Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/6f5dc2-30cb-4c0c-aa62-8226524e4acf/1/muJTTfUJyW7LgRvIXXbWK6rfPSk.mft
File: muJTTfUJyW7LgRvIXXbWK6rfPSk.mft (raw, json)
Hash identifier: uqY4clycrCAVJrnXrOMd824QG2YNQitMm2NWRHUZGyQ=
Subject key identifier: E0:FF:08:D9:ED:15:6D:72:29:80:03:83:D7:CA:A7:BC:D6:23:18:7F
Authority key identifier: 9A:E2:53:4D:F5:09:C9:6E:CB:81:1B:C8:5D:76:D6:2B:AA:DF:3D:29
Certificate issuer: /CN=9ae2534df509c96ecb811bc85d76d62baadf3d29
Certificate serial: 0194BC727CA1CBA9F6DE6DB47237C9FB0C25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/muJTTfUJyW7LgRvIXXbWK6rfPSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/6f5dc2-30cb-4c0c-aa62-8226524e4acf/1/muJTTfUJyW7LgRvIXXbWK6rfPSk.mft
Manifest number: 084C
Signing time: Fri 31 Jan 2025 13:00:07 +0000
Manifest this update: Fri 31 Jan 2025 13:00:07 +0000
Manifest next update: Sat 01 Feb 2025 13:00:07 +0000
Files and hashes: 1: SkEoFqWz8Nesa-6bLQGwcsWuCyc.roa (hash: YBTkqmp/iQfLCssDb/tS/QsoGIchXV4bMdX9APnUYwY=)
2: muJTTfUJyW7LgRvIXXbWK6rfPSk.crl (hash: opYoV0DHGKgfmLIlcfYsP03QYcbyrD1ZunFUoU8qh1c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:7c:a1:cb:a9:f6:de:6d:b4:72:37:c9:fb:0c:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ae2534df509c96ecb811bc85d76d62baadf3d29
Validity
Not Before: Jan 31 13:00:07 2025 GMT
Not After : Feb 1 13:00:07 2025 GMT
Subject: CN=e0ff08d9ed156d7229800383d7caa7bcd623187f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:d4:10:2e:88:87:06:e1:4a:85:67:00:8c:ec:
7d:36:0a:94:8f:0c:e7:ee:be:19:ff:da:fe:9b:a3:
08:bf:50:f1:88:05:5b:0a:74:1b:ab:cc:5e:a8:5a:
4b:ec:7a:84:87:95:84:87:9c:65:a4:31:94:94:d0:
08:95:59:f6:dc:de:36:f3:5c:a4:45:88:20:48:20:
e5:87:b3:f1:95:31:46:63:53:8b:9d:61:e7:3a:53:
c9:ef:e2:5f:eb:ed:d9:b1:31:b1:78:87:49:87:50:
7e:4c:3b:90:50:29:b5:4f:4f:de:65:03:6d:e1:57:
ec:37:0d:bf:fa:6e:a7:13:86:79:34:1e:cf:d0:05:
bc:4b:c1:64:91:29:f2:7e:80:c6:17:88:e5:69:49:
c0:93:67:a5:3a:a3:b7:1d:5a:c1:7c:2e:9f:60:f4:
24:d6:34:bb:2d:d8:35:93:71:7a:89:39:56:50:ad:
bf:ca:14:a7:f8:37:85:6f:8c:bd:30:04:1f:7c:04:
70:ef:dd:c0:c2:e8:a5:fa:48:4c:2e:a8:58:02:11:
10:90:6f:68:2c:38:c1:65:ba:f4:c3:c3:0a:1e:85:
38:55:29:c5:33:fa:92:44:cc:95:2f:ba:6b:a3:3e:
be:c0:ac:5a:24:bd:47:68:90:78:03:8d:b4:28:da:
ec:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:FF:08:D9:ED:15:6D:72:29:80:03:83:D7:CA:A7:BC:D6:23:18:7F
X509v3 Authority Key Identifier:
keyid:9A:E2:53:4D:F5:09:C9:6E:CB:81:1B:C8:5D:76:D6:2B:AA:DF:3D:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/muJTTfUJyW7LgRvIXXbWK6rfPSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/6f5dc2-30cb-4c0c-aa62-8226524e4acf/1/muJTTfUJyW7LgRvIXXbWK6rfPSk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/6f5dc2-30cb-4c0c-aa62-8226524e4acf/1/muJTTfUJyW7LgRvIXXbWK6rfPSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:ab:90:c3:76:54:ed:6f:d6:5f:70:99:ae:31:31:07:7b:bb:
d2:53:71:d3:f1:34:1e:cf:ed:2e:99:5e:0c:df:3c:36:b1:0f:
eb:8b:2f:2c:e8:70:8c:8a:ec:67:54:dc:52:fc:d9:ce:bc:50:
6c:47:31:d4:d5:90:8f:31:5d:da:72:47:d4:0e:40:62:59:fa:
3b:22:71:2c:fe:a6:6b:be:90:a0:d0:b7:4a:d9:c9:a4:84:98:
71:e3:63:ff:ea:7b:5d:51:39:a9:1a:67:6e:ee:13:67:f7:c6:
d2:73:5b:e9:4b:2c:dd:bc:1d:15:fe:24:2c:5d:22:a2:c0:3a:
87:a1:83:58:df:93:d0:03:2b:22:44:66:44:14:89:c0:4a:28:
ea:2a:d4:c0:ab:35:36:0e:d9:43:77:73:9a:16:e8:2f:a8:e7:
38:83:e8:4e:ee:6f:4a:38:59:70:3a:05:4e:3a:4e:13:54:40:
fe:75:e9:c5:4b:b0:71:b1:6e:6e:9a:bb:0f:24:3e:9e:9d:e3:
38:32:d1:a9:1f:e9:bf:22:21:6d:1a:c3:18:6f:43:55:64:ce:
bb:94:32:50:50:1b:9d:d2:18:db:af:54:cb:e7:ac:f6:3f:02:
d7:a7:be:1a:03:85:49:fa:c1:65:ee:45:fd:e8:ed:56:9e:04:
66:8d:2a:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:27:58 2025 by rpki-client