Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/a28ca6-af2f-40cd-b549-7eead1461a54/1/mbj9KSyKG4lrh1I0Sj2pI3jyrlo.mft
File: mbj9KSyKG4lrh1I0Sj2pI3jyrlo.mft (raw, json)
Hash identifier: +NgH2ccESrt7uZIcByswHK1TiSUu6WeswjjjlY9MYVs=
Subject key identifier: A4:62:9C:89:C8:33:67:E4:2A:EA:C4:A0:60:69:A2:50:4D:70:96:BF
Authority key identifier: 99:B8:FD:29:2C:8A:1B:89:6B:87:52:34:4A:3D:A9:23:78:F2:AE:5A
Certificate issuer: /CN=99b8fd292c8a1b896b8752344a3da92378f2ae5a
Certificate serial: 0194BBCEE5B259ACCB53326B3880B685BCFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mbj9KSyKG4lrh1I0Sj2pI3jyrlo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/a28ca6-af2f-40cd-b549-7eead1461a54/1/mbj9KSyKG4lrh1I0Sj2pI3jyrlo.mft
Manifest number: 031E
Signing time: Fri 31 Jan 2025 10:01:26 +0000
Manifest this update: Fri 31 Jan 2025 10:01:26 +0000
Manifest next update: Sat 01 Feb 2025 10:01:26 +0000
Files and hashes: 1: VANQMbS9wJfHpjxNeVPpV7NpFIQ.roa (hash: UNFy8NT1hW32lKijy2cCpAEH6HPMdcOUxJumaoALuL8=)
2: mbj9KSyKG4lrh1I0Sj2pI3jyrlo.crl (hash: NgXEPOP7IBaCNk1tKKo9WRi2qXmSG3Y8m9rtk6b0dHU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:e5:b2:59:ac:cb:53:32:6b:38:80:b6:85:bc:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99b8fd292c8a1b896b8752344a3da92378f2ae5a
Validity
Not Before: Jan 31 10:01:26 2025 GMT
Not After : Feb 1 10:01:26 2025 GMT
Subject: CN=a4629c89c83367e42aeac4a06069a2504d7096bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:75:97:28:a2:b3:be:3e:96:49:40:a7:5f:c6:
05:d4:32:09:4c:7a:64:9a:7b:04:60:5e:5b:61:7c:
68:cb:ef:36:e4:71:a6:c9:c6:97:30:6c:e9:7a:49:
b7:fa:fc:c6:fa:94:3c:cb:4a:98:1c:9f:4d:65:90:
56:2a:e4:89:e7:b7:b6:73:29:a2:0c:3f:d8:da:9c:
5f:74:34:83:29:77:e0:77:ef:2f:b0:03:92:43:51:
58:9d:fa:85:8f:5e:c4:56:2b:1f:0f:9c:e1:e8:8e:
66:92:62:7d:76:c5:13:17:fa:39:ba:8f:34:cc:c0:
26:15:14:db:cc:65:f3:6c:e0:ee:01:e2:61:e4:2c:
e2:e6:5d:74:06:8b:0c:a5:21:60:c9:3f:68:c4:ce:
a1:94:f9:fe:14:76:7e:1c:45:3f:49:ca:b9:e7:7b:
da:ce:0a:c7:c3:66:02:18:50:d2:a4:29:f0:e8:f3:
dc:71:37:0d:73:df:24:9d:61:de:a8:29:b3:c2:97:
01:95:62:ad:e3:f3:cc:51:2b:77:55:5e:45:58:1b:
c8:16:e1:1c:3b:a7:21:d0:80:9d:ca:53:29:c1:92:
c2:2b:f7:28:b4:a4:40:8f:d5:46:be:21:05:ee:26:
d8:fb:28:f4:5a:d4:7a:75:d1:bb:a5:cb:89:80:50:
fb:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:62:9C:89:C8:33:67:E4:2A:EA:C4:A0:60:69:A2:50:4D:70:96:BF
X509v3 Authority Key Identifier:
keyid:99:B8:FD:29:2C:8A:1B:89:6B:87:52:34:4A:3D:A9:23:78:F2:AE:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mbj9KSyKG4lrh1I0Sj2pI3jyrlo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a28ca6-af2f-40cd-b549-7eead1461a54/1/mbj9KSyKG4lrh1I0Sj2pI3jyrlo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a28ca6-af2f-40cd-b549-7eead1461a54/1/mbj9KSyKG4lrh1I0Sj2pI3jyrlo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:5c:46:ee:bf:ba:e0:cd:5d:80:20:7f:2a:68:c9:2a:f7:e5:
4f:25:d1:64:0a:6b:01:78:ef:ce:26:a1:0e:c8:da:13:72:ed:
22:d3:fd:af:f5:d5:42:ad:ce:f7:10:88:4a:2a:8e:45:4c:f5:
1e:53:fb:f5:92:2d:08:f3:31:15:69:ee:0e:e9:07:18:d5:74:
b3:a1:d7:cc:d4:77:e9:31:93:87:c5:46:52:25:7c:79:ae:c6:
f3:e7:02:cb:2b:4c:15:80:0c:39:30:f9:6e:bc:95:d2:17:3a:
ce:d9:7e:23:2f:2b:be:5f:a9:23:6b:e0:d4:06:aa:83:ae:c6:
ae:94:23:4a:3a:b8:5f:89:e8:ed:66:fb:47:88:89:da:96:0c:
22:95:f0:2a:19:27:01:e9:ba:1e:b5:29:5d:5f:88:a4:65:13:
1c:d9:33:7d:63:35:d9:9e:12:53:4a:40:cb:e5:01:ab:53:a3:
2b:e8:15:70:20:ce:de:3d:19:06:ee:2c:e6:9c:d4:fe:64:77:
fd:12:a7:15:24:79:94:dd:3d:d1:8f:bf:d5:12:63:4f:74:c3:
7b:43:c0:e8:2d:8e:5c:74:6c:6b:7e:d1:dc:74:9c:47:52:35:
69:db:96:11:e2:8b:1f:a8:b6:27:66:12:e2:6f:4e:a1:d4:72:
41:88:74:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:54:07 2025 by rpki-client