Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/bad4a0-3e9b-4764-8a24-f3a26f055f4e/1/mAPED3e8iPryCfMdNh67q1yurEo.mft
File: mAPED3e8iPryCfMdNh67q1yurEo.mft (raw, json)
Hash identifier: 4mZSZiOLlb0ECcSuVyJdK8WYQlA9+QP3uhiNMOnrh6o=
Subject key identifier: B7:39:4C:29:CD:60:E2:AE:99:98:58:22:29:71:56:97:CF:89:19:5A
Authority key identifier: 98:03:C4:0F:77:BC:88:FA:F2:09:F3:1D:36:1E:BB:AB:5C:AE:AC:4A
Certificate issuer: /CN=9803c40f77bc88faf209f31d361ebbab5caeac4a
Certificate serial: 0194BD1795BAED49AD162CEC30AF222D14F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mAPED3e8iPryCfMdNh67q1yurEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/bad4a0-3e9b-4764-8a24-f3a26f055f4e/1/mAPED3e8iPryCfMdNh67q1yurEo.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 16:00:27 +0000
Manifest this update: Fri 31 Jan 2025 16:00:27 +0000
Manifest next update: Sat 01 Feb 2025 16:00:27 +0000
Files and hashes: 1: FofuUHCsYy2TWoAryzf8NlyduYw.roa (hash: R69ugPfWWsxLjShfG0VPEFk8EHkq5i3Md6nRP/x8COw=)
2: Myk-x7JFGZ-QD7gv9P00RV0PvjI.roa (hash: 328xxf9QZGGg7m61rWRIeZ1jEsvvk0/kuvlftHSPZ8o=)
3: TjOWAn9m61FkB31GdiLBvzbAI7U.roa (hash: aG8sOh3CvIOag2ln0Tel0Fs9xc2JzXQ51lpXRk6Hp0I=)
4: mAPED3e8iPryCfMdNh67q1yurEo.crl (hash: y6CB2+gchF2iwnSYoWY5CZ0ZxmKR+0wmdre4MQf5uCo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:95:ba:ed:49:ad:16:2c:ec:30:af:22:2d:14:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9803c40f77bc88faf209f31d361ebbab5caeac4a
Validity
Not Before: Jan 31 16:00:27 2025 GMT
Not After : Feb 1 16:00:27 2025 GMT
Subject: CN=b7394c29cd60e2ae9998582229715697cf89195a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:4f:74:5f:dd:71:29:be:78:08:8d:2c:eb:08:
1f:e3:ef:5d:b5:cd:5f:76:92:c7:ef:49:b1:2e:4b:
eb:b3:b2:f4:47:57:96:27:2c:67:9e:d7:db:ef:53:
67:1e:83:96:ae:5b:4a:75:c3:05:1e:43:a0:aa:af:
f4:97:03:a3:bc:28:c1:4a:8d:cb:cd:cb:57:ef:ce:
48:29:53:7b:76:5e:80:11:57:27:9d:be:21:a2:20:
ab:0c:b9:a7:ef:81:96:00:13:de:33:74:54:b0:de:
5b:1a:75:fe:d5:d4:6b:68:c3:70:1b:a1:22:59:fa:
b4:24:3a:25:0e:a1:fe:3f:55:f0:79:e1:5f:fd:49:
d5:cd:df:21:af:21:94:11:6e:54:92:52:98:0d:4b:
b9:8e:ef:99:84:9e:1d:fa:39:ef:c1:35:11:c2:e0:
a0:16:37:ad:f5:39:44:45:37:25:e7:bf:20:ad:76:
6a:7b:a3:36:d4:b1:68:0e:32:36:cb:0e:55:07:18:
57:12:d0:82:01:b0:34:9c:6b:bf:12:56:c1:74:35:
92:48:49:c6:05:1f:2c:5f:fa:38:41:95:d4:69:e7:
19:f3:fa:36:d9:70:1d:64:9a:5b:35:a1:56:7f:6e:
83:d6:1f:db:96:15:91:66:b9:3b:6b:02:10:d4:88:
02:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:39:4C:29:CD:60:E2:AE:99:98:58:22:29:71:56:97:CF:89:19:5A
X509v3 Authority Key Identifier:
keyid:98:03:C4:0F:77:BC:88:FA:F2:09:F3:1D:36:1E:BB:AB:5C:AE:AC:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mAPED3e8iPryCfMdNh67q1yurEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/bad4a0-3e9b-4764-8a24-f3a26f055f4e/1/mAPED3e8iPryCfMdNh67q1yurEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/bad4a0-3e9b-4764-8a24-f3a26f055f4e/1/mAPED3e8iPryCfMdNh67q1yurEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:1f:9c:cd:38:79:53:d3:7d:7b:85:65:44:24:d8:70:4f:37:
28:ca:74:8e:e2:93:97:f6:f1:df:1f:d0:db:4a:72:b6:ef:45:
37:63:4a:a9:3f:d5:65:97:c1:a6:a8:55:95:e3:af:15:64:ef:
94:6f:94:42:b3:94:23:a1:1b:89:3a:bb:b5:43:b6:8d:93:ec:
83:97:7f:53:02:c9:2f:0e:4b:fe:19:49:f9:02:bc:02:ce:be:
a2:4c:8a:a2:bc:34:74:d6:8b:e6:23:a8:63:fc:75:54:68:4f:
52:f1:5e:da:be:e2:c8:f3:61:6c:f9:0a:81:0d:c1:6a:91:4a:
9f:d9:ff:61:aa:08:2b:c1:a3:06:d3:11:87:ec:db:33:d9:bb:
6b:d0:0e:83:d9:68:ae:2f:f2:b1:81:51:a5:37:6f:dd:12:e4:
c4:0e:76:9a:af:1a:9a:e6:2b:c6:b5:43:e6:c1:4e:d2:a8:0d:
e6:68:95:0a:51:ca:73:5d:74:b0:b3:42:81:60:bf:13:9a:2f:
e3:77:39:8c:03:9f:2e:6d:d8:29:ae:47:62:b3:03:e0:97:f9:
3a:54:63:72:e5:b5:86:5c:e7:0a:a2:2d:71:2c:02:79:7e:24:
33:cb:34:a6:f1:cf:19:81:d0:73:28:cb:da:81:3b:48:1c:81:
a8:05:a2:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:42:31 2025 by rpki-client