
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/0f4d1a-e4b6-49c6-a50d-d1e30a5cac88/1/Mh__9QM6eQGj6fJ19txujqD5O4o.mft
File: Mh__9QM6eQGj6fJ19txujqD5O4o.mft (raw, json)
Hash identifier: UozMZiUESIWubRkga+hdPjoVQXJa0JxwkDsqQBdUI/4=
Subject key identifier: BC:8F:13:83:7C:58:5E:BB:A5:BE:13:02:8D:1A:2F:CD:61:56:6F:58
Authority key identifier: 32:1F:FF:F5:03:3A:79:01:A3:E9:F2:75:F6:DC:6E:8E:A0:F9:3B:8A
Certificate issuer: /CN=321ffff5033a7901a3e9f275f6dc6e8ea0f93b8a
Certificate serial: 0194BD4E39021F27AEF89FE09B47E0A1EA27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mh__9QM6eQGj6fJ19txujqD5O4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/0f4d1a-e4b6-49c6-a50d-d1e30a5cac88/1/Mh__9QM6eQGj6fJ19txujqD5O4o.mft
Manifest number: 12BF
Signing time: Fri 31 Jan 2025 17:00:07 +0000
Manifest this update: Fri 31 Jan 2025 17:00:07 +0000
Manifest next update: Sat 01 Feb 2025 17:00:07 +0000
Files and hashes: 1: FcJIJ_7sGn_eFfivWYZxJ7ia4HA.roa (hash: Z8CjY0pPayO+MrbN0Iu5JVGrCs1wHK4dfVgqvLTMoog=)
2: Mh__9QM6eQGj6fJ19txujqD5O4o.crl (hash: ClPBXB8ncI3A3lD5xWjPYCbUf8upmfWandabc519QvQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:39:02:1f:27:ae:f8:9f:e0:9b:47:e0:a1:ea:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=321ffff5033a7901a3e9f275f6dc6e8ea0f93b8a
Validity
Not Before: Jan 31 17:00:07 2025 GMT
Not After : Feb 1 17:00:07 2025 GMT
Subject: CN=bc8f13837c585ebba5be13028d1a2fcd61566f58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:7d:aa:dd:71:5a:98:a7:cc:17:a4:a0:91:c1:
2b:c7:5d:a5:0e:7b:c3:34:d7:c4:b7:4f:c7:52:f5:
cd:79:be:ec:1e:c0:8c:9c:80:be:53:2f:7d:dc:88:
ba:dc:ff:e5:fc:05:75:ae:8d:fe:88:65:1c:f4:0f:
3e:3f:47:0e:01:91:0b:65:74:0a:58:8e:6e:79:8f:
0c:dc:a7:26:97:12:70:f6:33:45:0a:2f:9f:d0:32:
99:56:f8:01:be:e9:55:43:7d:ac:ad:c5:21:2a:c8:
a5:1a:69:73:9c:a1:98:5a:56:38:68:90:30:0f:fd:
02:03:5c:da:a9:f7:2b:58:d7:bf:25:5d:62:88:66:
6a:85:19:54:ca:e3:3b:3b:15:ff:91:dc:47:e3:d5:
42:4b:6f:cb:86:42:96:63:4e:07:75:17:d4:31:51:
36:9a:06:4d:cd:a9:ed:22:85:3c:f7:9c:9c:1e:00:
bc:1d:a5:c7:03:d0:86:31:16:c3:7c:cd:11:b5:f2:
54:e6:74:a2:39:94:d9:92:48:db:77:07:66:3c:77:
4c:08:54:c8:19:45:40:78:2b:14:c9:c4:48:00:67:
14:3e:56:00:4a:d4:36:82:35:ee:f5:09:7a:24:51:
10:c5:ab:64:48:21:52:19:43:8e:da:7c:49:f4:42:
f3:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:8F:13:83:7C:58:5E:BB:A5:BE:13:02:8D:1A:2F:CD:61:56:6F:58
X509v3 Authority Key Identifier:
keyid:32:1F:FF:F5:03:3A:79:01:A3:E9:F2:75:F6:DC:6E:8E:A0:F9:3B:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mh__9QM6eQGj6fJ19txujqD5O4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/0f4d1a-e4b6-49c6-a50d-d1e30a5cac88/1/Mh__9QM6eQGj6fJ19txujqD5O4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/0f4d1a-e4b6-49c6-a50d-d1e30a5cac88/1/Mh__9QM6eQGj6fJ19txujqD5O4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:0d:ce:e6:b4:fb:60:c1:89:d5:cc:b9:c6:69:a4:83:44:7e:
a5:82:84:c5:e6:b1:2d:f1:6b:98:16:b4:ed:d1:c4:9a:a5:64:
46:13:ed:ed:bf:39:38:b9:09:bb:90:4f:80:f2:d1:96:98:24:
e4:b6:6c:e2:49:56:67:f2:03:47:72:62:29:7d:23:1d:86:b9:
c4:28:ec:02:8e:fe:e5:2b:fc:75:04:b0:57:9b:24:b5:c2:f0:
1d:50:a7:99:36:30:50:be:d7:2a:35:94:04:0a:78:62:2d:06:
72:35:45:69:59:d4:69:0c:a1:bf:c8:ed:bd:68:9e:5a:dd:d1:
98:4f:62:91:d9:38:f8:fb:e3:70:24:d1:08:e2:d5:b6:bd:2d:
58:1c:68:49:0c:01:e3:61:4b:28:d7:90:f0:ab:cf:08:98:38:
9f:46:8a:f4:45:4c:0a:61:97:c1:aa:ab:04:12:05:4b:5d:fe:
3c:9b:e2:17:59:88:f8:4c:3b:81:33:b4:d8:85:4c:94:92:63:
83:0f:a2:b1:7a:1f:2a:ca:54:30:92:df:94:2d:c5:12:3d:88:
07:66:1a:9b:53:c3:35:2f:b8:8e:99:a0:77:74:77:bf:a4:b9:
18:b4:71:8d:07:89:4c:5c:97:e2:77:ff:e6:d7:5e:b4:a0:a8:
8c:eb:2d:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:31:45 2025 by rpki-client