Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/852cfb-4471-4290-91f4-6bc4905c42d4/1/ClMYxYv1unQySyXQN0BN2N2p_yQ.mft
File: ClMYxYv1unQySyXQN0BN2N2p_yQ.mft (raw, json)
Hash identifier: rM/QsZPgjZO9t9FjCtEHE9ElKYU3BCk0dgu0yPxbsOk=
Subject key identifier: E0:93:1D:87:66:53:95:11:C0:9F:6E:15:28:33:26:6E:8C:A1:B9:33
Authority key identifier: 0A:53:18:C5:8B:F5:BA:74:32:4B:25:D0:37:40:4D:D8:DD:A9:FF:24
Certificate issuer: /CN=0a5318c58bf5ba74324b25d037404dd8dda9ff24
Certificate serial: 0194BCE0A36491C76818F247F6DD5B32A923
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ClMYxYv1unQySyXQN0BN2N2p_yQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/852cfb-4471-4290-91f4-6bc4905c42d4/1/ClMYxYv1unQySyXQN0BN2N2p_yQ.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 15:00:26 +0000
Manifest this update: Fri 31 Jan 2025 15:00:26 +0000
Manifest next update: Sat 01 Feb 2025 15:00:26 +0000
Files and hashes: 1: ClMYxYv1unQySyXQN0BN2N2p_yQ.crl (hash: 3cJoWTlU6eRZvBr5585VdZmCydWP3mthgbAVQKN47z0=)
2: DLTd3WJjxjvYe7s9RQaXW0-asFQ.roa (hash: CEzU0MiwDAlXifXvS9Fry7MUXXUL96cqYeU54NDS/g8=)
3: MzKwgAtz12wzIsjgwju5LaHLtH8.roa (hash: DsGzfZzJWXHpJi5oY7AKelnpp/ss483xMhTBHOGogIk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:a3:64:91:c7:68:18:f2:47:f6:dd:5b:32:a9:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a5318c58bf5ba74324b25d037404dd8dda9ff24
Validity
Not Before: Jan 31 15:00:26 2025 GMT
Not After : Feb 1 15:00:26 2025 GMT
Subject: CN=e0931d8766539511c09f6e152833266e8ca1b933
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:c5:83:1a:cf:ce:f1:d0:9f:91:b2:b1:df:b8:
16:8f:87:4a:ca:64:4e:99:68:8e:96:fa:0b:a9:8c:
af:1a:bb:ac:af:56:7b:19:05:f0:18:5e:5b:ca:5d:
6a:da:7b:dd:12:f5:27:91:d5:19:b8:20:ba:37:32:
41:32:fe:60:d3:78:d3:35:1c:a5:ff:69:68:ca:49:
13:37:2c:82:36:ee:3c:57:66:9d:89:9b:ed:0c:64:
ed:b4:ad:a7:65:db:ec:32:ab:1f:81:51:c1:df:74:
d2:c9:7e:99:3d:c1:b3:34:eb:58:67:0d:b1:19:2c:
5c:72:a1:3b:9e:7c:51:62:e7:3c:0c:f9:7d:4c:74:
b1:54:0a:64:66:76:85:7d:c9:65:0f:9e:7c:ae:3c:
f4:1a:64:61:08:d8:33:c5:09:50:be:d3:b8:99:1f:
90:7a:4b:d1:cf:77:89:af:55:17:9d:95:f0:86:23:
95:c2:fb:5e:91:9b:11:1e:1e:da:d2:0b:68:ab:b0:
aa:6b:cd:a8:bc:64:62:89:0e:1c:ef:5f:a7:35:e2:
5c:6f:1a:55:20:7d:33:64:20:51:84:24:8e:93:c7:
31:03:ba:a7:0d:3c:b5:37:35:ca:60:cf:5e:0d:cc:
54:c7:1f:12:d5:3e:69:4d:32:d4:f0:31:b1:f9:43:
d8:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:93:1D:87:66:53:95:11:C0:9F:6E:15:28:33:26:6E:8C:A1:B9:33
X509v3 Authority Key Identifier:
keyid:0A:53:18:C5:8B:F5:BA:74:32:4B:25:D0:37:40:4D:D8:DD:A9:FF:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ClMYxYv1unQySyXQN0BN2N2p_yQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/852cfb-4471-4290-91f4-6bc4905c42d4/1/ClMYxYv1unQySyXQN0BN2N2p_yQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/852cfb-4471-4290-91f4-6bc4905c42d4/1/ClMYxYv1unQySyXQN0BN2N2p_yQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:6d:f8:0f:82:70:0f:9c:71:99:25:ed:81:39:f5:9a:e8:66:
29:f8:4f:e1:66:50:ad:07:e1:0f:8d:6e:26:0a:f1:86:1d:2d:
1d:63:9f:2e:3e:14:0e:a5:94:96:20:4d:aa:18:7b:98:fb:0e:
07:63:2d:e0:e0:e7:0e:2f:a5:16:4f:c9:12:ac:a6:4d:81:fd:
81:af:66:b2:d7:b9:6c:a9:c5:4a:15:16:a7:fb:d6:e8:1a:f3:
e6:c2:95:d9:db:76:ba:9c:86:16:ed:f2:1a:7f:87:33:df:2a:
37:cf:b6:f9:41:40:9d:3c:47:a1:01:c1:08:f7:7d:35:22:d6:
92:23:ec:21:3b:3d:42:31:7d:42:be:00:c4:37:60:fc:e6:65:
fb:1d:32:92:d4:6c:ee:43:66:af:02:cd:5b:4b:2b:ef:4d:de:
ab:3b:31:66:de:58:3d:a1:dc:13:2d:a8:5e:38:4c:bb:eb:24:
1b:47:64:f4:2e:c1:d3:38:35:5c:cb:b2:6b:fd:fd:f5:88:9d:
fa:99:72:ae:d2:84:92:07:f9:fb:6d:2f:9c:a3:63:02:84:e2:
aa:a7:a6:c9:9f:57:ae:48:19:ec:96:20:11:28:9c:c9:84:df:
53:f2:01:4f:b5:14:6b:98:fe:13:bc:9f:06:a3:20:c3:f3:47:
4a:96:04:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 20:03:53 2025 by rpki-client