Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/070630-5234-49c4-84fe-15bda6b867cb/1/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.mft
File: U7Go68Ps9_Xbf2ys0A6SCvha6LQ.mft (raw, json)
Hash identifier: K18/hF79dIgExYK5zdoo1qZ7nfGNbAMsDXHBe5VBtQA=
Subject key identifier: 0D:A3:4B:A8:AA:2A:E8:0B:E2:5B:F3:4B:8C:A5:E8:75:DF:38:1A:E1
Authority key identifier: 53:B1:A8:EB:C3:EC:F7:F5:DB:7F:6C:AC:D0:0E:92:0A:F8:5A:E8:B4
Certificate issuer: /CN=53b1a8ebc3ecf7f5db7f6cacd00e920af85ae8b4
Certificate serial: 0194BC3C38F1AC820701A39C3F7C8EA9E5AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/070630-5234-49c4-84fe-15bda6b867cb/1/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 12:00:50 +0000
Manifest this update: Fri 31 Jan 2025 12:00:50 +0000
Manifest next update: Sat 01 Feb 2025 12:00:50 +0000
Files and hashes: 1: S3427Ij04j7UgHd5TO5qNmmJsF8.roa (hash: /jwbvONLbZgSMgmu3F4ocyZScMjAwTwSO4CoqEkPSe0=)
2: U7Go68Ps9_Xbf2ys0A6SCvha6LQ.crl (hash: ohREsT8xlKnXvcIMbb+5/Go/+SjXhAMnFs4YAsmxIOQ=)
3: znlbEhSL3OBIUicM0zTghSzFWq4.roa (hash: /UTNLfQ+6CNoZrCfqNv3q7AcPtlfut7ROp1orn1wCLA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:38:f1:ac:82:07:01:a3:9c:3f:7c:8e:a9:e5:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53b1a8ebc3ecf7f5db7f6cacd00e920af85ae8b4
Validity
Not Before: Jan 31 12:00:50 2025 GMT
Not After : Feb 1 12:00:50 2025 GMT
Subject: CN=0da34ba8aa2ae80be25bf34b8ca5e875df381ae1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f3:66:66:d8:92:4d:ed:fa:b7:91:3f:28:89:
5e:c3:0b:a0:bd:8a:fb:e7:ba:f3:f4:26:4c:eb:7f:
dc:d9:cb:c4:c8:3b:5f:62:d1:0f:3f:59:ce:20:7b:
ad:87:f4:3b:78:6b:fe:e8:9b:24:df:ae:6d:d9:38:
0d:d1:15:55:02:6c:19:80:78:a4:90:ed:e9:62:91:
c9:9f:e9:9d:83:d4:65:b4:45:76:61:63:da:a1:5e:
63:21:16:10:92:44:3c:27:04:bd:4d:22:3c:99:f6:
8a:6b:6b:0e:9c:7c:4a:ed:11:10:da:33:dd:3b:e7:
92:7f:23:e8:24:4f:92:76:4d:1e:04:ba:71:22:e8:
1b:3d:e4:eb:b4:76:eb:2f:db:4c:34:38:d8:fa:42:
03:f2:1c:4d:3f:4f:a0:6e:bc:2e:58:47:b2:c9:e8:
19:28:e2:d1:20:69:01:90:87:ee:72:d8:fc:c1:8e:
e7:89:25:c3:5d:91:09:50:7d:c3:79:cf:46:0a:7a:
6b:55:90:9d:e0:29:86:b5:37:73:36:1d:e4:49:3f:
f5:ca:65:e2:e7:d3:12:a4:9f:f6:c5:01:6e:c6:b0:
49:c1:9c:31:e5:ba:8d:7d:77:d2:73:72:03:50:21:
19:04:72:bc:7b:4e:7a:ca:9e:ed:e8:0a:4d:6e:39:
ed:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:A3:4B:A8:AA:2A:E8:0B:E2:5B:F3:4B:8C:A5:E8:75:DF:38:1A:E1
X509v3 Authority Key Identifier:
keyid:53:B1:A8:EB:C3:EC:F7:F5:DB:7F:6C:AC:D0:0E:92:0A:F8:5A:E8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/070630-5234-49c4-84fe-15bda6b867cb/1/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/070630-5234-49c4-84fe-15bda6b867cb/1/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:09:e2:54:75:15:47:ce:61:1f:74:88:cb:94:6d:9f:df:01:
10:f9:c2:d1:d0:68:d6:cd:0a:68:d0:dc:a8:79:cb:ac:0c:91:
b8:44:a0:8c:6a:5b:cf:82:ce:82:24:a8:aa:d3:78:79:f7:22:
22:9f:fc:64:05:90:88:b6:ae:93:37:b9:d2:bc:96:04:76:01:
62:7e:14:93:bb:a9:93:9e:fc:3c:38:11:a3:29:a7:03:45:7e:
de:5f:fc:3e:d1:5e:56:d4:5f:a3:f5:b1:12:5a:e4:1b:06:17:
f0:d5:c0:fa:81:73:00:0c:b3:37:05:e3:a4:66:88:50:71:72:
bc:c6:b2:e3:7a:8d:5d:be:35:a6:dc:79:2e:7c:67:7b:40:01:
c6:c8:68:c6:d4:f5:38:38:d8:7f:9c:bb:0e:6e:2d:10:f5:c0:
78:60:13:c3:1a:f4:f9:5d:4c:03:8d:ac:3e:1f:65:e0:10:b8:
f2:1d:48:0a:ed:40:5e:e3:22:8e:e2:2b:1c:cd:d7:ff:af:27:
3c:d7:94:1b:ef:46:e4:29:b6:21:58:7e:30:a4:d2:d8:f0:77:
53:13:dd:5c:e7:1b:02:36:58:d9:8c:35:24:28:54:5a:32:41:
e0:1b:67:73:27:4b:fe:d2:12:00:a3:45:c3:d6:7a:8a:5d:53:
b5:02:45:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:15:46 2025 by rpki-client