Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/3e77dc-4868-41d4-90c4-2ac8bcd83550/1/MpZ6d0c2XIGd5gdvf1qgujyeWYo.mft
File: MpZ6d0c2XIGd5gdvf1qgujyeWYo.mft (raw, json)
Hash identifier: aEh0WUTskKhculLD4PRxSvI7hkD+iSvsCiAKD3KjPo8=
Subject key identifier: 1B:1B:A0:6A:DD:85:7F:23:B0:3A:50:B3:8B:24:A0:C7:00:E3:4E:3C
Authority key identifier: 32:96:7A:77:47:36:5C:81:9D:E6:07:6F:7F:5A:A0:BA:3C:9E:59:8A
Certificate issuer: /CN=32967a7747365c819de6076f7f5aa0ba3c9e598a
Certificate serial: 0194BC3C3CFF51B77B66659F64067098F7A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MpZ6d0c2XIGd5gdvf1qgujyeWYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/3e77dc-4868-41d4-90c4-2ac8bcd83550/1/MpZ6d0c2XIGd5gdvf1qgujyeWYo.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 12:00:51 +0000
Manifest this update: Fri 31 Jan 2025 12:00:51 +0000
Manifest next update: Sat 01 Feb 2025 12:00:51 +0000
Files and hashes: 1: FhZSLFV8-vM046QI8Vb33R1E0e8.roa (hash: f3eqnqdq9rWk7n9nPOwGunFqubODgfs5rafbqH5/HQw=)
2: MpZ6d0c2XIGd5gdvf1qgujyeWYo.crl (hash: QQAn3NpiRS3N5aq+FbLfnJZziqxwWBCEGx7P0B/VzFM=)
3: X-ClDjMzAtgNyKBr2k9TMrqu3vE.roa (hash: 7Ip8LVyEIhcWLOz6eWH0cRFN5zErMvUCRSSMLokd5pg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:3c:ff:51:b7:7b:66:65:9f:64:06:70:98:f7:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32967a7747365c819de6076f7f5aa0ba3c9e598a
Validity
Not Before: Jan 31 12:00:51 2025 GMT
Not After : Feb 1 12:00:51 2025 GMT
Subject: CN=1b1ba06add857f23b03a50b38b24a0c700e34e3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:80:02:aa:3a:14:9c:4a:f4:9b:6f:a1:7c:8a:
59:9d:7c:10:ac:08:4f:28:c3:d9:e9:26:04:6b:23:
b9:76:f3:58:4e:dd:f1:0d:46:d0:4a:70:89:44:ed:
2e:22:78:fe:e2:d4:39:f6:48:b7:e1:ba:b5:bc:7e:
07:75:f9:10:57:d4:81:66:2f:3d:7c:ad:e5:5c:69:
47:01:7d:07:ee:ff:78:65:c6:02:08:f3:88:f6:4c:
3a:16:df:2f:42:1c:d8:4e:0b:fe:13:ed:0e:a4:36:
17:f2:01:ee:8e:e7:f7:dc:3e:ad:76:13:38:9f:7c:
c4:f3:94:f9:7e:cb:ab:61:b3:a7:79:27:55:f2:43:
d8:64:62:89:9f:3e:f5:ab:e9:f0:7e:91:e8:fe:4e:
28:8b:d1:04:77:7d:dd:6b:b6:4c:35:59:60:cf:75:
43:cf:9b:1b:e4:77:3d:37:97:4b:af:c2:29:29:2f:
ba:66:2c:83:39:f6:bd:f9:0c:9d:eb:99:d0:0f:2a:
ad:93:5f:7c:b8:4a:91:54:27:bc:47:81:a7:65:fe:
f0:37:00:b3:a1:ec:eb:59:5d:2c:03:35:93:61:83:
3a:a5:9e:25:58:a6:49:89:ce:d4:42:bc:2f:f8:ae:
7b:0d:ed:a1:6e:f5:e8:f2:fc:3e:c3:74:e0:c8:ab:
24:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:1B:A0:6A:DD:85:7F:23:B0:3A:50:B3:8B:24:A0:C7:00:E3:4E:3C
X509v3 Authority Key Identifier:
keyid:32:96:7A:77:47:36:5C:81:9D:E6:07:6F:7F:5A:A0:BA:3C:9E:59:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MpZ6d0c2XIGd5gdvf1qgujyeWYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/3e77dc-4868-41d4-90c4-2ac8bcd83550/1/MpZ6d0c2XIGd5gdvf1qgujyeWYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/3e77dc-4868-41d4-90c4-2ac8bcd83550/1/MpZ6d0c2XIGd5gdvf1qgujyeWYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:88:61:11:b8:8f:1f:1a:e8:9c:df:71:60:77:24:4d:45:91:
42:08:12:77:70:36:c6:a9:5a:5b:11:55:9c:ca:30:e1:9b:0c:
78:38:ac:66:72:93:df:99:6b:fd:dd:5b:17:72:42:45:28:44:
a7:f8:bf:89:80:19:a4:2c:8a:08:1b:9a:4e:a3:db:96:12:02:
60:b0:8b:9f:7b:bf:71:a7:8d:52:6c:d1:24:dd:56:12:67:2d:
c4:b3:27:80:77:2a:ab:ad:7b:59:36:b5:c8:c4:b2:08:e4:57:
38:de:30:4d:ff:ee:42:64:3b:49:b5:94:ca:71:ce:75:e4:da:
91:e5:99:54:ab:48:d8:9a:e2:24:fc:f0:03:38:aa:97:43:53:
97:7d:8a:a5:ea:04:f1:46:6e:84:4e:08:55:c5:c5:88:91:71:
15:05:0e:be:6c:43:cc:7c:bf:0f:90:a8:3a:d1:3f:b0:20:83:
dc:8f:d1:08:c3:83:6e:17:6e:c2:f7:0f:82:91:3f:a8:58:9d:
14:6a:95:b3:f4:f8:e6:03:86:ac:14:c2:16:68:bd:fb:a3:3c:
12:21:b0:1c:6e:25:3d:ee:b4:86:d7:b7:55:d4:74:b2:38:b2:
ed:98:75:32:0f:98:b2:40:ab:a2:2e:17:e7:31:51:c6:6e:a9:
f5:8b:6d:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:47:35 2025 by rpki-client