f:33:ee:ea:68:62:bd:13:c0:0c:0e:
3c:60:3b:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:26:04 2025 by rpki-client