Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/9de5da-2db2-4e06-8563-a3d9d614f197/1/MnzmSs4CzNMwzu-Y0F3w-yAxepE.mft
File: MnzmSs4CzNMwzu-Y0F3w-yAxepE.mft (raw, json)
Hash identifier: 2l+saxWce3smD2PjJkfqDMqF/EMqRRkpYaThkFSkE9c=
Subject key identifier: F5:BA:DD:D1:40:29:97:CA:45:0D:B8:2B:9A:49:29:6E:BA:94:84:B5
Authority key identifier: 32:7C:E6:4A:CE:02:CC:D3:30:CE:EF:98:D0:5D:F0:FB:20:31:7A:91
Certificate issuer: /CN=327ce64ace02ccd330ceef98d05df0fb20317a91
Certificate serial: 0194BD4E7262A0BA812842990F1A3654E094
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MnzmSs4CzNMwzu-Y0F3w-yAxepE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/9de5da-2db2-4e06-8563-a3d9d614f197/1/MnzmSs4CzNMwzu-Y0F3w-yAxepE.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 17:00:22 +0000
Manifest this update: Fri 31 Jan 2025 17:00:22 +0000
Manifest next update: Sat 01 Feb 2025 17:00:22 +0000
Files and hashes: 1: MnzmSs4CzNMwzu-Y0F3w-yAxepE.crl (hash: jnSk/fjfEB4WjJYc6XzKSKoDbAvgJtqhaZoZaaqskuA=)
2: wPSm9MaczVOfJa8MmydVyNm05v8.roa (hash: EUTCJOzuqY4YxOtOde7m5gFxrTBwquCzBL62eKVTyyI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:72:62:a0:ba:81:28:42:99:0f:1a:36:54:e0:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=327ce64ace02ccd330ceef98d05df0fb20317a91
Validity
Not Before: Jan 31 17:00:22 2025 GMT
Not After : Feb 1 17:00:22 2025 GMT
Subject: CN=f5baddd1402997ca450db82b9a49296eba9484b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:61:1a:cf:b8:d3:2b:6f:6c:bc:67:7a:62:4f:
69:6e:24:c8:24:2d:17:58:09:f9:6b:b2:61:56:39:
df:c9:c1:56:79:5a:c3:70:9f:2b:88:63:11:51:0d:
b6:9a:f8:f8:8c:80:27:9b:91:e7:c0:39:85:a4:a0:
8d:0d:cb:16:7b:7d:e2:2c:0d:af:fd:6c:79:e2:ba:
df:9a:cc:82:9a:8b:aa:13:12:ec:e8:a0:6a:96:3f:
b9:87:37:3d:75:1d:89:a6:ac:f8:c5:08:e6:b8:3b:
55:8f:af:b9:89:20:67:66:35:56:66:6d:17:6d:f0:
e9:7d:b3:f9:32:d8:62:94:0d:07:5c:8b:64:eb:cc:
d0:ff:1e:cb:c7:cf:70:a1:c9:d9:b3:8d:e4:b1:87:
d8:24:73:8d:b5:c2:95:46:fe:47:51:35:7a:4a:b0:
95:16:08:3f:10:7c:a4:7e:10:73:3b:6c:93:24:62:
1c:a7:c2:0e:c2:96:7c:66:c0:cc:74:22:5a:b2:c4:
ad:d7:92:07:fa:b2:ca:d9:ba:64:8e:88:78:56:a0:
d3:a7:06:de:d0:a2:8e:b1:2b:6d:f4:a8:68:f8:7b:
fd:13:b8:a6:69:12:6c:e6:06:96:c2:95:4a:e6:40:
2e:ce:4e:3b:a6:8d:3b:1d:4f:d3:19:40:0d:75:b1:
ac:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:BA:DD:D1:40:29:97:CA:45:0D:B8:2B:9A:49:29:6E:BA:94:84:B5
X509v3 Authority Key Identifier:
keyid:32:7C:E6:4A:CE:02:CC:D3:30:CE:EF:98:D0:5D:F0:FB:20:31:7A:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MnzmSs4CzNMwzu-Y0F3w-yAxepE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/9de5da-2db2-4e06-8563-a3d9d614f197/1/MnzmSs4CzNMwzu-Y0F3w-yAxepE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/9de5da-2db2-4e06-8563-a3d9d614f197/1/MnzmSs4CzNMwzu-Y0F3w-yAxepE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:f3:14:d9:94:21:73:c0:25:c7:f7:d8:13:dc:45:3a:1c:95:
f0:63:23:14:ca:32:c9:be:1d:ba:7a:9f:7d:57:94:8f:48:ca:
e1:ec:67:7b:bd:09:59:8c:63:9e:4a:01:4c:76:8e:c2:8c:c4:
68:87:84:66:e6:16:94:68:f4:98:e8:0c:88:cd:85:37:4e:a2:
52:b7:d8:61:70:a0:21:a7:7b:cf:47:a3:54:b7:fd:6b:4e:d9:
e5:db:6a:2b:4f:94:0a:47:68:2f:d4:0b:4e:45:41:14:ef:52:
8f:53:37:29:d0:4a:26:fe:68:48:85:c1:99:73:99:15:a4:b5:
ca:74:ee:fe:b0:24:0c:74:6f:d0:d2:f0:05:43:95:47:ce:12:
d6:e4:25:87:e4:32:bc:65:0c:f4:97:b1:ee:d2:fb:bc:2e:5d:
41:4e:d2:d8:01:24:c0:46:07:7f:d6:66:17:fb:3b:78:7e:1b:
98:f6:5f:c9:d7:4f:56:d1:25:9e:52:9b:6b:d1:c3:0b:7c:5f:
14:97:fd:30:88:35:05:d1:52:e9:d9:a4:f4:dd:83:28:4a:74:
79:96:cf:26:44:2a:87:77:f0:ed:37:dc:c3:30:77:ae:c3:8b:
d1:41:b2:ef:19:aa:05:12:e2:08:7d:4e:aa:73:f2:34:a5:3e:
99:5e:4f:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:24:48 2025 by rpki-client