Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/8ab976-e53a-4c43-a8e8-2014fe0a1611/1/Mj4wCntjrU_vuuZx9Rq8JPEShxk.mft
File: Mj4wCntjrU_vuuZx9Rq8JPEShxk.mft (raw, json)
Hash identifier: 0AScTHY/OnWobgDjCJtU5ciWmTWNwySmo/JqXsTeo7w=
Subject key identifier: B5:3A:81:13:53:D9:D7:C3:E8:7C:70:56:2A:9C:71:5A:84:D2:50:78
Authority key identifier: 32:3E:30:0A:7B:63:AD:4F:EF:BA:E6:71:F5:1A:BC:24:F1:12:87:19
Certificate issuer: /CN=323e300a7b63ad4fefbae671f51abc24f1128719
Certificate serial: 0194BC3BE87C20D1EA9A278A29921ACB363B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mj4wCntjrU_vuuZx9Rq8JPEShxk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/8ab976-e53a-4c43-a8e8-2014fe0a1611/1/Mj4wCntjrU_vuuZx9Rq8JPEShxk.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 12:00:30 +0000
Manifest this update: Fri 31 Jan 2025 12:00:30 +0000
Manifest next update: Sat 01 Feb 2025 12:00:30 +0000
Files and hashes: 1: Mj4wCntjrU_vuuZx9Rq8JPEShxk.crl (hash: n0CUnHkmMZwdG7Nfpg3/UId7WSbEg/V9irx42Rao4xQ=)
2: nG0u5JVbsOz2NWyBPT2f0id55qg.roa (hash: rcOcuJUXRrdjca7vuzAqSL0w9cdWcN3PeqOknKKlStg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:e8:7c:20:d1:ea:9a:27:8a:29:92:1a:cb:36:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=323e300a7b63ad4fefbae671f51abc24f1128719
Validity
Not Before: Jan 31 12:00:30 2025 GMT
Not After : Feb 1 12:00:30 2025 GMT
Subject: CN=b53a811353d9d7c3e87c70562a9c715a84d25078
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:42:f7:14:22:67:84:a1:0c:98:f8:af:b7:4a:
25:62:65:ab:d4:84:81:22:94:47:e7:af:5c:c5:4d:
bc:a0:7d:36:7a:f0:b1:f2:99:89:e9:f0:e3:4b:ae:
d1:38:7f:29:74:ff:2e:92:4a:1b:87:c8:c0:90:0d:
f4:06:69:e4:ce:50:29:9e:37:5f:9f:d3:5b:35:9e:
56:f1:b4:09:c9:02:5a:6e:8c:fc:ff:aa:dd:a5:b2:
7e:91:6e:97:5d:32:fe:69:aa:02:69:bb:85:a7:3c:
23:8d:1c:e6:ff:d5:4a:1f:6d:64:e3:7a:5d:25:26:
94:3b:ba:53:a2:b1:23:be:03:c7:14:2e:ee:c1:30:
35:c2:00:24:7f:62:b3:d1:23:87:df:07:b1:cf:50:
3d:24:0f:33:57:d2:fc:4f:c0:bd:02:7c:24:12:b9:
d4:9f:9b:b9:b9:fa:09:4e:2e:e4:75:b5:21:ef:bd:
33:09:3f:65:5f:ec:cd:07:0c:d0:9f:8d:b5:60:92:
e5:2c:fc:30:87:91:f5:71:54:2b:5c:fb:fa:f9:b4:
03:2d:ec:3e:96:8e:a5:06:ab:93:c3:22:f7:da:3e:
d3:a2:92:20:22:ba:77:16:dc:19:67:83:c1:41:6e:
eb:5a:0c:69:6e:5b:1a:22:bc:d6:23:95:39:23:66:
61:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:3A:81:13:53:D9:D7:C3:E8:7C:70:56:2A:9C:71:5A:84:D2:50:78
X509v3 Authority Key Identifier:
keyid:32:3E:30:0A:7B:63:AD:4F:EF:BA:E6:71:F5:1A:BC:24:F1:12:87:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mj4wCntjrU_vuuZx9Rq8JPEShxk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/8ab976-e53a-4c43-a8e8-2014fe0a1611/1/Mj4wCntjrU_vuuZx9Rq8JPEShxk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/8ab976-e53a-4c43-a8e8-2014fe0a1611/1/Mj4wCntjrU_vuuZx9Rq8JPEShxk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:d7:e4:10:58:9a:d2:68:d3:cc:c9:7b:bc:12:49:41:4c:16:
be:2b:ee:30:10:85:61:6e:1d:6c:68:ef:5d:b9:55:28:6f:03:
87:96:7c:89:4a:cb:54:a3:55:d4:b9:64:25:64:67:c4:9b:6b:
cc:55:c1:11:9a:d0:d3:83:52:d7:f5:9f:70:d8:f6:1a:96:b2:
66:0f:f5:69:21:5b:a5:41:6c:04:e2:f5:ea:7f:42:60:2d:82:
45:97:7b:30:39:f8:b4:86:ef:b8:7e:64:20:e4:e3:48:69:18:
74:67:15:48:0f:68:20:8a:7b:1d:a9:9b:b4:9a:0a:59:bd:a7:
21:dd:fe:fd:5a:00:34:e0:3e:e4:1a:fb:34:6f:d6:1c:ae:04:
17:16:cf:c9:4b:b9:41:8b:35:27:6e:f3:e3:7e:52:3a:53:fd:
9e:8e:fd:3d:13:0e:63:9a:73:e3:6d:c2:f5:76:a5:e6:00:72:
a8:8f:a8:58:4b:31:49:0d:f3:9d:5a:ab:f5:0b:e8:5c:92:48:
2e:ad:fd:45:93:66:fe:df:45:02:d0:9b:c9:55:63:77:71:81:
5c:69:ec:28:db:e4:7e:1b:e3:f8:3a:03:e5:2b:09:4b:1c:42:
1d:9d:7c:54:e4:d4:c9:da:9f:de:c8:3f:cf:bb:f0:a2:94:98:
0c:dc:2b:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:06:15 2025 by rpki-client