Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/ccc645-5323-4b20-b475-f37705361cf8/1/mM0-vWXtPZquB5oOJNcTLZpxqrg.mft
File: mM0-vWXtPZquB5oOJNcTLZpxqrg.mft (raw, json)
Hash identifier: XsXYqmcI1ongMkSkenHDev1X6u1RcEyrMKKbOpiX1t0=
Subject key identifier: DF:5B:29:26:4F:5D:40:2C:09:AC:6C:E8:D0:33:54:08:0C:C4:66:E6
Authority key identifier: 98:CD:3E:BD:65:ED:3D:9A:AE:07:9A:0E:24:D7:13:2D:9A:71:AA:B8
Certificate issuer: /CN=98cd3ebd65ed3d9aae079a0e24d7132d9a71aab8
Certificate serial: 0194BC053C575B5DC3A7F3EFF33E39B4A77C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mM0-vWXtPZquB5oOJNcTLZpxqrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/ccc645-5323-4b20-b475-f37705361cf8/1/mM0-vWXtPZquB5oOJNcTLZpxqrg.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 11:00:47 +0000
Manifest this update: Fri 31 Jan 2025 11:00:47 +0000
Manifest next update: Sat 01 Feb 2025 11:00:47 +0000
Files and hashes: 1: fnq47xvFlP3s88cw-L8mb-lvd_E.roa (hash: vyrDQTrTr3KQdje/xN9zgyCGRoZbi8NoM/Vu35juLyc=)
2: mM0-vWXtPZquB5oOJNcTLZpxqrg.crl (hash: VzSyQ78KUPsMXIlOro7SpsEi0hXrHdyZ4wkVqfmteag=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:3c:57:5b:5d:c3:a7:f3:ef:f3:3e:39:b4:a7:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98cd3ebd65ed3d9aae079a0e24d7132d9a71aab8
Validity
Not Before: Jan 31 11:00:47 2025 GMT
Not After : Feb 1 11:00:47 2025 GMT
Subject: CN=df5b29264f5d402c09ac6ce8d03354080cc466e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:15:c4:e8:69:9a:19:8d:03:e6:a5:d3:13:2d:
a2:68:3e:9c:64:55:2a:31:f3:47:71:9f:32:e2:84:
8b:35:d8:e9:b1:af:03:89:4d:de:fc:ad:6b:33:48:
a5:99:e9:f0:d2:ff:30:33:c0:28:c1:1e:aa:17:65:
86:be:fd:13:de:a1:ce:cf:6d:0c:da:5f:a5:85:fb:
8c:1c:5e:79:17:72:0d:6b:4e:5e:36:36:79:9e:0c:
75:b2:57:67:00:02:72:09:dc:5a:e4:b9:16:e1:a0:
27:24:ee:63:ab:04:8d:67:af:40:75:ea:a8:98:1b:
4e:56:59:84:c8:c0:e0:ee:be:97:50:e7:cd:b4:5a:
6a:e1:a1:a5:2b:92:b7:53:fb:33:c7:ac:d8:32:6f:
8a:e8:1c:9c:b1:8d:47:b4:3c:b8:5b:8b:e0:77:c0:
ea:43:71:91:01:27:87:b4:fa:c2:d0:5a:fe:37:3a:
5d:ae:db:35:d8:40:54:44:d2:51:78:1d:aa:61:8b:
7a:9f:f2:c5:b8:c5:27:6c:cd:b5:38:eb:aa:51:74:
d7:97:2a:cd:97:ff:43:32:21:56:ec:05:b3:e2:29:
7e:2d:e2:de:2b:32:36:ae:4c:ec:88:4f:6d:5b:df:
44:a8:b5:b3:4b:df:d5:8e:07:c3:8a:cf:b2:5b:fb:
8b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:5B:29:26:4F:5D:40:2C:09:AC:6C:E8:D0:33:54:08:0C:C4:66:E6
X509v3 Authority Key Identifier:
keyid:98:CD:3E:BD:65:ED:3D:9A:AE:07:9A:0E:24:D7:13:2D:9A:71:AA:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mM0-vWXtPZquB5oOJNcTLZpxqrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/ccc645-5323-4b20-b475-f37705361cf8/1/mM0-vWXtPZquB5oOJNcTLZpxqrg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/ccc645-5323-4b20-b475-f37705361cf8/1/mM0-vWXtPZquB5oOJNcTLZpxqrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:39:86:56:6e:f6:c1:74:88:e8:e7:3b:d1:9b:11:91:61:c1:
3f:09:85:a8:ac:df:63:0f:90:9b:1b:0d:ab:94:8e:0a:22:f9:
c5:de:c7:40:9e:4c:f9:b1:2b:60:5e:a9:46:84:ba:11:8c:bd:
0b:48:50:de:5b:03:68:f3:bc:4a:a2:a8:90:cb:c9:4c:57:c0:
7f:76:d6:bf:88:ff:00:a4:06:7b:8c:d3:80:db:c3:bf:dd:21:
da:b8:3b:fe:84:8c:04:be:e2:c8:b2:2e:17:08:18:37:d8:32:
5b:7e:53:69:83:6c:f5:5b:66:62:4b:35:7f:c8:a2:0f:87:22:
f9:ad:ba:87:03:80:89:6d:94:24:9e:9d:15:62:e8:e2:f2:78:
01:ff:87:0e:40:65:fd:b3:d5:09:29:d8:f6:69:33:da:30:6d:
91:be:13:ec:99:af:8f:0b:a1:80:5f:98:b6:44:35:12:26:93:
26:c7:bd:4e:4e:b0:ce:2d:a9:db:42:a4:95:6c:2d:ed:08:d0:
5a:bc:b8:0d:a8:5c:39:74:80:89:da:c5:f7:ce:22:6f:48:8d:
ca:9b:bc:97:53:a3:8c:17:11:7f:96:9c:3c:67:7f:52:96:10:
45:c4:62:df:26:8a:86:40:ad:bf:74:0f:c1:4f:f2:85:5c:af:
be:86:b2:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:32:36 2025 by rpki-client