Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/mk123S9GBosIca1FAKxuV3r-Rpw.mft
File: mk123S9GBosIca1FAKxuV3r-Rpw.mft (raw, json)
Hash identifier: mxK8z3tLfWlRlIcBUMBuuozKOLfWx/jSs5V+JvprIHk=
Subject key identifier: 7A:74:C9:E1:D5:46:DD:DD:DA:B4:61:3A:59:11:49:CF:EB:33:BE:2A
Authority key identifier: 9A:4D:76:DD:2F:46:06:8B:08:71:AD:45:00:AC:6E:57:7A:FE:46:9C
Certificate issuer: /CN=9a4d76dd2f46068b0871ad4500ac6e577afe469c
Certificate serial: 0194BC72AF004F51C4403E954D535C723552
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mk123S9GBosIca1FAKxuV3r-Rpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/mk123S9GBosIca1FAKxuV3r-Rpw.mft
Manifest number: 1434
Signing time: Fri 31 Jan 2025 13:00:19 +0000
Manifest this update: Fri 31 Jan 2025 13:00:19 +0000
Manifest next update: Sat 01 Feb 2025 13:00:19 +0000
Files and hashes: 1: j-Wf3znAxyHVOa1yHEzX6v3sp9U.roa (hash: OwOwX0XTVGFVpqs+QebopX8jgHz3h7KxGANJ/Crp1oA=)
2: mk123S9GBosIca1FAKxuV3r-Rpw.crl (hash: ay811jT8f62uWrrubqxOt+3S8UNNlfifeN7ME6ABj40=)
3: vscV7GZRMa0CPUTvFLBuSp-lIJ8.roa (hash: 2C3QYWkPGEbQmt4ETFEFUqH1R92qUMl/4nE7fTPMPhA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:af:00:4f:51:c4:40:3e:95:4d:53:5c:72:35:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a4d76dd2f46068b0871ad4500ac6e577afe469c
Validity
Not Before: Jan 31 13:00:19 2025 GMT
Not After : Feb 1 13:00:19 2025 GMT
Subject: CN=7a74c9e1d546dddddab4613a591149cfeb33be2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:0c:12:b8:cf:52:f1:05:36:0b:df:72:a4:6b:
f5:42:b0:f7:93:ed:f5:94:36:8f:00:87:4f:28:cf:
7b:71:2b:dd:7a:e3:6e:13:e4:b1:9a:0c:62:56:96:
36:58:5c:f6:2b:8e:96:df:f0:80:63:1a:c9:2a:1c:
cc:82:9e:a3:0f:75:7a:ac:09:4c:bd:27:05:1c:d1:
17:cb:93:9d:08:32:e9:a9:40:64:3a:59:f7:b8:0b:
14:2a:82:56:70:fb:df:21:d7:c8:d9:83:f0:df:d7:
83:c0:9d:e5:b7:50:77:c0:97:98:e0:42:53:83:35:
0a:8c:df:54:c7:03:a6:9c:e6:3a:2d:e7:b0:41:0d:
86:b4:54:10:8c:3c:14:0b:7e:ec:a9:e1:f3:07:6c:
c4:38:b4:21:02:db:48:12:74:1c:e4:8b:42:8d:e3:
45:0b:7e:90:c3:9f:68:25:3f:9e:46:57:eb:1b:39:
29:8e:8d:ce:3b:0e:ff:36:98:91:db:5a:34:86:83:
01:02:2f:2d:26:a4:59:87:53:2c:f7:b5:44:5c:dc:
32:f1:de:4d:a3:5c:bd:3c:47:14:e6:bd:f2:64:c8:
3a:fa:a6:e4:ae:42:eb:db:b1:6f:af:e8:cf:b9:07:
6c:d6:9c:1b:fe:1e:5d:df:d0:69:60:e9:65:5c:2f:
ae:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:74:C9:E1:D5:46:DD:DD:DA:B4:61:3A:59:11:49:CF:EB:33:BE:2A
X509v3 Authority Key Identifier:
keyid:9A:4D:76:DD:2F:46:06:8B:08:71:AD:45:00:AC:6E:57:7A:FE:46:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mk123S9GBosIca1FAKxuV3r-Rpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/mk123S9GBosIca1FAKxuV3r-Rpw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/mk123S9GBosIca1FAKxuV3r-Rpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:ca:5f:e9:4a:b3:89:40:cf:80:37:e5:a9:84:9d:ee:ac:02:
b0:fe:97:99:fc:12:5b:ce:40:e8:9d:d7:71:72:00:b0:c0:5a:
83:4f:ff:9c:be:a7:f6:83:44:0a:b9:42:eb:73:72:d5:f1:2c:
c7:1b:a4:e6:ba:ae:9f:b8:7a:5e:0c:eb:e4:0b:3c:ce:07:c4:
10:6c:a2:b6:d1:8c:92:0e:36:ef:b8:cb:99:83:09:33:93:9d:
0d:5d:18:64:40:13:ee:42:18:1c:c9:30:e3:d2:d5:fb:5d:4a:
c4:93:c3:03:de:58:c3:dd:b3:c4:db:78:7c:2a:ad:fa:f9:fd:
dd:45:cf:87:ba:ab:fd:18:d1:ef:c0:b0:f2:a8:53:91:a2:03:
bf:10:49:bc:b7:ca:69:1c:28:01:ee:8a:93:97:75:12:b6:1c:
be:50:05:7b:77:cd:77:b7:dd:1e:1d:64:c0:8a:68:c0:36:25:
0a:b4:79:77:ff:5d:38:b5:36:e8:0b:37:a0:4d:5a:02:92:4b:
03:a1:f3:6e:8d:35:84:17:de:19:2e:d3:4a:5d:ce:ba:9b:7c:
d6:47:5d:58:6b:f4:0e:40:4d:ff:f6:91:92:e7:dd:f8:4c:b1:
1e:41:ab:88:50:07:8b:dc:bd:bb:19:1a:f8:29:bc:a0:2b:88:
26:9f:a8:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:00:34 2025 by rpki-client