Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/ecbe01-18ab-4fbd-9dc3-bcd52da15644/1/MbXwrK42UqU8caB0ojR6tvF_0_g.mft
File: MbXwrK42UqU8caB0ojR6tvF_0_g.mft (raw, json)
Hash identifier: O5gLekog/omoX+oa4HXPAXS1ibuXEXka4FGTPvovKps=
Subject key identifier: 42:6A:83:D4:75:D9:C1:E4:57:9B:80:F2:A0:0C:42:3A:15:A2:70:9C
Authority key identifier: 31:B5:F0:AC:AE:36:52:A5:3C:71:A0:74:A2:34:7A:B6:F1:7F:D3:F8
Certificate issuer: /CN=31b5f0acae3652a53c71a074a2347ab6f17fd3f8
Certificate serial: 0194BCA9C965ED2E3E1F89DE532BF7F28028
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MbXwrK42UqU8caB0ojR6tvF_0_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/ecbe01-18ab-4fbd-9dc3-bcd52da15644/1/MbXwrK42UqU8caB0ojR6tvF_0_g.mft
Manifest number: 13B6
Signing time: Fri 31 Jan 2025 14:00:31 +0000
Manifest this update: Fri 31 Jan 2025 14:00:31 +0000
Manifest next update: Sat 01 Feb 2025 14:00:31 +0000
Files and hashes: 1: KlCag1k38E35giK2RwCL86wfRww.roa (hash: 3A8pcHf0/9mVDJ/I9xf+96E0LjYi6EEs2LRUfPZpiNc=)
2: MbXwrK42UqU8caB0ojR6tvF_0_g.crl (hash: QogPz3Z5l7BYdlYd6j8IF1OBqpRVOpNkR2zY2hpsahk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:c9:65:ed:2e:3e:1f:89:de:53:2b:f7:f2:80:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31b5f0acae3652a53c71a074a2347ab6f17fd3f8
Validity
Not Before: Jan 31 14:00:31 2025 GMT
Not After : Feb 1 14:00:31 2025 GMT
Subject: CN=426a83d475d9c1e4579b80f2a00c423a15a2709c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:38:58:5a:05:12:02:86:4e:9c:64:63:15:c5:
01:f6:0e:46:07:a9:38:b1:e4:ba:41:c8:7e:b3:6a:
46:73:3e:c3:4e:2d:07:00:da:b6:8d:0a:60:25:9f:
00:c5:38:46:cd:60:5c:a6:ec:97:59:d0:2b:01:2e:
44:66:57:cb:c3:5b:cb:4e:8b:39:b5:99:4d:a3:e5:
35:d9:31:69:f9:7e:bc:52:0e:16:27:0b:5f:9d:fe:
10:bf:ae:ec:74:6c:5b:a0:79:9d:e7:5c:64:42:de:
49:49:4e:bb:d0:90:2d:2f:3a:e9:3e:44:72:e9:b3:
32:65:bb:24:00:da:df:76:a1:47:e5:a6:49:27:b4:
0f:6b:4f:30:f1:07:e8:46:64:3c:72:87:c9:8e:e1:
da:b1:dc:82:5d:b2:d7:96:9d:f5:9b:32:3b:18:82:
2d:d0:08:cc:92:e1:e1:86:83:f1:30:55:12:be:bf:
99:02:09:a8:c2:4b:d8:f5:3d:98:a0:66:f7:d5:85:
10:73:e3:45:65:f6:94:93:ba:60:e7:10:3d:d9:52:
03:00:18:92:21:6a:12:fc:90:2d:b6:8c:33:d6:7a:
2a:c3:ca:2b:b7:22:21:4b:12:52:6a:b0:92:62:1b:
53:f5:db:57:67:47:1f:e9:24:f1:1a:3a:01:d7:61:
2e:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:6A:83:D4:75:D9:C1:E4:57:9B:80:F2:A0:0C:42:3A:15:A2:70:9C
X509v3 Authority Key Identifier:
keyid:31:B5:F0:AC:AE:36:52:A5:3C:71:A0:74:A2:34:7A:B6:F1:7F:D3:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MbXwrK42UqU8caB0ojR6tvF_0_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/ecbe01-18ab-4fbd-9dc3-bcd52da15644/1/MbXwrK42UqU8caB0ojR6tvF_0_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/ecbe01-18ab-4fbd-9dc3-bcd52da15644/1/MbXwrK42UqU8caB0ojR6tvF_0_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:19:cb:11:37:89:bb:ff:15:e6:0d:c2:35:cd:32:5f:3c:73:
cd:c2:88:c8:0c:63:8c:a0:3c:68:e6:be:5c:ba:fa:3f:0a:3c:
8c:4c:e7:c0:7f:8c:70:4e:6c:e9:2f:18:f3:db:f9:20:df:7f:
d0:8f:d1:e7:53:54:fa:89:de:6c:1f:56:20:49:fe:99:fa:b8:
4a:92:f9:b9:ad:10:96:eb:4b:5e:9d:03:77:27:62:29:55:0b:
d6:70:36:62:bc:28:b1:93:5b:2c:bb:be:6a:74:34:a9:e8:0d:
5f:4d:5a:01:c9:e6:28:23:a6:f1:5f:ba:5c:c9:ec:4b:71:82:
40:b4:d3:a5:d3:54:2b:8c:3a:50:0f:3c:9a:0d:4f:79:8f:4f:
96:83:cd:f5:de:78:dc:fb:52:25:65:b0:1c:5b:d3:48:65:21:
8b:13:fd:a2:e2:e0:c5:08:c5:cd:5e:d1:31:d3:96:b5:52:cb:
e4:b9:4b:09:bb:ba:1f:02:8b:ed:67:92:8f:7d:28:62:46:2b:
fe:3c:fc:d1:10:68:31:31:43:e0:6b:8d:31:c3:cc:dd:c2:2f:
75:46:58:99:c2:03:d5:6b:36:d8:26:6e:59:11:a5:c2:06:9b:
55:92:3e:cf:c9:a2:a8:ca:36:2b:d2:75:cb:9c:76:0e:04:bd:
80:17:7f:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:48:46 2025 by rpki-client