Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/d51211-d0bb-4a57-9390-ce2a496fee86/1/MHoDlQLUamuZCREM4qsTlod70I4.mft
File: MHoDlQLUamuZCREM4qsTlod70I4.mft (raw, json)
Hash identifier: r+A802jOW9XMF+lsupn27tOFLLWVeNQiDZPYFkpWFI4=
Subject key identifier: 3B:C8:26:9A:22:DA:18:C6:42:60:AF:BB:63:14:A7:BF:8E:BE:D8:ED
Authority key identifier: 30:7A:03:95:02:D4:6A:6B:99:09:11:0C:E2:AB:13:96:87:7B:D0:8E
Certificate issuer: /CN=307a039502d46a6b9909110ce2ab1396877bd08e
Certificate serial: 0194BC3C0A5F35F92FD07A0BBF17DF8557D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MHoDlQLUamuZCREM4qsTlod70I4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/d51211-d0bb-4a57-9390-ce2a496fee86/1/MHoDlQLUamuZCREM4qsTlod70I4.mft
Manifest number: 0889
Signing time: Fri 31 Jan 2025 12:00:38 +0000
Manifest this update: Fri 31 Jan 2025 12:00:38 +0000
Manifest next update: Sat 01 Feb 2025 12:00:38 +0000
Files and hashes: 1: Ly1MWymIvXOCybb36lr4yOkjsU8.roa (hash: VpBFbk8tqcALSJaD09pM7y3kJlzVLbs+HEbBlDB9T94=)
2: MHoDlQLUamuZCREM4qsTlod70I4.crl (hash: Bq8z29I0ebMDWSBtcKy1u4qpodPfGa88+iigjLweHo8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:0a:5f:35:f9:2f:d0:7a:0b:bf:17:df:85:57:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=307a039502d46a6b9909110ce2ab1396877bd08e
Validity
Not Before: Jan 31 12:00:38 2025 GMT
Not After : Feb 1 12:00:38 2025 GMT
Subject: CN=3bc8269a22da18c64260afbb6314a7bf8ebed8ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:af:46:ab:31:ce:04:73:5b:93:7f:7d:87:ed:
8b:fd:a4:ef:ec:5d:e8:e6:52:85:fb:f9:91:26:ed:
94:7a:81:23:2f:c6:2a:8e:89:59:82:d9:d6:e0:79:
71:34:1b:8f:a8:57:52:d7:3a:f1:2b:44:78:93:1e:
ed:8d:ae:d7:55:ec:9a:3b:cf:64:1c:be:51:17:38:
38:13:f1:c7:6c:a9:cf:f2:24:c7:71:0b:6a:7c:6a:
47:0e:9e:4b:70:17:45:36:0a:17:d5:a7:03:f4:cc:
d9:2a:b2:c1:0b:83:9e:47:bf:7c:b3:48:e0:db:08:
d1:cb:a8:9e:55:80:91:44:93:98:d5:96:69:e0:f2:
88:69:25:1c:55:86:54:f0:2c:6c:31:a4:cf:d3:30:
96:27:83:08:a1:d9:e9:30:75:61:be:5f:0e:18:a1:
cf:a5:67:b4:4b:e8:4a:98:43:b1:2e:df:ce:69:87:
05:eb:43:83:cf:a5:8c:20:fd:b3:7b:a3:39:8d:29:
a4:9f:c6:ce:35:74:b0:8d:f9:66:c8:de:b8:56:c5:
6c:7a:ef:cf:50:2d:98:9d:24:65:bc:45:e0:9b:71:
2a:62:a5:fd:ae:2e:8e:35:87:5c:e4:68:74:4b:01:
29:7e:81:fc:15:24:1b:9d:ae:32:d3:97:a1:65:87:
59:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:C8:26:9A:22:DA:18:C6:42:60:AF:BB:63:14:A7:BF:8E:BE:D8:ED
X509v3 Authority Key Identifier:
keyid:30:7A:03:95:02:D4:6A:6B:99:09:11:0C:E2:AB:13:96:87:7B:D0:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MHoDlQLUamuZCREM4qsTlod70I4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d51211-d0bb-4a57-9390-ce2a496fee86/1/MHoDlQLUamuZCREM4qsTlod70I4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d51211-d0bb-4a57-9390-ce2a496fee86/1/MHoDlQLUamuZCREM4qsTlod70I4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:3e:b7:5b:ef:8b:59:2c:72:b6:8f:28:48:24:58:8f:f4:66:
8d:cf:9e:17:ee:8c:35:e2:b7:76:96:dd:64:59:b0:96:b3:f9:
57:fd:6c:52:8b:2a:6a:f5:7c:ef:03:a5:59:6b:96:38:52:18:
d3:98:c2:56:64:a7:67:ed:24:04:6d:0e:ff:af:17:7f:3a:16:
5e:43:f0:8b:a4:ca:a2:e8:6b:69:80:f6:27:57:d1:fe:7f:38:
c0:fa:39:ef:01:fa:4a:3d:27:61:57:5c:ea:e9:7c:39:c9:3f:
10:24:30:50:da:7a:e0:ba:75:e7:31:57:33:31:70:da:b2:af:
0e:a1:21:9c:10:a4:9a:ed:ac:dd:19:65:6f:d0:0a:f8:e4:11:
36:55:72:cf:82:82:30:b3:f9:22:08:86:b4:57:ef:1c:3d:3e:
bb:6f:55:1b:9b:dd:1e:e8:05:c7:07:9c:dc:d3:26:94:a5:d0:
a7:58:eb:91:47:77:2f:6b:84:0d:14:6d:33:15:6a:72:ac:e1:
6b:8f:72:71:37:df:4b:8e:29:f0:f4:7d:a8:c9:96:e9:c3:49:
94:d0:13:a1:90:a9:8b:b4:3a:6d:32:97:4d:ee:ce:7a:44:f5:
32:35:57:b8:1a:e4:54:9b:2d:9c:26:43:b1:62:7f:37:03:d0:
06:e6:59:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:39:14 2025 by rpki-client