Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/c15ddb-e1ef-4308-988d-aefa757e0c38/1/mCHjfqtu9jJpM-X6N0jQfYMCbbA.mft
File: mCHjfqtu9jJpM-X6N0jQfYMCbbA.mft (raw, json)
Hash identifier: i3UTYZ6bfp1cUBtbCJc4i2Y+vcEyIxwQPuIOKX4+wMY=
Subject key identifier: DD:A9:C5:9C:B7:7D:01:C5:18:99:D9:F7:07:C8:20:0C:C9:93:29:8D
Authority key identifier: 98:21:E3:7E:AB:6E:F6:32:69:33:E5:FA:37:48:D0:7D:83:02:6D:B0
Certificate issuer: /CN=9821e37eab6ef6326933e5fa3748d07d83026db0
Certificate serial: 0194BC727DA94F9C8E4C99B5EDE965E9762D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCHjfqtu9jJpM-X6N0jQfYMCbbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/c15ddb-e1ef-4308-988d-aefa757e0c38/1/mCHjfqtu9jJpM-X6N0jQfYMCbbA.mft
Manifest number: 142F
Signing time: Fri 31 Jan 2025 13:00:07 +0000
Manifest this update: Fri 31 Jan 2025 13:00:07 +0000
Manifest next update: Sat 01 Feb 2025 13:00:07 +0000
Files and hashes: 1: Fb0UwpxCy0DRKLuSbZAzVNuZQGI.roa (hash: FQG+r4pQE3E1WCi2kVbQ4HOY+Sj6V8FJrKG1h8vbtwQ=)
2: mCHjfqtu9jJpM-X6N0jQfYMCbbA.crl (hash: CHu3dtBj/UZxt2YLhmbKVGlk+gPbayq3B4VwS51Ib5Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:7d:a9:4f:9c:8e:4c:99:b5:ed:e9:65:e9:76:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9821e37eab6ef6326933e5fa3748d07d83026db0
Validity
Not Before: Jan 31 13:00:07 2025 GMT
Not After : Feb 1 13:00:07 2025 GMT
Subject: CN=dda9c59cb77d01c51899d9f707c8200cc993298d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:bb:21:22:c0:ae:63:be:58:bf:cd:c1:41:24:
25:bd:6c:a0:2b:50:28:90:9d:8e:a2:46:8e:1c:d3:
c5:11:73:cf:31:9b:32:b6:13:ad:b5:41:b9:37:e9:
49:0c:b3:89:c3:92:b4:bc:8b:c1:43:18:bd:26:b5:
68:24:4c:9a:f1:15:71:cd:6e:a9:df:70:7f:85:3e:
1e:c1:e0:20:20:fb:c3:6f:fe:3a:30:f2:52:fd:9b:
52:a7:fb:12:d8:66:0e:7f:b9:2b:1d:f8:9b:05:c5:
40:97:e1:43:c8:f2:fe:c0:de:35:af:02:51:71:8d:
da:ea:12:e7:70:1a:1d:5d:c3:4c:d7:c3:2c:09:94:
57:91:8c:e3:54:fe:04:b3:a5:00:29:82:99:aa:06:
ee:9b:52:66:98:2a:03:f7:7e:35:b1:04:ea:29:29:
89:da:05:1a:93:59:cc:fe:33:49:44:e0:a4:31:37:
97:36:2d:23:a0:e5:50:4b:d0:af:53:8b:40:69:ba:
04:d2:71:23:5d:76:3f:7f:86:bd:52:a1:d6:4f:49:
0f:50:a4:ae:79:5f:44:8d:34:1f:ae:4a:96:7c:fe:
39:71:66:00:e6:16:0c:c0:1e:2b:ed:ac:73:a9:90:
78:d2:93:0d:ba:d5:20:31:d2:35:db:af:5b:f3:b1:
be:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:A9:C5:9C:B7:7D:01:C5:18:99:D9:F7:07:C8:20:0C:C9:93:29:8D
X509v3 Authority Key Identifier:
keyid:98:21:E3:7E:AB:6E:F6:32:69:33:E5:FA:37:48:D0:7D:83:02:6D:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCHjfqtu9jJpM-X6N0jQfYMCbbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c15ddb-e1ef-4308-988d-aefa757e0c38/1/mCHjfqtu9jJpM-X6N0jQfYMCbbA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c15ddb-e1ef-4308-988d-aefa757e0c38/1/mCHjfqtu9jJpM-X6N0jQfYMCbbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:de:bc:fa:00:2c:19:81:c9:ad:cf:90:25:71:49:f0:7b:1d:
e2:fa:ab:05:a8:9b:1b:9c:c6:3f:7a:ab:12:f4:e5:d8:b8:a7:
29:ec:a0:0e:c9:da:4e:46:b8:98:d0:e4:29:bc:8d:2d:d4:10:
65:a0:7b:be:cb:f8:4c:4d:50:74:9a:60:a9:eb:f2:59:f9:1f:
d6:ae:19:de:3a:26:76:7a:f7:b3:a3:83:50:be:07:81:27:81:
eb:89:96:79:39:ec:81:43:c9:23:80:24:d0:59:5f:e8:3b:ea:
40:02:b6:fb:ac:68:06:fe:fa:8c:00:5f:94:b2:27:17:ce:bf:
2a:d7:a8:41:a0:dc:18:b8:b4:ea:eb:00:aa:58:ef:a0:68:76:
ed:26:91:c5:0a:f3:ec:6e:f6:e3:cd:e1:75:8c:b1:39:a3:c8:
94:4d:21:c7:9f:53:83:9a:eb:12:3e:4a:af:11:9e:bc:62:f1:
ff:cd:8f:b3:f7:b7:27:f2:d4:68:6a:30:25:1a:8c:0b:a9:b3:
36:34:84:5c:ee:36:3d:d7:35:89:19:2c:4d:00:35:2d:f7:af:
63:e3:60:1c:ef:28:75:90:81:01:c3:ed:03:82:bc:e1:50:5e:
c7:09:44:b3:f4:b4:14:c1:f0:93:09:dc:73:95:7e:83:06:e6:
f9:70:f5:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:26:17 2025 by rpki-client