Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/5a7e46-ce1b-4955-9f39-4b311326c230/1/mgNSX2jrayNfHeIrYLG67S_H_4M.mft
File: mgNSX2jrayNfHeIrYLG67S_H_4M.mft (raw, json)
Hash identifier: /4Tlv4FR2u4HFDrtHUZTZkGwLvYZucA8b8qEtO/LeTM=
Subject key identifier: 11:F8:90:09:48:52:06:BF:40:97:C4:45:92:A7:AA:8C:24:8A:F9:91
Authority key identifier: 9A:03:52:5F:68:EB:6B:23:5F:1D:E2:2B:60:B1:BA:ED:2F:C7:FF:83
Certificate issuer: /CN=9a03525f68eb6b235f1de22b60b1baed2fc7ff83
Certificate serial: 0194BC3BEC836E46F9D27CE99941CBC5DE8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mgNSX2jrayNfHeIrYLG67S_H_4M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/5a7e46-ce1b-4955-9f39-4b311326c230/1/mgNSX2jrayNfHeIrYLG67S_H_4M.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 12:00:31 +0000
Manifest this update: Fri 31 Jan 2025 12:00:31 +0000
Manifest next update: Sat 01 Feb 2025 12:00:31 +0000
Files and hashes: 1: mgNSX2jrayNfHeIrYLG67S_H_4M.crl (hash: EnATCDsPUTCGYmT1YObb8Ahr5Uv3JXaWueXotX7Z6nk=)
2: xV2TYyNPjWPupKmb43ad00Tt3n8.roa (hash: +ey9CZvGJrxa71wfksSgu55Jb8r1NMsse9tFxoel7Ig=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:ec:83:6e:46:f9:d2:7c:e9:99:41:cb:c5:de:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a03525f68eb6b235f1de22b60b1baed2fc7ff83
Validity
Not Before: Jan 31 12:00:31 2025 GMT
Not After : Feb 1 12:00:31 2025 GMT
Subject: CN=11f89009485206bf4097c44592a7aa8c248af991
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:77:b1:6d:8c:ab:61:27:36:06:34:4c:46:7c:
69:6e:f6:04:91:1c:07:45:07:ee:c1:7e:8e:87:f9:
e3:3e:d1:bc:bf:53:cb:4b:07:7e:68:8e:0e:89:7d:
3f:01:a3:b7:a1:55:c7:13:cd:70:e1:95:fb:27:4e:
4f:2f:e2:00:93:40:cb:68:42:48:25:2f:3c:ac:47:
66:9a:fa:8c:5f:b3:a7:01:47:bb:37:a5:84:96:34:
d2:ec:a5:1e:ad:29:9c:55:03:1f:ba:05:78:5b:3f:
fa:6c:05:c2:fc:b4:d3:4a:88:88:89:e5:88:de:ba:
e6:ab:cc:e3:d2:bc:dc:8e:5a:ad:79:34:8d:ff:6b:
07:e9:8f:5f:44:d3:df:ae:63:c0:be:c2:28:c1:5a:
d7:80:c5:a2:0c:9d:15:12:47:4f:83:97:fb:ad:56:
99:ee:be:9b:2e:07:d2:e0:7e:1f:03:65:c9:40:e2:
49:63:48:bd:ef:08:30:9a:cf:88:8b:d0:a1:d2:ac:
ce:2b:2d:94:0d:02:64:3b:31:23:f5:cb:a4:82:05:
09:d7:d0:93:74:23:1d:30:7f:15:73:5e:01:98:db:
7a:9f:07:c0:a5:98:85:f6:32:b0:4d:de:0c:bd:56:
f0:84:a1:58:76:1c:bd:e6:62:45:fc:07:03:e5:75:
bb:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:F8:90:09:48:52:06:BF:40:97:C4:45:92:A7:AA:8C:24:8A:F9:91
X509v3 Authority Key Identifier:
keyid:9A:03:52:5F:68:EB:6B:23:5F:1D:E2:2B:60:B1:BA:ED:2F:C7:FF:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mgNSX2jrayNfHeIrYLG67S_H_4M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/5a7e46-ce1b-4955-9f39-4b311326c230/1/mgNSX2jrayNfHeIrYLG67S_H_4M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/5a7e46-ce1b-4955-9f39-4b311326c230/1/mgNSX2jrayNfHeIrYLG67S_H_4M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:9a:90:ff:e2:ff:1e:51:f5:62:bc:7e:d5:e3:30:13:a7:02:
b0:c9:de:08:b0:3f:7f:0d:d8:b8:e6:87:0f:0f:24:36:4e:22:
0a:e0:38:5b:4c:6c:bc:fb:3e:b4:d3:2b:85:6f:e9:48:15:01:
7d:7e:98:80:88:d9:60:db:33:34:bc:cf:8b:db:db:ac:fa:2e:
2e:f6:07:f8:1f:23:ac:dd:15:2e:fa:71:1d:aa:b8:39:d4:43:
93:63:ac:b1:bb:d2:a8:9f:45:38:93:2b:24:53:f1:11:7e:fb:
a2:f3:29:b1:3f:1a:ee:46:11:b8:3e:a3:e9:8c:55:a6:55:fe:
5a:ce:83:22:8e:05:a5:36:9c:23:18:80:bf:06:c5:22:72:3d:
ae:a9:32:24:bb:f5:38:aa:53:79:7d:27:66:20:8d:a6:49:d8:
38:68:15:fd:61:e3:aa:41:6f:27:32:5a:d3:dd:24:94:09:63:
dd:13:d8:5d:c1:48:1a:42:22:a7:0b:0b:3d:ba:c1:7c:05:cc:
99:7a:e3:6d:c8:58:a7:2f:28:4a:96:39:45:5c:5e:e5:05:7d:
4f:55:b8:bf:1d:83:bf:ee:15:25:ea:2d:4c:be:36:7a:91:5a:
e4:0d:da:a7:9c:d8:26:83:fd:73:97:99:f4:61:ce:83:fc:3a:
73:0d:89:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:18:18 2025 by rpki-client