Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/795baf-508b-477d-8926-2d953600ff37/1/maYtMHOoLahlQqz8Nvb8ueZqBbs.mft
File: maYtMHOoLahlQqz8Nvb8ueZqBbs.mft (raw, json)
Hash identifier: Mby/O1Z/HOMcFOkvGramZTp8VpWf4Na2qNlz+k/UHc0=
Subject key identifier: D9:48:F0:5A:8B:EC:E8:1B:7F:94:D5:97:5A:99:B4:5A:79:1A:0B:07
Authority key identifier: 99:A6:2D:30:73:A8:2D:A8:65:42:AC:FC:36:F6:FC:B9:E6:6A:05:BB
Certificate issuer: /CN=99a62d3073a82da86542acfc36f6fcb9e66a05bb
Certificate serial: 0194BCE09A24199B8C0946249DEE3DF86E1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/maYtMHOoLahlQqz8Nvb8ueZqBbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/795baf-508b-477d-8926-2d953600ff37/1/maYtMHOoLahlQqz8Nvb8ueZqBbs.mft
Manifest number: 0B3F
Signing time: Fri 31 Jan 2025 15:00:23 +0000
Manifest this update: Fri 31 Jan 2025 15:00:23 +0000
Manifest next update: Sat 01 Feb 2025 15:00:23 +0000
Files and hashes: 1: maYtMHOoLahlQqz8Nvb8ueZqBbs.crl (hash: 3fAd11Ao/V0/zw26PjTA27QkZpyJCmAeaGj4+uE9e4I=)
2: sEp92JJOOutIpHjLS3hTbE4CMc4.roa (hash: zayIaTeW8P15HaHDoVK2CtiggZ6Pbixqm/OKP7D4RHg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:9a:24:19:9b:8c:09:46:24:9d:ee:3d:f8:6e:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99a62d3073a82da86542acfc36f6fcb9e66a05bb
Validity
Not Before: Jan 31 15:00:23 2025 GMT
Not After : Feb 1 15:00:23 2025 GMT
Subject: CN=d948f05a8bece81b7f94d5975a99b45a791a0b07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:53:a9:c9:16:38:2b:14:2f:1a:ac:9c:e5:bc:
9c:54:93:7a:1c:30:c9:b5:df:b6:51:9e:6c:79:4b:
89:34:85:e1:52:ca:50:ba:1b:e3:8a:04:44:4b:18:
54:7e:44:b7:f4:bc:bb:c4:40:54:f6:2f:51:86:99:
4d:a6:2a:57:33:5b:15:10:24:c7:02:63:9c:65:87:
93:9d:04:5c:62:b9:70:ad:89:96:a9:fc:0f:dc:1e:
86:c0:8d:fd:2e:c8:9a:a5:64:08:e5:92:8a:2b:46:
17:ae:2a:cf:5e:c1:52:f3:5f:f5:ec:27:3e:05:62:
82:63:eb:65:68:e2:6c:a9:06:8a:62:3f:2e:31:45:
53:d8:f3:43:26:0c:e9:8f:0e:19:e3:78:47:e1:35:
25:7f:fc:b2:f2:24:62:cd:0c:b9:a3:f9:24:bc:bc:
46:cb:3d:49:e1:42:26:0d:46:7f:bd:3a:b9:ae:8f:
e7:e0:3f:8e:c9:90:38:00:40:73:20:f8:89:c8:4d:
3c:63:16:6b:d1:58:d5:6a:6a:9c:28:82:90:09:a8:
c9:d5:e1:a3:f1:f2:04:24:5a:19:58:b3:88:b8:5b:
e3:4c:8f:9f:20:e0:81:6b:a5:be:bb:69:a9:e8:f8:
68:48:b1:06:48:07:d6:f0:cc:79:4f:16:d9:8a:d0:
31:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:48:F0:5A:8B:EC:E8:1B:7F:94:D5:97:5A:99:B4:5A:79:1A:0B:07
X509v3 Authority Key Identifier:
keyid:99:A6:2D:30:73:A8:2D:A8:65:42:AC:FC:36:F6:FC:B9:E6:6A:05:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/maYtMHOoLahlQqz8Nvb8ueZqBbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/795baf-508b-477d-8926-2d953600ff37/1/maYtMHOoLahlQqz8Nvb8ueZqBbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/795baf-508b-477d-8926-2d953600ff37/1/maYtMHOoLahlQqz8Nvb8ueZqBbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:49:0c:19:25:dd:de:c0:47:a8:e2:e9:97:c5:f4:07:ec:40:
92:fd:f1:0a:1b:70:80:ab:66:1f:9a:53:a0:86:3a:fd:10:6b:
ea:32:ce:4a:20:f5:9e:64:f2:c7:e1:2c:63:50:72:24:68:f1:
07:65:45:2a:de:de:6d:28:5b:bb:da:b6:d7:06:13:82:95:67:
75:5e:78:52:f2:01:0f:08:18:2f:1e:0f:88:f2:6b:74:5b:37:
c3:ce:38:63:54:22:12:60:d4:d2:a4:81:0d:76:bc:58:18:91:
b8:27:c7:b7:af:c9:42:6f:50:e7:4e:95:df:e0:1d:b2:6f:fc:
50:7e:47:1f:e3:fd:17:67:b3:18:db:9c:d0:56:e3:9d:59:ba:
72:17:65:6b:86:be:bd:43:08:98:b0:4b:fc:19:76:b2:52:42:
86:65:48:b4:8e:45:b5:a6:5c:8c:91:04:33:19:82:4f:85:71:
76:dc:0c:7c:57:dc:a6:16:b7:f6:ae:5a:c7:e0:83:b1:51:91:
b5:00:52:18:c8:43:70:e7:bf:1e:2c:34:2d:f7:fa:72:7b:f0:
d1:e1:e8:1a:fb:9c:a2:53:21:01:5b:2e:36:20:9f:88:d3:c3:
91:26:e0:fc:b0:0d:e1:d9:bf:29:cd:d7:ad:9a:78:96:2b:09:
67:e5:ea:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 09:38:15 2025 by rpki-client