Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/f08716-4d2a-46ed-bded-af3e7d42968d/1/mUqt73Cb43uczULMK4xzLDlxUPo.mft
File: mUqt73Cb43uczULMK4xzLDlxUPo.mft (raw, json)
Hash identifier: xfoKEYVRRIIAbDlWsayJWkbBCMG3ytZPknXUc59WxqM=
Subject key identifier: B8:5A:00:D3:DC:FB:37:AC:A8:4F:AE:ED:40:F1:DA:81:EF:CA:E2:48
Authority key identifier: 99:4A:AD:EF:70:9B:E3:7B:9C:CD:42:CC:2B:8C:73:2C:39:71:50:FA
Certificate issuer: /CN=994aadef709be37b9ccd42cc2b8c732c397150fa
Certificate serial: 0194BD177D678AE21B82B28D31143533F1DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mUqt73Cb43uczULMK4xzLDlxUPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/f08716-4d2a-46ed-bded-af3e7d42968d/1/mUqt73Cb43uczULMK4xzLDlxUPo.mft
Manifest number: 140E
Signing time: Fri 31 Jan 2025 16:00:20 +0000
Manifest this update: Fri 31 Jan 2025 16:00:20 +0000
Manifest next update: Sat 01 Feb 2025 16:00:20 +0000
Files and hashes: 1: mUqt73Cb43uczULMK4xzLDlxUPo.crl (hash: hwNuxI3ZKs1jO6QeEnugZOp0FZRWXpFaVhg4QDUUwSI=)
2: rCQFs6YvGWUAxg9vVWInZlNxQI4.roa (hash: +0NX89cMUvPysuXc7Y1nf0CYHUBQMqz9BTCGNPE3tAA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:7d:67:8a:e2:1b:82:b2:8d:31:14:35:33:f1:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=994aadef709be37b9ccd42cc2b8c732c397150fa
Validity
Not Before: Jan 31 16:00:20 2025 GMT
Not After : Feb 1 16:00:20 2025 GMT
Subject: CN=b85a00d3dcfb37aca84faeed40f1da81efcae248
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:0f:65:64:ab:7e:c7:d5:e6:b2:e4:3c:42:28:
c9:27:86:fc:2f:0a:6a:3a:98:8a:8e:84:62:9e:07:
5f:33:2e:83:00:5b:74:35:05:d8:a7:d9:14:ed:5b:
93:5f:e8:fc:76:f7:68:b1:06:59:05:54:2b:f7:43:
b3:ce:b1:f8:e1:fe:f1:16:3b:d9:9a:f8:2c:b1:a3:
0d:ba:d6:82:e9:20:88:4a:42:fe:ed:37:af:15:c3:
c1:46:84:ee:b7:ca:3f:4a:35:45:5d:36:dc:df:a2:
9c:c6:b8:9d:57:9b:62:2a:90:92:2f:58:57:04:3c:
3c:72:c1:6f:43:7b:50:d1:a5:36:6a:ed:28:ac:91:
30:8b:af:7b:a4:81:49:c2:fe:bf:25:d5:f1:e2:ae:
09:dc:0a:7e:63:13:c5:95:57:c7:53:89:09:a3:ac:
ac:3e:74:db:ef:15:30:2e:88:fb:72:f4:23:fa:fb:
a3:21:11:0f:92:ae:de:4a:9d:18:dc:08:71:db:75:
b2:9d:e7:a9:50:4d:c4:ea:64:4a:b7:56:d5:02:e8:
1f:17:f1:30:a8:11:a2:75:e3:c1:df:a6:98:57:b7:
34:25:6e:4f:65:62:f9:e1:ad:58:e1:f7:2b:44:fa:
6b:a8:28:06:e1:47:e5:0e:c6:74:f8:b2:d0:bf:33:
b9:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:5A:00:D3:DC:FB:37:AC:A8:4F:AE:ED:40:F1:DA:81:EF:CA:E2:48
X509v3 Authority Key Identifier:
keyid:99:4A:AD:EF:70:9B:E3:7B:9C:CD:42:CC:2B:8C:73:2C:39:71:50:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mUqt73Cb43uczULMK4xzLDlxUPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/f08716-4d2a-46ed-bded-af3e7d42968d/1/mUqt73Cb43uczULMK4xzLDlxUPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/f08716-4d2a-46ed-bded-af3e7d42968d/1/mUqt73Cb43uczULMK4xzLDlxUPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:da:1a:8e:1d:69:36:f2:4e:23:55:82:bb:b9:43:a1:b5:f1:
5c:d7:1c:a2:00:89:f7:c5:8b:c0:ac:18:9d:e0:e6:78:8e:ba:
13:ad:73:c3:be:ff:c8:6e:c5:d3:a0:e9:88:65:44:d8:ff:6e:
be:2d:c0:b4:a5:27:9c:b6:5d:97:9c:72:e2:6e:0c:38:6b:a7:
c1:4e:cf:cf:7c:4f:a8:6b:c0:a2:ff:11:dd:a2:e9:b3:9e:8f:
25:2c:a3:e3:95:b9:8e:1d:31:8e:ad:9c:c5:a4:bd:42:6f:67:
ff:0b:f3:f1:11:bd:d1:1b:b1:4a:6c:cd:d1:02:6f:d5:76:b9:
3a:58:9f:11:96:54:1f:55:3f:50:3a:9d:99:48:3d:e7:0c:6a:
4a:e6:95:34:3c:c9:e1:33:43:7b:01:67:38:50:1c:f6:2d:88:
e9:4c:f3:d3:ac:6b:c4:49:64:71:03:fe:ba:43:62:d2:9b:28:
ad:a2:02:12:9a:d6:48:f4:e5:c2:b0:ce:6c:5e:2c:e5:f6:13:
a9:36:fa:e9:d2:bc:9a:52:e3:7b:cb:34:fc:4a:eb:3c:4b:35:
31:90:3f:5d:fd:14:0c:d8:ad:4d:15:22:f2:47:63:e3:5b:96:
82:df:93:45:a1:d8:6b:ee:d8:86:2a:4f:57:26:da:7f:de:17:
79:9e:3a:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:34:09 2025 by rpki-client