Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/a9a1c9-3444-4e5b-a720-18040c8e22ed/1/MjiPz3TS5ZUk9OtNluRMUiLbY-E.mft
File: MjiPz3TS5ZUk9OtNluRMUiLbY-E.mft (raw, json)
Hash identifier: GpcXRvIc3knC9CRIDRRxeJ67tDLufdVYGpWjHmq+yKc=
Subject key identifier: 14:3A:78:2D:C1:E3:F3:A6:0A:33:7C:B2:39:54:F3:92:47:A8:F8:19
Authority key identifier: 32:38:8F:CF:74:D2:E5:95:24:F4:EB:4D:96:E4:4C:52:22:DB:63:E1
Certificate issuer: /CN=32388fcf74d2e59524f4eb4d96e44c5222db63e1
Certificate serial: 0194BBCEA95881A120AC9814D929843A328F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MjiPz3TS5ZUk9OtNluRMUiLbY-E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/a9a1c9-3444-4e5b-a720-18040c8e22ed/1/MjiPz3TS5ZUk9OtNluRMUiLbY-E.mft
Manifest number: F5
Signing time: Fri 31 Jan 2025 10:01:10 +0000
Manifest this update: Fri 31 Jan 2025 10:01:10 +0000
Manifest next update: Sat 01 Feb 2025 10:01:10 +0000
Files and hashes: 1: MjiPz3TS5ZUk9OtNluRMUiLbY-E.crl (hash: p5DOoBibtzrtuEj3DTjzrl44LiBpcKDpR6N2Ksq32rQ=)
2: l_KNRz-DOMsGFsOq9QowWZSTlSY.roa (hash: npXTC3HvU34eVfQ3A8stCbWQJ3DirxlZznu2fCVNFbM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:a9:58:81:a1:20:ac:98:14:d9:29:84:3a:32:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32388fcf74d2e59524f4eb4d96e44c5222db63e1
Validity
Not Before: Jan 31 10:01:10 2025 GMT
Not After : Feb 1 10:01:10 2025 GMT
Subject: CN=143a782dc1e3f3a60a337cb23954f39247a8f819
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:2c:5f:49:3c:a2:9b:33:42:ae:4b:9f:89:eb:
b5:11:c9:24:3e:a9:7e:b2:86:6a:df:5d:16:0c:05:
b7:59:ef:4d:98:96:fe:8e:27:61:e5:06:e9:4a:30:
61:d2:17:19:f1:78:e5:d7:bf:f7:55:33:ec:a4:f5:
d0:0c:9d:e2:ea:7c:e8:5c:1e:c5:a2:73:ab:8e:c0:
96:60:e2:0a:4a:91:22:15:41:89:62:9b:50:0a:84:
d6:9a:6c:5f:14:95:8b:4e:b7:2c:fe:03:1b:30:67:
79:c0:9c:2e:31:45:95:6a:ad:59:c4:03:21:32:a1:
56:72:3d:e6:b9:5c:82:28:a8:a3:c1:dc:5c:5f:0a:
7c:08:9c:d4:c1:e2:80:25:fd:eb:4f:e4:a3:2a:98:
87:75:b2:62:bc:ed:7e:5d:05:0d:24:66:b4:65:4c:
46:4f:5d:e3:ba:69:29:82:01:60:d5:69:22:5c:3e:
39:45:04:ff:01:5f:dc:50:d6:d6:56:0f:41:03:17:
3f:d7:85:0d:0a:a5:4e:4b:01:b0:b8:28:70:e6:05:
8a:bd:e5:fd:d1:05:71:f5:66:d4:0e:dd:27:cd:10:
eb:6f:c1:73:10:e4:0e:44:88:0d:28:da:ad:86:08:
b6:b5:1d:64:58:70:36:0e:34:84:27:bf:fc:99:a7:
c0:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:3A:78:2D:C1:E3:F3:A6:0A:33:7C:B2:39:54:F3:92:47:A8:F8:19
X509v3 Authority Key Identifier:
keyid:32:38:8F:CF:74:D2:E5:95:24:F4:EB:4D:96:E4:4C:52:22:DB:63:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MjiPz3TS5ZUk9OtNluRMUiLbY-E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/a9a1c9-3444-4e5b-a720-18040c8e22ed/1/MjiPz3TS5ZUk9OtNluRMUiLbY-E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/a9a1c9-3444-4e5b-a720-18040c8e22ed/1/MjiPz3TS5ZUk9OtNluRMUiLbY-E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:5d:33:40:ed:3f:01:19:bc:19:f4:d9:ee:dc:9f:26:50:ab:
c6:58:52:ad:96:7b:f7:b4:b5:a2:9e:f4:ed:1e:bb:d4:ef:45:
b9:51:28:53:05:12:ee:27:23:3f:d2:67:25:b4:d3:74:8a:17:
22:bc:c5:c1:87:de:f2:8d:e6:91:0d:69:fc:3b:dc:3f:ca:61:
8d:e0:c4:93:2b:67:38:f1:48:17:ba:54:e0:50:87:79:45:b3:
35:25:7a:33:b6:ef:78:14:15:32:01:eb:02:1e:88:dc:b2:6a:
8b:8b:c5:b5:80:8d:ed:c9:67:ec:84:0e:0d:20:a0:39:dc:92:
17:d3:bd:57:2e:44:c8:1b:3a:37:15:bc:f7:0b:d8:ed:1b:b8:
d3:bb:ba:55:c7:d1:29:2f:b9:63:ee:10:92:9a:1e:f0:d6:b5:
46:f1:a6:5f:33:f3:40:91:de:a0:81:79:65:63:10:1f:cb:09:
8b:b1:5d:a0:9a:d5:e4:33:0e:7a:ae:28:53:bb:45:f6:f0:13:
00:48:d6:3a:4b:d9:ee:fb:8c:9a:7b:0c:70:15:27:71:ab:c9:
98:63:2f:fc:b3:61:8b:74:0a:fb:39:66:2e:19:33:13:a6:7d:
8c:6e:dc:c5:fc:40:f5:0c:19:21:b5:7d:c5:0c:e1:93:00:4c:
0f:25:8b:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:05:06 2025 by rpki-client