
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/MaGF0OsMp4EcWGQl3g6WDhz-ths.mft
File: MaGF0OsMp4EcWGQl3g6WDhz-ths.mft (raw, json)
Hash identifier: 3vc4EwYqmOzAA1ql1D3aExuiVBYloUSkp4hRL42j1vE=
Subject key identifier: DD:CA:52:D0:F4:03:3B:86:1B:1E:3A:72:85:BB:BB:04:E2:40:3C:6D
Authority key identifier: 31:A1:85:D0:EB:0C:A7:81:1C:58:64:25:DE:0E:96:0E:1C:FE:B6:1B
Certificate issuer: /CN=31a185d0eb0ca7811c586425de0e960e1cfeb61b
Certificate serial: 0194BCE0B34ADA00BBAD66FDFEDCA20AF047
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MaGF0OsMp4EcWGQl3g6WDhz-ths.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/MaGF0OsMp4EcWGQl3g6WDhz-ths.mft
Manifest number: 149C
Signing time: Fri 31 Jan 2025 15:00:30 +0000
Manifest this update: Fri 31 Jan 2025 15:00:30 +0000
Manifest next update: Sat 01 Feb 2025 15:00:30 +0000
Files and hashes: 1: BEWUUb6Sb5YAERA7Rm-cdwFsmF0.roa (hash: +Qt2yDKsz2L2j/WArrE4B6qzTe0DbfXxEvpfQa5HyZw=)
2: EnWNHEKE4As2dY7z8H4f1zMv8PE.roa (hash: hirWkRxOPTdm/HJ/WnnegZ8yGMndTUx93DgHktqjC64=)
3: LlMngn95TdQ9s1lobSIfFiaxwMc.roa (hash: WeKn9zwaRRHjlRd4WIjiQWXgKdTTEMZ6BTo5nLZ3Ai4=)
4: MaGF0OsMp4EcWGQl3g6WDhz-ths.crl (hash: 9p4zSPAGxXUvBwDGq37JQvRC2UCwk7Babd2RnJUB6Lc=)
5: O9d_gV74yYpX6Um_s3aWdDm_Ej0.roa (hash: RbexetxXBeJZCWdrT/LqIU6zAstJlnMOcoJBHKsXhoQ=)
6: SuAwx53ztZ8nH6iQDl-exiTpB9U.roa (hash: OW4UNz0fPDN3E3BkjgDIvFCnQ13CpXoOp18yw+GY/do=)
7: aQ0BCg7T0qvdq_rjilld2qmDCCA.roa (hash: FUk+EtDI/Bw1Ith6izcMbGQJ0XgwGEmYYqaLt5/+JX8=)
8: e9kzaC5aK1AvC-cHsDdx9haP07k.roa (hash: QuaA/YDvF9Gcy4o2L6hDN/avQ+2ifpi3IVCtvCyZW14=)
9: pGg5IZ4_Rh_E3JxX0-HT9TgVPxM.roa (hash: 5liIqRjQ5b6iul4uHIld/la3AWJyxn6cmBEC3D1GVaQ=)
10: s3By1xAgm0Piz-TUrYDBrs1WoXU.roa (hash: BgzNGbdXko+tn+sFUWTRIfviR0vd7FxJVj54FcWlz/E=)
11: yEAhGBhhnsGlSwmABMxYXMoVFmo.roa (hash: 4gRmJAIY5iMdHyen9IsOKFW1O1UVQrjj3rH4hihkCu4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:b3:4a:da:00:bb:ad:66:fd:fe:dc:a2:0a:f0:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31a185d0eb0ca7811c586425de0e960e1cfeb61b
Validity
Not Before: Jan 31 15:00:30 2025 GMT
Not After : Feb 1 15:00:30 2025 GMT
Subject: CN=ddca52d0f4033b861b1e3a7285bbbb04e2403c6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:1a:8c:35:d3:c3:27:3e:a3:98:24:03:75:62:
dd:1c:8c:75:10:bb:50:84:60:e4:a7:7a:8b:a9:3a:
d3:d5:bf:59:26:bd:90:36:62:e9:aa:e6:e2:1d:76:
b9:10:72:fa:4b:ca:8f:12:23:fa:eb:70:20:af:33:
70:05:b5:25:8e:b2:a4:da:42:99:fe:61:41:71:80:
93:ab:2b:e8:58:a4:28:3d:ee:62:47:7f:8b:09:d1:
01:7c:d7:d8:ee:b3:06:f8:94:dc:ca:98:39:1f:1b:
e6:a5:f2:24:98:db:e2:35:c0:03:d7:7e:f2:4f:82:
58:64:35:40:56:37:65:70:2d:25:3b:67:47:33:f2:
f7:23:82:ed:46:4a:0b:8a:8f:96:2e:f1:e4:0f:0c:
6e:d8:58:12:0a:db:bc:8f:ed:2d:29:0a:6b:84:de:
a0:1d:a9:8c:b6:e0:fc:13:42:0f:91:0c:74:d4:12:
6f:7b:a6:9d:a0:93:66:ec:e6:4c:57:c2:45:6e:32:
ca:74:52:29:c6:87:1f:9e:24:6d:af:7e:f4:01:fc:
04:17:83:3a:b8:b2:ed:dc:d6:25:8d:f2:2d:68:19:
b3:8c:c6:76:61:d1:73:2e:3a:63:8f:d6:e6:37:94:
28:d9:09:32:2b:cd:ec:4e:6c:d9:63:f1:c0:26:79:
a6:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:CA:52:D0:F4:03:3B:86:1B:1E:3A:72:85:BB:BB:04:E2:40:3C:6D
X509v3 Authority Key Identifier:
keyid:31:A1:85:D0:EB:0C:A7:81:1C:58:64:25:DE:0E:96:0E:1C:FE:B6:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MaGF0OsMp4EcWGQl3g6WDhz-ths.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/MaGF0OsMp4EcWGQl3g6WDhz-ths.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/MaGF0OsMp4EcWGQl3g6WDhz-ths.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:5a:57:81:c5:7e:3b:7a:17:4b:e5:e8:c4:47:d4:c4:00:1c:
a2:08:02:73:81:2f:ab:42:1d:bf:67:ae:af:03:ea:f1:99:df:
02:b4:16:4a:5e:ec:28:be:88:e5:dc:17:4f:a7:56:65:ac:bc:
9e:a3:f7:d9:a3:85:24:7e:6a:59:f0:5b:ae:7c:50:47:d7:a9:
50:62:1c:8a:93:1c:e5:ca:eb:6b:87:06:ec:b4:84:74:54:30:
76:b4:52:4f:23:26:fb:4d:fe:28:9e:c9:4c:25:d2:b1:2b:ca:
69:79:f7:48:54:f1:21:bf:b0:52:ca:1d:30:09:09:43:63:0a:
3f:f9:09:28:6a:16:14:50:58:d4:b4:63:a2:ff:5f:56:02:2d:
4e:56:6c:db:82:c1:be:97:6d:0e:2e:48:c7:da:ab:ef:01:fc:
a8:7a:67:2f:7d:e0:38:b4:ba:de:0d:cf:7e:33:e1:ff:30:58:
64:ee:8c:42:e2:a9:47:04:d2:a8:31:6b:53:65:ce:72:ec:ac:
9a:8d:14:2e:30:15:d0:4b:4a:3a:6e:84:a3:73:93:7e:46:94:
7c:8c:e2:f8:6a:cb:94:49:16:8a:54:f4:85:b6:89:41:7d:d5:
e9:c7:ea:40:42:45:75:47:dd:87:06:c0:ee:2d:01:9d:33:6e:
f6:d7:e7:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:01:10 2025 by rpki-client