Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/d1c937-e767-4ab1-8c5c-0952589b8b59/1/MFS7bp94ARuMxdPyO3C2bPaXmqc.mft
File: MFS7bp94ARuMxdPyO3C2bPaXmqc.mft (raw, json)
Hash identifier: yvoZfpLCTF9zB9S68cn1RnmT2dLP1O0XtmW/R60nQWI=
Subject key identifier: 93:DF:3A:08:46:CA:9C:54:1B:38:5D:9A:E2:75:03:8D:29:B0:FC:EC
Authority key identifier: 30:54:BB:6E:9F:78:01:1B:8C:C5:D3:F2:3B:70:B6:6C:F6:97:9A:A7
Certificate issuer: /CN=3054bb6e9f78011b8cc5d3f23b70b66cf6979aa7
Certificate serial: 0194BCA9A4EFC017BDAC844F89F280DBF3E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MFS7bp94ARuMxdPyO3C2bPaXmqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/d1c937-e767-4ab1-8c5c-0952589b8b59/1/MFS7bp94ARuMxdPyO3C2bPaXmqc.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 14:00:21 +0000
Manifest this update: Fri 31 Jan 2025 14:00:21 +0000
Manifest next update: Sat 01 Feb 2025 14:00:21 +0000
Files and hashes: 1: MFS7bp94ARuMxdPyO3C2bPaXmqc.crl (hash: j9Owf6CgAfRU4J4q11mKQas1A80KcY5TN45VUQto4yU=)
2: jIxoBxvUdMCHFAPIgbpTv82jWLo.roa (hash: HrwO1TMjewTexEY6JfFnwLbtTAOtQU58BOb2eJzb5To=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:a4:ef:c0:17:bd:ac:84:4f:89:f2:80:db:f3:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3054bb6e9f78011b8cc5d3f23b70b66cf6979aa7
Validity
Not Before: Jan 31 14:00:21 2025 GMT
Not After : Feb 1 14:00:21 2025 GMT
Subject: CN=93df3a0846ca9c541b385d9ae275038d29b0fcec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:76:16:4e:47:c0:70:28:56:b3:02:35:69:27:
2e:b7:d3:51:9d:77:40:23:bd:74:97:c6:18:ec:d5:
40:19:e9:72:a0:2e:8f:07:c6:fd:05:d0:0b:87:69:
ad:97:03:96:14:b0:1c:30:3e:0d:e6:00:35:29:b1:
04:cb:6f:9d:4a:ef:c1:cb:72:9e:09:a4:8f:28:d1:
8d:05:e0:5a:eb:13:4c:a0:69:41:b4:40:53:8a:6c:
c7:46:e7:5a:00:45:38:4d:74:bf:30:d6:42:b1:13:
46:e3:38:75:2b:96:af:30:74:89:0c:9a:49:cd:7d:
bc:24:b1:27:e1:34:2b:44:96:cd:db:a0:63:2f:bc:
dd:0e:b2:db:af:65:ec:39:96:50:22:5a:79:4f:73:
88:ae:4e:be:56:8f:e0:57:78:87:0e:d9:75:7f:d3:
29:c0:c4:ac:da:4a:6d:10:39:91:ca:78:bc:88:0c:
19:47:7a:93:d9:99:eb:4f:75:8e:14:1f:68:61:1b:
ac:50:70:1e:1c:c1:87:d2:18:3a:9a:4b:2c:34:5a:
41:53:a7:25:6b:ce:4e:20:77:a5:d2:eb:d4:2a:5b:
38:ce:06:40:7f:10:ba:d4:25:ad:7c:92:e1:ae:a5:
4a:14:8a:ff:f1:d9:18:8c:9d:89:1b:2d:71:df:0d:
13:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:DF:3A:08:46:CA:9C:54:1B:38:5D:9A:E2:75:03:8D:29:B0:FC:EC
X509v3 Authority Key Identifier:
keyid:30:54:BB:6E:9F:78:01:1B:8C:C5:D3:F2:3B:70:B6:6C:F6:97:9A:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MFS7bp94ARuMxdPyO3C2bPaXmqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/d1c937-e767-4ab1-8c5c-0952589b8b59/1/MFS7bp94ARuMxdPyO3C2bPaXmqc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/d1c937-e767-4ab1-8c5c-0952589b8b59/1/MFS7bp94ARuMxdPyO3C2bPaXmqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:97:b1:88:ac:0b:11:63:bf:fe:21:b2:f0:b3:49:5a:50:5f:
64:73:c4:f0:de:ee:56:47:91:f8:ff:61:d8:cd:90:f7:bd:46:
a7:d9:79:34:ec:74:2d:e4:3c:76:89:0d:fa:f1:a1:06:5c:77:
9a:b6:30:d0:d6:12:e8:85:30:ad:cc:a8:53:30:ec:f7:ed:41:
6c:9f:a6:3d:e2:2c:4b:4b:43:a0:e1:5f:b6:41:b9:d1:ec:4a:
3a:ed:36:35:56:31:32:89:56:67:9b:c3:dc:87:45:b9:59:57:
02:0c:06:21:a3:a0:40:46:8c:69:d5:e1:59:db:48:ba:b9:67:
7d:e2:06:c3:9c:c9:39:8e:ab:1f:8c:bf:e5:76:d2:74:3c:b2:
4c:23:58:c5:68:3a:1b:a2:e8:06:83:54:9b:34:70:5a:43:3d:
dd:e5:7b:e1:3a:b2:a6:e8:73:ce:3f:15:8c:d1:d1:b3:3a:f6:
7d:19:06:92:48:bb:a5:b4:60:bc:c3:cb:e2:2b:37:6f:a5:b0:
49:1c:51:c9:44:5f:1a:a4:98:06:46:15:8c:dc:e4:d7:23:8a:
3c:f1:39:05:b7:0d:03:e9:52:79:b3:b6:28:6a:29:4c:5e:af:
26:18:3d:d0:44:6a:24:fc:28:7b:fd:90:40:48:f9:da:66:86:
d0:20:61:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qaTvwBe9rIRPifKA2/PjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwNTRiYjZlOWY3ODAxMWI4Y2M1ZDNmMjNiNzBiNjZjZjY5
NzlhYTcwHhcNMjUwMTMxMTQwMDIxWhcNMjUwMjAxMTQwMDIxWjAzMTEwLwYDVQQD
Eyg5M2RmM2EwODQ2Y2E5YzU0MWIzODVkOWFlMjc1MDM4ZDI5YjBmY2VjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3YWTkfAcChWswI1aScut9NRnXdA
I710l8YY7NVAGelyoC6PB8b9BdALh2mtlwOWFLAcMD4N5gA1KbEEy2+dSu/By3Ke
CaSPKNGNBeBa6xNMoGlBtEBTimzHRudaAEU4TXS/MNZCsRNG4zh1K5avMHSJDJpJ
zX28JLEn4TQrRJbN26BjL7zdDrLbr2XsOZZQIlp5T3OIrk6+Vo/gV3iHDtl1f9Mp
wMSs2kptEDmRyni8iAwZR3qT2ZnrT3WOFB9oYRusUHAeHMGH0hg6mkssNFpBU6cl
a85OIHel0uvUKls4zgZAfxC61CWtfJLhrqVKFIr/8dkYjJ2JGy1x3w0TCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJPfOghGypxUGzhdmuJ1A40psPzsMB8GA1UdIwQY
MBaAFDBUu26feAEbjMXT8jtwtmz2l5qnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUZTN2JwOTRBUnVNeGRQeU8zQzJiUGFYbXFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9kMWM5MzctZTc2Ny00YWIxLThjNWMt
MDk1MjU4OWI4YjU5LzEvTUZTN2JwOTRBUnVNeGRQeU8zQzJiUGFYbXFjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC9kMWM5MzctZTc2Ny00YWIxLThjNWMtMDk1MjU4OWI4YjU5
LzEvTUZTN2JwOTRBUnVNeGRQeU8zQzJiUGFYbXFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABpexiKwL
EWO//iGy8LNJWlBfZHPE8N7uVkeR+P9h2M2Q971Gp9l5NOx0LeQ8dokN+vGhBlx3
mrYw0NYS6IUwrcyoUzDs9+1BbJ+mPeIsS0tDoOFftkG50exKOu02NVYxMolWZ5vD
3IdFuVlXAgwGIaOgQEaMadXhWdtIurlnfeIGw5zJOY6rH4y/5XbSdDyyTCNYxWg6
G6LoBoNUmzRwWkM93eV74Tqypuhzzj8VjNHRszr2fRkGkki7pbRgvMPL4is3b6Ww
SRxRyURfGqSYBkYVjNzk1yOKPPE5BbcNA+lSebO2KGopTF6vJhg90ERqJPwoe/2Q
QEj52maG0CBh2Q==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:44:56 2025 by rpki-client