Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/Mca7r0CfX9bXCcTX0kNEopKjyqU.mft
File: Mca7r0CfX9bXCcTX0kNEopKjyqU.mft (raw, json)
Hash identifier: aHFNiCqhPEREmST2Nb15FFIrVaKEqTaxK+iIf4iBkoQ=
Subject key identifier: F0:7C:46:A8:91:04:BA:CA:C1:EE:E0:2F:B9:80:B8:05:D3:BC:6E:41
Authority key identifier: 31:C6:BB:AF:40:9F:5F:D6:D7:09:C4:D7:D2:43:44:A2:92:A3:CA:A5
Certificate issuer: /CN=31c6bbaf409f5fd6d709c4d7d24344a292a3caa5
Certificate serial: 0194BBCE79206B6D3B217CC125969998BF1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mca7r0CfX9bXCcTX0kNEopKjyqU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/Mca7r0CfX9bXCcTX0kNEopKjyqU.mft
Manifest number: 1053
Signing time: Fri 31 Jan 2025 10:00:58 +0000
Manifest this update: Fri 31 Jan 2025 10:00:58 +0000
Manifest next update: Sat 01 Feb 2025 10:00:58 +0000
Files and hashes: 1: Kt18qGRPFhnoeDMRU6Ja36FUtdA.roa (hash: ZdZhwP5GgUBDAZeIM6qZ4JCbpszuez2XwZJ3dyqtyLY=)
2: Mca7r0CfX9bXCcTX0kNEopKjyqU.crl (hash: DyagnmZYcNYFuawgw7bBQahZ4GD0vEbBLgfC20apFd8=)
3: yRmsjuq_F6DD6X9AriATfFnXQ5Y.roa (hash: v4PNoMO1RSILauLPhTzIlbmj9RAxx7AGmat1z5c9V7E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:79:20:6b:6d:3b:21:7c:c1:25:96:99:98:bf:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31c6bbaf409f5fd6d709c4d7d24344a292a3caa5
Validity
Not Before: Jan 31 10:00:58 2025 GMT
Not After : Feb 1 10:00:58 2025 GMT
Subject: CN=f07c46a89104bacac1eee02fb980b805d3bc6e41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:94:35:47:8f:39:59:53:1e:e7:ed:84:a4:37:
7b:fd:f4:b2:ac:37:50:bd:96:72:3a:c4:8f:86:07:
10:dd:a5:3d:e4:7a:ec:63:2b:a0:3d:44:2c:37:67:
c6:45:77:96:45:90:cf:e8:f8:08:3a:c1:90:e0:e5:
6a:4e:62:2a:46:1e:9b:90:38:06:73:e5:9b:06:2c:
df:c1:c9:85:33:ff:d2:a2:90:ac:0d:7b:0e:e4:5c:
27:35:5f:1d:2d:69:98:a0:3b:d4:23:93:ab:7b:87:
cd:70:36:f1:f2:fc:57:3f:96:8d:b0:78:ed:e6:e3:
9e:bb:92:c9:09:2f:e0:2a:d4:2e:bb:96:f2:ef:44:
03:38:bc:f2:f4:20:fe:63:06:4c:de:04:04:d2:5c:
51:af:84:0c:86:a3:9e:37:f6:fd:1f:79:57:36:97:
23:b1:20:fb:48:d5:7e:9f:65:2c:85:3e:40:01:f1:
91:cb:05:20:6f:7e:c4:d9:f9:8e:4c:d9:a7:e8:77:
fd:2e:a8:f1:d3:7b:2b:58:3d:75:21:e7:bd:99:ed:
ed:90:9c:64:78:2c:45:23:c4:28:a9:8a:dd:6b:0f:
b2:0c:9a:e7:83:7f:8a:91:08:36:98:3b:6c:88:9c:
61:e5:7b:0b:8f:18:46:1f:7d:85:95:59:f8:bc:56:
f3:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:7C:46:A8:91:04:BA:CA:C1:EE:E0:2F:B9:80:B8:05:D3:BC:6E:41
X509v3 Authority Key Identifier:
keyid:31:C6:BB:AF:40:9F:5F:D6:D7:09:C4:D7:D2:43:44:A2:92:A3:CA:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mca7r0CfX9bXCcTX0kNEopKjyqU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/Mca7r0CfX9bXCcTX0kNEopKjyqU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/Mca7r0CfX9bXCcTX0kNEopKjyqU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:6c:b9:8b:e8:7d:14:37:11:b1:42:86:18:9f:54:61:8f:37:
75:99:f9:f7:3a:a9:0a:b6:ce:76:5e:51:e2:8c:ac:55:37:fd:
fa:4a:c9:76:d1:b2:bd:f1:f8:24:68:90:b6:0a:b3:1e:da:0e:
3a:1c:4f:45:88:60:0e:36:65:fc:85:6a:0d:dc:c8:26:3d:40:
77:19:88:63:36:43:27:c8:56:0d:53:4f:6b:d3:33:04:60:e1:
cd:3d:8c:e3:63:ee:d9:c2:df:f4:28:19:c2:51:40:44:28:99:
29:f6:75:5d:47:96:de:d9:56:7b:4f:46:dc:7e:0f:91:71:ad:
89:71:be:a3:ce:dc:35:09:e2:bb:be:60:92:b4:a6:6a:62:b7:
4d:cb:2e:bf:6c:95:00:68:2e:d4:d3:35:b7:cc:18:61:f1:02:
64:0f:d0:14:1b:cd:10:1c:9b:5b:98:3a:ef:5d:72:f0:93:94:
f0:63:9b:33:33:4e:7d:66:79:8c:52:87:53:f8:62:5c:64:98:
88:0b:b4:a7:0c:96:f4:d8:8d:a9:4e:7c:85:27:70:39:0f:d5:
47:09:ff:09:dc:a3:f6:a2:bd:c7:4d:c6:da:0c:9c:96:2d:5d:
f0:df:b0:15:62:ab:fd:77:f0:3c:e3:c8:0c:d7:5b:e4:03:34:
2f:63:a3:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:26 2025 by rpki-client