Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/9fd57c-90ef-44b0-93e4-fe5aed59a7d9/1/MTzbxLTeVJXuYTF9LnN8LD9_g7o.mft
File: MTzbxLTeVJXuYTF9LnN8LD9_g7o.mft (raw, json)
Hash identifier: t++gm9cvR+PDWX9dhVxX3x2USVWGitTZE4Zd7OjRZh4=
Subject key identifier: CB:70:CF:6A:0F:87:BF:67:2D:D6:D1:3D:37:73:F7:90:0D:37:3D:C6
Authority key identifier: 31:3C:DB:C4:B4:DE:54:95:EE:61:31:7D:2E:73:7C:2C:3F:7F:83:BA
Certificate issuer: /CN=313cdbc4b4de5495ee61317d2e737c2c3f7f83ba
Certificate serial: 0194BCE0D2F998D962D74F45023C1CA15051
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MTzbxLTeVJXuYTF9LnN8LD9_g7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/9fd57c-90ef-44b0-93e4-fe5aed59a7d9/1/MTzbxLTeVJXuYTF9LnN8LD9_g7o.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 15:00:38 +0000
Manifest this update: Fri 31 Jan 2025 15:00:38 +0000
Manifest next update: Sat 01 Feb 2025 15:00:38 +0000
Files and hashes: 1: MTzbxLTeVJXuYTF9LnN8LD9_g7o.crl (hash: baGHd2m1iWqmfWWUOznyfZMy53GshkTmBeA82u9BVaw=)
2: obw4nOA7tbdHTmeG8UDdlnqVl2Y.roa (hash: irTwgjfFzy8NnkY/EBFl3pB1GcEZSVUg+iwZc/3vTSw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:d2:f9:98:d9:62:d7:4f:45:02:3c:1c:a1:50:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=313cdbc4b4de5495ee61317d2e737c2c3f7f83ba
Validity
Not Before: Jan 31 15:00:38 2025 GMT
Not After : Feb 1 15:00:38 2025 GMT
Subject: CN=cb70cf6a0f87bf672dd6d13d3773f7900d373dc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:7b:15:a1:b3:f0:9d:d2:60:aa:ec:aa:1b:d8:
f6:be:fe:45:bf:0f:1f:3f:ec:65:53:aa:39:60:f3:
19:0e:ed:0c:bf:f7:2c:01:9b:30:64:fa:e7:7d:1d:
f6:1f:06:80:6b:77:e0:3c:04:10:83:97:db:41:1c:
9e:f7:23:38:62:ca:d1:93:7f:d9:ac:ee:8b:f0:37:
09:22:73:a8:51:23:e7:71:9f:18:13:62:d9:91:e2:
34:ec:6e:6d:ee:a4:e2:32:cf:34:58:7d:6d:79:d9:
9b:75:08:00:a3:c5:f1:83:d4:f7:9e:9c:0d:99:5e:
b6:92:03:99:a0:16:1b:22:df:56:8a:0a:14:ac:5b:
a4:f6:a7:f2:f3:5d:6a:8b:ed:ae:28:9b:fe:03:57:
e9:f8:b4:8c:a1:12:80:25:ea:71:06:67:f9:3e:71:
4d:c8:a7:d9:65:21:80:e4:80:4f:a3:77:33:54:cb:
f4:15:3e:b0:52:98:86:b8:a4:8a:a6:49:96:be:1b:
0a:99:56:70:59:97:52:54:d4:e4:29:df:da:50:87:
4e:9b:5e:fe:3b:35:26:af:dc:cc:6e:71:a0:9b:58:
5e:3b:5c:6b:cb:29:ee:37:32:97:e3:05:ba:8d:01:
b0:65:a9:98:3b:1c:da:09:17:3c:1a:e6:af:92:d5:
6e:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:70:CF:6A:0F:87:BF:67:2D:D6:D1:3D:37:73:F7:90:0D:37:3D:C6
X509v3 Authority Key Identifier:
keyid:31:3C:DB:C4:B4:DE:54:95:EE:61:31:7D:2E:73:7C:2C:3F:7F:83:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MTzbxLTeVJXuYTF9LnN8LD9_g7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/9fd57c-90ef-44b0-93e4-fe5aed59a7d9/1/MTzbxLTeVJXuYTF9LnN8LD9_g7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/9fd57c-90ef-44b0-93e4-fe5aed59a7d9/1/MTzbxLTeVJXuYTF9LnN8LD9_g7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:1c:4c:b3:53:72:6a:75:e0:a3:e4:c6:31:17:d3:2d:51:89:
a5:d5:5d:40:fc:94:79:83:c7:fb:4b:1b:8e:5b:fb:ab:ab:7f:
6e:4b:eb:16:1a:de:ed:37:be:71:3d:c8:c8:85:f2:9d:10:5c:
0e:48:20:31:bc:75:f1:01:7f:1c:54:cc:79:5e:72:3f:83:51:
42:34:d1:cd:4c:5a:b8:1c:e8:34:c5:32:24:10:83:14:dc:4d:
64:68:3c:c8:e1:6f:8a:f7:41:ea:79:db:7e:08:4f:98:ea:c9:
da:20:38:2b:40:72:33:6a:98:ac:13:6e:7b:c8:c0:34:ee:04:
44:fa:e5:7e:33:8e:16:80:d7:82:31:01:2a:4a:08:91:5b:ca:
42:fd:35:7f:a7:66:6b:9d:97:be:79:97:e3:2f:db:31:97:ba:
8e:26:bd:17:60:13:1a:aa:44:da:fd:5e:96:3c:df:b8:01:07:
04:cd:52:e2:69:5d:5d:98:90:a6:4e:b8:77:dc:b8:92:76:5b:
0b:0f:13:62:58:2f:d2:58:9f:f7:ef:09:b2:ca:1a:66:59:fa:
66:c0:c8:e9:3a:f9:cf:66:71:27:3d:d1:9c:49:22:98:ac:f2:
6f:fd:79:2d:2e:7e:d0:c7:39:23:ba:77:a6:18:9a:35:22:de:
fa:2b:43:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:27:29 2025 by rpki-client