Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/523eb8-3677-4c9f-b6bd-7c5e7e324530/1/mx8SO1ukvBt3k7np-htD2sSaZgo.mft
File: mx8SO1ukvBt3k7np-htD2sSaZgo.mft (raw, json)
Hash identifier: Kn7anCPPEYg3XZiXE5Oq2TEyostgC+dsdbBYPWNazss=
Subject key identifier: 05:97:2A:D5:0C:61:01:49:33:E3:CD:3A:11:CB:57:1C:73:D8:B5:6D
Authority key identifier: 9B:1F:12:3B:5B:A4:BC:1B:77:93:B9:E9:FA:1B:43:DA:C4:9A:66:0A
Certificate issuer: /CN=9b1f123b5ba4bc1b7793b9e9fa1b43dac49a660a
Certificate serial: 0194BCE0B297EA49AB6A0BAA9BB55AEB4C0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mx8SO1ukvBt3k7np-htD2sSaZgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/523eb8-3677-4c9f-b6bd-7c5e7e324530/1/mx8SO1ukvBt3k7np-htD2sSaZgo.mft
Manifest number: 0D54
Signing time: Fri 31 Jan 2025 15:00:29 +0000
Manifest this update: Fri 31 Jan 2025 15:00:29 +0000
Manifest next update: Sat 01 Feb 2025 15:00:29 +0000
Files and hashes: 1: fnSZn4bkLF5kZ3b1OPm6ARvkoQM.roa (hash: N/iSveQaUWb1ReObfQZCITPh3u+LQRq5t3sKbajN6Pg=)
2: mx8SO1ukvBt3k7np-htD2sSaZgo.crl (hash: fmIpGnXGOxAhrUsT4CqzoremK1lnUudteYG5Qm4fdrM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:b2:97:ea:49:ab:6a:0b:aa:9b:b5:5a:eb:4c:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b1f123b5ba4bc1b7793b9e9fa1b43dac49a660a
Validity
Not Before: Jan 31 15:00:29 2025 GMT
Not After : Feb 1 15:00:29 2025 GMT
Subject: CN=05972ad50c61014933e3cd3a11cb571c73d8b56d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:26:fb:58:ec:71:21:d4:8b:18:63:1d:10:e6:
24:e4:52:d4:3b:6c:a6:42:ea:c4:13:4f:f3:a0:88:
67:ee:75:ad:ae:3d:fb:22:5d:cf:4c:df:21:b8:c9:
cf:a3:4b:47:e6:17:b9:8b:5f:51:dc:b7:2a:24:d1:
88:3c:6e:11:a3:85:b4:22:8e:70:47:c5:8d:55:7c:
78:e6:d9:01:e9:bf:a0:be:b5:d9:b8:d5:54:7d:34:
a7:f9:1b:97:6c:64:7f:72:47:16:8b:60:0a:9b:ad:
62:b7:8e:5e:a7:52:5d:6f:2e:21:5e:5f:37:3d:88:
3f:66:68:0e:8f:73:77:5f:8d:0f:c3:6b:3a:48:62:
08:41:3f:51:35:61:ec:51:fb:24:ce:8a:dc:f9:46:
0d:1c:5e:73:8c:ae:4e:52:b7:1b:da:d3:bc:3c:9d:
5a:a3:d6:d0:4c:db:40:8e:8e:02:76:56:37:cc:69:
b2:d7:93:1e:65:43:e5:39:0c:0e:fd:f1:9c:3a:7f:
fb:e5:c0:f0:5a:f8:e8:bf:5a:45:e3:a6:f6:6f:c7:
a3:e8:43:fa:9a:6e:13:d3:cd:a5:ca:84:a2:5a:28:
cb:fe:0d:4f:2b:f6:ce:55:67:61:2e:5c:3a:bb:20:
93:6b:29:69:fa:4a:a0:73:4a:29:13:78:b9:86:66:
19:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:97:2A:D5:0C:61:01:49:33:E3:CD:3A:11:CB:57:1C:73:D8:B5:6D
X509v3 Authority Key Identifier:
keyid:9B:1F:12:3B:5B:A4:BC:1B:77:93:B9:E9:FA:1B:43:DA:C4:9A:66:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mx8SO1ukvBt3k7np-htD2sSaZgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/523eb8-3677-4c9f-b6bd-7c5e7e324530/1/mx8SO1ukvBt3k7np-htD2sSaZgo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/523eb8-3677-4c9f-b6bd-7c5e7e324530/1/mx8SO1ukvBt3k7np-htD2sSaZgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:1f:ea:89:a9:65:7d:c9:33:74:32:f4:33:dc:bf:3f:37:64:
d8:90:59:ac:51:26:1b:4b:a9:7b:b9:77:5b:7b:24:23:ec:6e:
1d:30:ba:be:4d:f8:35:e9:25:fe:1b:7a:e1:af:66:60:af:fc:
fc:d9:1b:ff:a5:af:98:e9:c1:58:5a:dc:b1:71:8e:9a:ec:39:
18:6b:72:50:95:5d:fe:cf:1e:14:bf:61:96:88:99:ad:0d:82:
14:94:95:5a:2c:84:0d:ba:18:b5:28:52:75:6e:c6:82:5b:8f:
f3:cb:ce:05:14:05:db:02:18:c3:5d:fd:89:14:55:6c:42:a3:
1c:1d:af:75:f6:13:18:63:2e:45:7e:0d:24:aa:b6:d3:0f:e6:
ac:2d:09:f0:b1:1e:b8:87:c1:3a:69:07:fc:03:be:f0:39:cf:
32:bd:ea:47:45:b2:cf:f4:66:ee:fb:f2:72:d6:55:73:7d:26:
83:ff:14:c1:14:97:b2:00:23:8e:11:d6:11:f8:a6:66:b2:64:
8e:d6:c3:16:5e:4f:b5:d8:68:d6:11:98:e3:f3:3e:7d:fb:9a:
6f:11:ec:c3:61:d5:71:c9:b7:95:10:19:bc:b2:d7:a9:17:e7:
68:37:c8:1d:47:d8:c3:ee:01:ae:bf:e3:c1:3a:47:a4:2c:98:
08:0b:d8:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:07 2025 by rpki-client