Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/df79c1-b802-4419-8ec0-cf447009e349/1/mnRIG4fez2ODfiaXRiyeRHANS90.mft
File: mnRIG4fez2ODfiaXRiyeRHANS90.mft (raw, json)
Hash identifier: 0/SqmiZyeFYcutioq6meqXPGhWDMZt7tx1+TT/1UOs4=
Subject key identifier: 15:64:5F:17:4D:70:33:9E:CC:03:00:12:A1:C5:38:46:4B:34:AC:4E
Authority key identifier: 9A:74:48:1B:87:DE:CF:63:83:7E:26:97:46:2C:9E:44:70:0D:4B:DD
Certificate issuer: /CN=9a74481b87decf63837e2697462c9e44700d4bdd
Certificate serial: 0194BBCE34649E74E8730632B587FA503761
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mnRIG4fez2ODfiaXRiyeRHANS90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/df79c1-b802-4419-8ec0-cf447009e349/1/mnRIG4fez2ODfiaXRiyeRHANS90.mft
Manifest number: 03E2
Signing time: Fri 31 Jan 2025 10:00:40 +0000
Manifest this update: Fri 31 Jan 2025 10:00:40 +0000
Manifest next update: Sat 01 Feb 2025 10:00:40 +0000
Files and hashes: 1: CK4siPWBYfHEvMudVxcsDQPxAR4.roa (hash: YhDnpIVqIiFTzSv32iL9GB9Nu0H7+HMcl1R+Eah/CyM=)
2: mnRIG4fez2ODfiaXRiyeRHANS90.crl (hash: mIrCuXT7444SI3j6rPeZIlEg6uj22/GN6gFb3cQQ67U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:34:64:9e:74:e8:73:06:32:b5:87:fa:50:37:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a74481b87decf63837e2697462c9e44700d4bdd
Validity
Not Before: Jan 31 10:00:40 2025 GMT
Not After : Feb 1 10:00:40 2025 GMT
Subject: CN=15645f174d70339ecc030012a1c538464b34ac4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:f3:d8:a7:55:fb:77:b2:63:6a:8f:fc:52:29:
9a:68:2e:1d:8c:05:03:9b:82:8f:f2:e1:de:0f:51:
79:ab:bd:92:51:66:fc:60:97:0c:0d:08:80:98:a1:
a7:c7:8c:92:bd:ce:93:33:c7:ab:e7:86:35:03:9a:
b3:bb:b5:ec:04:d5:54:de:e5:b1:f2:f8:38:98:2a:
c8:d2:4b:cb:57:6f:bb:fa:ec:28:a9:b0:6e:a1:cc:
b1:ee:bb:17:e8:28:63:fd:02:33:86:79:ca:41:d6:
c4:24:db:64:08:d3:96:57:86:45:1f:1c:d2:1e:da:
9a:16:05:f7:9f:65:bc:fe:2f:ce:b0:3c:12:47:27:
e7:2e:24:b3:00:3e:ab:94:dc:eb:1a:d6:6f:2b:3d:
5b:27:e5:bd:e2:a2:07:32:5b:6d:e0:75:12:76:74:
01:f7:c2:0d:7d:cf:2d:c6:d1:5a:70:f9:c2:cc:85:
cb:81:13:89:45:1b:87:74:16:ca:be:99:ff:93:ee:
f2:d6:86:be:72:7c:8d:c4:c7:e8:c9:c0:50:83:24:
ab:6e:fe:28:69:c0:52:7e:66:69:4d:21:ea:66:0f:
c9:43:d1:0c:ea:40:70:06:d3:cb:cd:37:93:a2:e6:
64:be:8b:c7:2b:91:04:f6:78:96:30:bd:cd:e6:c8:
c4:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:64:5F:17:4D:70:33:9E:CC:03:00:12:A1:C5:38:46:4B:34:AC:4E
X509v3 Authority Key Identifier:
keyid:9A:74:48:1B:87:DE:CF:63:83:7E:26:97:46:2C:9E:44:70:0D:4B:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mnRIG4fez2ODfiaXRiyeRHANS90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/df79c1-b802-4419-8ec0-cf447009e349/1/mnRIG4fez2ODfiaXRiyeRHANS90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/df79c1-b802-4419-8ec0-cf447009e349/1/mnRIG4fez2ODfiaXRiyeRHANS90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:e5:4b:22:c7:af:8d:81:b0:df:35:61:11:a6:06:33:60:66:
8a:72:0c:98:56:37:87:89:bf:3f:bc:1b:58:d1:05:61:26:e2:
55:b5:63:2a:52:cf:49:15:9f:64:02:27:a4:96:76:68:95:4b:
ec:27:52:2b:15:13:55:e4:d7:89:97:52:95:3b:85:62:7d:33:
8b:d1:f4:58:25:75:82:14:8f:35:a6:d6:18:7a:fe:3c:02:41:
f4:b8:50:23:38:c8:d9:05:48:45:32:4f:c2:63:22:b5:9d:4b:
a3:90:74:b8:9c:37:92:50:b1:4d:b3:78:b9:d9:9d:4f:40:4a:
19:05:a4:95:cd:87:d6:22:75:27:ef:b9:2a:5a:05:23:09:65:
d3:8f:e9:a6:f5:1b:82:31:d8:4c:49:90:80:31:ad:c2:4c:57:
e9:25:13:87:3e:fc:8d:32:5a:c9:7f:e9:5d:91:a0:8b:09:66:
6e:e8:f2:18:e0:ee:07:73:42:18:83:be:8e:c7:d4:4b:01:ed:
0a:72:93:b4:a6:b4:11:49:2c:fb:1e:60:18:ee:f2:cc:d8:8d:
76:8d:c7:af:16:b5:06:2c:37:5e:68:e4:ba:51:22:6d:af:9d:
13:80:c1:39:88:0b:67:33:da:fb:69:4a:c1:c2:9a:45:4f:b1:
67:c3:7f:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:48 2025 by rpki-client