Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/688425-14cb-4fd6-8f27-deccfa3ea635/1/M-oI76mz94ye-dt2etwh3WGDTg8.mft
File: M-oI76mz94ye-dt2etwh3WGDTg8.mft (raw, json)
Hash identifier: nXwN2Sl3Z89vNzLY8f0migfN3TzIULl7gubI2BuUJ+w=
Subject key identifier: 51:02:9A:94:21:53:67:0B:0C:AA:64:4D:CA:E0:CC:1F:6B:74:10:E8
Authority key identifier: 33:EA:08:EF:A9:B3:F7:8C:9E:F9:DB:76:7A:DC:21:DD:61:83:4E:0F
Certificate issuer: /CN=33ea08efa9b3f78c9ef9db767adc21dd61834e0f
Certificate serial: 0194BCA9E26F8BD94773BD089F0CC81A4D1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M-oI76mz94ye-dt2etwh3WGDTg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/688425-14cb-4fd6-8f27-deccfa3ea635/1/M-oI76mz94ye-dt2etwh3WGDTg8.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 14:00:37 +0000
Manifest this update: Fri 31 Jan 2025 14:00:37 +0000
Manifest next update: Sat 01 Feb 2025 14:00:37 +0000
Files and hashes: 1: 9pGdNh0dkqM5WJr2d64Db3VyTiU.roa (hash: YFjcGwYG51ckAsTGEaarqbVHwri0cUu+NrZNkgCyAVM=)
2: M-oI76mz94ye-dt2etwh3WGDTg8.crl (hash: s6NbWhYXlEpbyDD2VvJdjK1A6x540W7H9SOk3bJ7zyM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:e2:6f:8b:d9:47:73:bd:08:9f:0c:c8:1a:4d:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33ea08efa9b3f78c9ef9db767adc21dd61834e0f
Validity
Not Before: Jan 31 14:00:37 2025 GMT
Not After : Feb 1 14:00:37 2025 GMT
Subject: CN=51029a942153670b0caa644dcae0cc1f6b7410e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a2:68:a6:d3:3f:b1:91:5c:f2:ff:05:69:fd:
e0:e4:f4:bf:0a:c9:ac:88:d4:69:05:3d:c2:31:b6:
5e:44:e9:87:1a:bc:66:2d:4a:f7:e7:d4:ee:55:4d:
50:b7:bc:3e:92:cf:cf:54:70:0a:68:e8:51:6e:cd:
21:36:d3:40:84:2a:d9:d4:b8:34:49:59:37:b3:3e:
41:01:20:82:1c:d4:e2:7d:e1:ce:f3:c7:99:d6:86:
c0:3c:99:d8:94:21:78:c4:6f:df:bc:da:75:df:b2:
c2:e4:71:e6:44:c9:ff:37:f8:b6:8b:6b:7b:31:c5:
51:eb:28:1d:41:03:64:5a:38:b6:88:b5:08:cc:70:
2e:be:5a:65:08:6a:c5:c5:7b:7a:74:9b:0d:a9:1d:
3f:cd:a6:2e:6a:da:0c:cf:36:79:1b:d6:45:6b:3a:
57:18:d2:30:22:3e:c0:21:65:78:ce:76:05:01:39:
bf:01:cd:51:b5:22:da:8d:56:9a:fa:1e:5f:ae:89:
ad:17:f4:9b:d8:45:f0:89:3b:a9:61:3d:01:06:cf:
b8:8b:5a:60:0d:69:3f:e6:46:70:eb:e4:74:dd:72:
b1:3a:e1:31:f9:b7:38:94:5b:8f:50:56:b7:89:e3:
ea:fc:5d:d5:8c:2f:3b:f0:a6:d8:e0:ae:35:8e:dd:
3f:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:02:9A:94:21:53:67:0B:0C:AA:64:4D:CA:E0:CC:1F:6B:74:10:E8
X509v3 Authority Key Identifier:
keyid:33:EA:08:EF:A9:B3:F7:8C:9E:F9:DB:76:7A:DC:21:DD:61:83:4E:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M-oI76mz94ye-dt2etwh3WGDTg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/688425-14cb-4fd6-8f27-deccfa3ea635/1/M-oI76mz94ye-dt2etwh3WGDTg8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/688425-14cb-4fd6-8f27-deccfa3ea635/1/M-oI76mz94ye-dt2etwh3WGDTg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:4f:1d:b6:d9:e9:9b:1d:56:ab:2d:68:62:98:f2:87:52:e6:
50:1b:37:fe:9e:f5:c5:81:f2:df:86:40:ca:09:fb:ed:6f:c0:
60:b8:13:8d:33:8c:76:05:26:d0:4e:10:5e:6e:b7:33:a2:1f:
f6:33:94:bc:61:8f:4f:b8:8d:e5:19:f8:05:5f:36:cd:c3:66:
20:17:fe:d1:c4:6e:62:95:9a:a6:47:d1:da:bc:dd:f3:04:b3:
b7:56:43:0c:74:88:e4:f3:a8:38:f8:1c:24:bf:97:e5:30:cf:
36:67:d6:a2:73:5e:a5:f7:24:d8:05:f5:67:70:76:4c:59:10:
82:bb:34:cd:48:5c:61:aa:c1:70:3a:25:10:b7:7d:09:ec:28:
da:c0:44:7a:5d:ef:27:42:b3:c3:5d:47:df:58:f0:22:67:b7:
44:4d:72:57:fb:4f:8b:c9:e5:6c:0e:a8:3b:4e:ad:a1:ba:f7:
84:b6:cb:d3:63:d5:d2:2b:2f:86:be:b9:c9:ec:99:41:1e:c8:
89:ca:2f:44:1f:98:24:7f:0c:1d:16:21:ed:04:a8:ba:c9:33:
a0:b7:af:cb:d6:eb:5e:bd:81:03:c3:a6:ab:c4:2e:07:63:26:
eb:0e:21:7c:09:25:a6:2f:41:4f:df:17:f9:10:ba:2d:b9:e1:
99:28:5b:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:24:32 2025 by rpki-client