Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/fdd25d-c034-49f3-890d-4b89d377808e/1/V0U31U828UIjG8gXA4hyy2B7Iec.mft
File: V0U31U828UIjG8gXA4hyy2B7Iec.mft (raw, json)
Hash identifier: jcTx4pr2ZmxLi4hoNiqJOYS7at96sZgwrQPW8g0BXxs=
Subject key identifier: 3D:BB:F5:C2:6C:9B:CC:18:D6:E6:6D:D2:8A:A6:20:1F:0D:79:6B:BA
Authority key identifier: 57:45:37:D5:4F:36:F1:42:23:1B:C8:17:03:88:72:CB:60:7B:21:E7
Certificate issuer: /CN=574537d54f36f142231bc817038872cb607b21e7
Certificate serial: 0194BC04BF7258BC11DD4092296CB23DE49C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V0U31U828UIjG8gXA4hyy2B7Iec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/fdd25d-c034-49f3-890d-4b89d377808e/1/V0U31U828UIjG8gXA4hyy2B7Iec.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 11:00:15 +0000
Manifest this update: Fri 31 Jan 2025 11:00:15 +0000
Manifest next update: Sat 01 Feb 2025 11:00:15 +0000
Files and hashes: 1: NG7h3MLl7rsjKfJWWMgCk14YKA8.roa (hash: TfduHN4QjBYJ2zJVMdkqYrJchaPgW7zgFk7X9cdWumk=)
2: V0U31U828UIjG8gXA4hyy2B7Iec.crl (hash: dHMpe8Zlv4RQDYJYwuHfC3NA/QO8ZFgUAF3YGkmEKIo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:bf:72:58:bc:11:dd:40:92:29:6c:b2:3d:e4:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=574537d54f36f142231bc817038872cb607b21e7
Validity
Not Before: Jan 31 11:00:15 2025 GMT
Not After : Feb 1 11:00:15 2025 GMT
Subject: CN=3dbbf5c26c9bcc18d6e66dd28aa6201f0d796bba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f8:bc:df:ec:c0:6f:71:76:b9:9d:8f:d4:8c:
63:90:36:59:b9:1f:f7:4e:e3:1b:16:d0:5a:f9:f4:
db:3a:0a:8e:ed:c9:93:70:88:c5:61:96:6a:7b:50:
09:bc:4e:62:93:43:7f:09:14:b7:c3:df:ac:eb:8f:
5f:eb:3e:50:06:40:94:d3:e5:15:f1:17:6b:32:86:
1a:64:46:3b:d5:20:b8:35:5e:8e:e3:b6:c1:c3:e8:
72:d9:d9:95:0a:b0:21:62:79:74:d8:4a:5d:0d:70:
27:9c:ea:15:d5:b0:e9:2c:7e:e9:cd:7a:16:4b:c6:
bb:0f:c5:d7:4f:95:81:16:f4:0f:79:05:fd:e0:66:
6b:2b:32:96:4b:86:f8:cb:80:63:52:b3:38:b8:62:
4d:47:1d:af:ca:68:0c:49:39:5c:fa:6c:17:5c:00:
72:f1:38:f6:c6:29:0a:c9:04:eb:31:83:f0:d6:de:
1e:fc:b9:b7:c5:1b:c3:7f:7b:78:34:00:49:f1:c4:
30:80:89:15:56:5c:7e:ee:a5:95:4d:c3:81:8d:d7:
ce:4a:b0:7f:c4:24:e8:ff:5b:96:13:1a:e0:2a:8d:
fe:f2:e7:68:c4:2e:b8:16:e0:9f:c4:a9:3d:59:f6:
61:84:16:04:28:aa:2c:7f:95:72:a2:dc:66:81:9a:
aa:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:BB:F5:C2:6C:9B:CC:18:D6:E6:6D:D2:8A:A6:20:1F:0D:79:6B:BA
X509v3 Authority Key Identifier:
keyid:57:45:37:D5:4F:36:F1:42:23:1B:C8:17:03:88:72:CB:60:7B:21:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V0U31U828UIjG8gXA4hyy2B7Iec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/fdd25d-c034-49f3-890d-4b89d377808e/1/V0U31U828UIjG8gXA4hyy2B7Iec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/fdd25d-c034-49f3-890d-4b89d377808e/1/V0U31U828UIjG8gXA4hyy2B7Iec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:5d:32:95:3e:ac:36:05:d0:82:b0:4f:e0:59:c2:1a:5c:29:
89:41:00:f7:49:1e:ea:ff:ac:bd:1f:4a:64:9c:a3:4c:33:45:
73:f2:58:b1:7f:ec:a4:51:90:07:a7:dd:0a:ce:12:80:f8:67:
bf:7b:4c:7e:4c:d6:fe:de:8e:f2:f8:08:c4:76:9a:98:92:fb:
95:31:22:0e:f9:b4:15:5a:ef:48:10:51:8a:6e:64:c8:7f:23:
81:4c:25:08:cf:e2:be:5a:d4:51:c5:ec:9d:7f:cd:13:6f:b7:
86:4b:c4:e5:ee:82:9f:e6:cf:8e:76:be:c9:2a:60:c7:a8:34:
dd:03:f2:24:96:bc:94:cb:d8:82:1e:78:32:bf:4d:13:ee:86:
27:e7:f0:4b:5e:61:b8:f2:cc:67:2f:72:cb:51:63:b0:75:b3:
97:3a:77:c5:20:87:4f:02:23:da:da:49:d2:74:9d:c5:9a:46:
00:61:4f:50:21:e8:85:39:f9:bc:8e:33:04:39:74:bb:d5:81:
9f:9e:73:f6:5f:ce:cd:df:d2:36:7c:e8:66:4d:c6:fa:c9:f0:
85:0e:ae:ec:1a:5c:84:9c:6d:ad:1d:44:b1:99:4f:df:d4:99:
38:2f:4d:2a:59:66:2f:ee:f1:67:22:33:ec:0e:dd:87:fc:98:
3c:05:c2:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:26:09 2025 by rpki-client