Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/149cf6-611d-4e03-a660-dce1127ab223/1/cMvrOI9ZAsFhYLvtCWLLYisruDI.mft
File: cMvrOI9ZAsFhYLvtCWLLYisruDI.mft (raw, json)
Hash identifier: Lq5QvuqlANtGa2Ygimd+xSx+m2FaW6bYRC8t7Mus3i4=
Subject key identifier: D7:54:20:C9:FE:50:D3:30:10:FB:F8:B6:11:21:96:7E:89:8C:9C:FC
Authority key identifier: 70:CB:EB:38:8F:59:02:C1:61:60:BB:ED:09:62:CB:62:2B:2B:B8:32
Certificate issuer: /CN=70cbeb388f5902c16160bbed0962cb622b2bb832
Certificate serial: 0194BCAA287CDDD4E0869B65F3ADE45A231D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMvrOI9ZAsFhYLvtCWLLYisruDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/149cf6-611d-4e03-a660-dce1127ab223/1/cMvrOI9ZAsFhYLvtCWLLYisruDI.mft
Manifest number: 0A3F
Signing time: Fri 31 Jan 2025 14:00:55 +0000
Manifest this update: Fri 31 Jan 2025 14:00:55 +0000
Manifest next update: Sat 01 Feb 2025 14:00:55 +0000
Files and hashes: 1: Jx2nTRr5pEsEFWo_5nDYJEdIJkI.roa (hash: 5SCIBFwRcqmCVA4jK7ObW5hmOVN8QwAIditbrQHD6YU=)
2: cMvrOI9ZAsFhYLvtCWLLYisruDI.crl (hash: Vg3pXX3hOoGeNpQY6qOUNC3fEYe9d3oViWdri8z1NFM=)
3: fVZny3FRspGg7D4Ss3AUbX0JyBI.roa (hash: SocyXocZHSo8f5zsAWiffJrBZyiPOdy55HQXZcolvh4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:28:7c:dd:d4:e0:86:9b:65:f3:ad:e4:5a:23:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cbeb388f5902c16160bbed0962cb622b2bb832
Validity
Not Before: Jan 31 14:00:55 2025 GMT
Not After : Feb 1 14:00:55 2025 GMT
Subject: CN=d75420c9fe50d33010fbf8b61121967e898c9cfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:3e:8d:d1:01:6e:3b:c4:4e:4e:22:2d:00:b8:
52:42:8e:a6:42:34:63:aa:55:94:db:b3:d1:6b:24:
46:ca:0b:d4:c4:aa:37:af:07:c1:b0:0d:9b:61:23:
bc:61:ff:a5:d7:61:28:0a:7e:63:fc:94:e4:5b:54:
61:61:8a:b6:20:9e:c6:58:33:83:5c:7c:4d:44:88:
5f:24:56:2a:12:4d:3e:32:bc:5f:44:a8:55:47:eb:
a6:ac:f4:d9:d1:6b:48:23:18:19:03:90:81:91:c3:
09:c2:7b:9e:df:a9:1e:a9:2c:ab:8f:e8:1e:d6:18:
94:c2:cd:b8:55:e7:0d:8e:79:b4:d5:db:93:6c:bf:
c2:ea:30:a2:5e:64:85:48:0f:3c:14:10:54:7b:99:
8a:f4:76:b9:ad:11:af:44:9c:13:2f:15:9b:8b:4f:
98:3b:eb:9d:3c:5d:67:fb:45:79:24:e4:7b:42:a8:
25:0e:c6:bd:29:72:7c:26:cb:f8:a8:23:fc:c6:a7:
a6:7f:1c:9a:ae:81:df:fe:e2:a9:f0:bc:2b:99:f3:
77:3d:54:3a:0a:d1:cd:85:5a:eb:2e:ea:c0:92:4f:
49:51:45:0c:a7:a5:e1:01:19:59:e2:10:13:04:98:
71:b1:47:70:44:36:46:36:30:94:0a:6d:d8:dd:3f:
99:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:54:20:C9:FE:50:D3:30:10:FB:F8:B6:11:21:96:7E:89:8C:9C:FC
X509v3 Authority Key Identifier:
keyid:70:CB:EB:38:8F:59:02:C1:61:60:BB:ED:09:62:CB:62:2B:2B:B8:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvrOI9ZAsFhYLvtCWLLYisruDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/149cf6-611d-4e03-a660-dce1127ab223/1/cMvrOI9ZAsFhYLvtCWLLYisruDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/149cf6-611d-4e03-a660-dce1127ab223/1/cMvrOI9ZAsFhYLvtCWLLYisruDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:75:36:84:40:9c:e1:cc:fb:b9:94:d4:66:8b:2a:3c:86:d5:
26:4a:1b:25:d4:47:38:25:8d:00:37:95:47:e1:a5:56:c5:b7:
4a:0a:8f:df:90:af:d4:34:03:8f:f8:a2:14:a9:a3:5c:b2:86:
ab:e1:73:be:dd:29:e4:80:7d:7e:ba:45:4c:ab:9a:97:cb:11:
a8:4c:c2:5e:f2:67:1d:e4:1e:88:a3:62:5d:71:48:92:d7:d3:
d3:67:3f:3b:43:7d:13:81:10:4e:8b:a3:f5:b1:7f:0d:7d:3c:
19:bf:55:7a:69:93:30:8c:98:40:13:3a:f1:dd:3b:c9:cd:79:
f4:73:c2:b5:65:44:b6:ea:c6:0b:f3:da:25:3f:4b:30:1e:7a:
99:3d:b7:5b:07:cd:7a:d8:2f:7e:0c:37:31:4b:5e:f2:ba:66:
a4:dd:51:37:5f:b5:af:83:0a:b7:eb:a2:f6:3e:6b:6b:f0:ff:
0c:1d:0e:4f:a6:bb:fb:49:f7:7a:3c:4e:08:60:43:ae:7d:34:
5d:81:50:77:ff:f4:a9:b9:83:22:db:f8:25:47:ab:0d:be:b7:
0c:1a:d0:59:bd:8b:3a:a9:61:14:07:ad:12:c0:0e:a5:6f:9f:
4a:d0:40:b5:50:09:37:08:e1:18:cc:8a:3d:8c:4c:2c:38:c7:
a3:ad:72:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:17:36 2025 by rpki-client