Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/c76275-d8da-4523-83ad-b421c38b2f7f/1/MBlcO7BQWGtfTlAEEYAHxIs06uU.mft
File: MBlcO7BQWGtfTlAEEYAHxIs06uU.mft (raw, json)
Hash identifier: zUv6nfMEr8zVhZsEGBg+J0/9MrbGbgkPq4sMEc7mTLg=
Subject key identifier: 84:E9:66:7C:B0:FF:B9:F7:1F:ED:3F:5B:8F:4C:DA:B7:1F:C3:C5:A6
Authority key identifier: 30:19:5C:3B:B0:50:58:6B:5F:4E:50:04:11:80:07:C4:8B:34:EA:E5
Certificate issuer: /CN=30195c3bb050586b5f4e5004118007c48b34eae5
Certificate serial: 0194BD4E5EA92EEF7E97F660BA5FDBD94E4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MBlcO7BQWGtfTlAEEYAHxIs06uU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/c76275-d8da-4523-83ad-b421c38b2f7f/1/MBlcO7BQWGtfTlAEEYAHxIs06uU.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 17:00:17 +0000
Manifest this update: Fri 31 Jan 2025 17:00:17 +0000
Manifest next update: Sat 01 Feb 2025 17:00:17 +0000
Files and hashes: 1: FVoKa0hbyicRxj9T5QoKnrF-IQk.roa (hash: PJKMkHGyKfQ7AHpH2DcIDSD5neBvRyes+CMY82lEecA=)
2: MBlcO7BQWGtfTlAEEYAHxIs06uU.crl (hash: 84FLZ7KOJAvaFWCMqDnSahxN+oB0z1qt7F17TUB30kY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:5e:a9:2e:ef:7e:97:f6:60:ba:5f:db:d9:4e:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30195c3bb050586b5f4e5004118007c48b34eae5
Validity
Not Before: Jan 31 17:00:17 2025 GMT
Not After : Feb 1 17:00:17 2025 GMT
Subject: CN=84e9667cb0ffb9f71fed3f5b8f4cdab71fc3c5a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:bd:e8:e2:48:f1:58:fc:de:a4:f3:fb:30:29:
af:ce:25:87:b4:b6:12:87:d8:78:ba:a8:54:22:3f:
21:72:af:84:2e:e5:5a:e6:d6:b4:7d:f8:46:a0:21:
1d:3b:9b:dd:b0:40:ab:1e:4f:7f:7a:75:ff:11:a0:
97:80:6f:2d:c7:83:b4:22:e8:6a:b6:b3:51:58:f7:
9e:b0:4f:cf:be:f3:2e:f4:22:7a:ee:4e:9b:b3:73:
04:c5:7c:54:fe:44:80:9d:b4:cd:d0:24:0a:5f:7b:
40:fa:d1:79:b6:e9:c4:3c:33:7c:15:bb:f0:07:84:
c1:97:2c:41:ba:b3:97:a1:b8:f2:08:bb:de:a7:d7:
f3:38:be:33:d5:d4:d8:e3:cf:47:bf:15:d9:69:0a:
c8:09:6f:df:16:92:5c:63:ff:13:cc:64:42:8c:63:
50:8b:78:40:e0:e0:38:a5:9f:40:4e:90:ba:25:4d:
b7:0d:43:a3:f5:3f:3e:6b:4e:0d:73:03:34:6a:85:
c7:83:1f:14:ef:d6:eb:7f:fe:c9:73:22:ba:28:75:
6f:d1:42:3a:e2:ca:a3:3e:af:7f:b0:ad:43:6a:2d:
5a:b6:20:05:de:ed:1e:fc:b4:02:1f:ab:cd:1b:36:
4f:86:a6:db:53:50:91:f7:4d:9a:af:87:2c:cd:eb:
c2:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:E9:66:7C:B0:FF:B9:F7:1F:ED:3F:5B:8F:4C:DA:B7:1F:C3:C5:A6
X509v3 Authority Key Identifier:
keyid:30:19:5C:3B:B0:50:58:6B:5F:4E:50:04:11:80:07:C4:8B:34:EA:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MBlcO7BQWGtfTlAEEYAHxIs06uU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/c76275-d8da-4523-83ad-b421c38b2f7f/1/MBlcO7BQWGtfTlAEEYAHxIs06uU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/c76275-d8da-4523-83ad-b421c38b2f7f/1/MBlcO7BQWGtfTlAEEYAHxIs06uU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:95:14:f7:ba:c0:eb:bc:12:ad:e4:24:36:ab:5e:71:07:cf:
2d:e0:42:d8:da:ce:38:ef:b0:aa:12:c3:a3:7f:64:82:04:ce:
8e:5b:ef:dd:5e:86:95:f3:f3:c0:13:0e:3f:62:5c:88:28:8d:
09:e8:2a:aa:2c:22:19:af:fa:67:86:d9:9c:44:04:22:9a:81:
4c:19:f7:69:26:6b:9f:9d:ec:76:23:8d:7e:39:36:f8:f2:2b:
d4:06:35:26:97:7a:24:d1:9c:23:92:50:01:e0:84:ba:b7:9f:
f2:99:85:28:6e:33:95:43:b9:d1:de:54:4e:49:03:81:19:6b:
d0:7c:6c:50:76:f3:56:84:4f:48:b2:51:38:12:c6:c1:50:20:
36:c3:37:15:3a:f5:f0:4f:61:4e:a8:ee:8d:93:a9:51:d5:14:
8b:b2:c6:ee:37:f2:c6:92:f2:30:11:c3:68:d2:55:f5:c5:14:
ea:cf:ca:10:20:02:94:19:22:e0:77:dd:59:34:7f:2f:9e:3a:
3f:9b:0b:9c:1a:d1:fe:b0:23:5e:5f:53:53:70:54:63:89:f1:
11:10:35:52:38:77:24:c1:72:73:76:de:7e:8a:4d:00:63:0d:
30:93:a6:15:a9:1c:4c:a8:56:bf:ca:3a:4f:50:1f:d6:98:aa:
a8:8d:63:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:47:27 2025 by rpki-client