Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/fe5041-d3f4-499c-9853-22d10635f0c4/1/m8NQvGE9Bd6RCo2ibJHClxcQeLY.mft
File: m8NQvGE9Bd6RCo2ibJHClxcQeLY.mft (raw, json)
Hash identifier: A1FYc5Mnyzc5S8KKwtSVfhNo2LS+n9yu2+NGpu/GAL4=
Subject key identifier: 53:07:30:1B:C0:4C:3E:50:59:B0:71:1B:3F:68:AE:A0:4C:3C:E7:F5
Authority key identifier: 9B:C3:50:BC:61:3D:05:DE:91:0A:8D:A2:6C:91:C2:97:17:10:78:B6
Certificate issuer: /CN=9bc350bc613d05de910a8da26c91c297171078b6
Certificate serial: 0194BC04DE788B10DBCFF25FC91CB063028D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m8NQvGE9Bd6RCo2ibJHClxcQeLY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/fe5041-d3f4-499c-9853-22d10635f0c4/1/m8NQvGE9Bd6RCo2ibJHClxcQeLY.mft
Manifest number: 1129
Signing time: Fri 31 Jan 2025 11:00:23 +0000
Manifest this update: Fri 31 Jan 2025 11:00:23 +0000
Manifest next update: Sat 01 Feb 2025 11:00:23 +0000
Files and hashes: 1: L3trElfXoCVLz1PtzkkdBJeOsww.roa (hash: YCjBwT8TXGDjubr28OCLsTgDEI+YuVxGgn8zV5rTLys=)
2: m8NQvGE9Bd6RCo2ibJHClxcQeLY.crl (hash: 6SSDe5IP2PWrVxv6ZWEyuKEeBnjYs+gNTWnPCBy6PiQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:de:78:8b:10:db:cf:f2:5f:c9:1c:b0:63:02:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bc350bc613d05de910a8da26c91c297171078b6
Validity
Not Before: Jan 31 11:00:23 2025 GMT
Not After : Feb 1 11:00:23 2025 GMT
Subject: CN=5307301bc04c3e5059b0711b3f68aea04c3ce7f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:55:cc:7c:17:33:49:4a:a6:ec:c2:8a:18:92:
a5:4b:30:bc:88:21:9d:e2:05:1f:b5:c2:46:57:8c:
47:56:d8:65:46:dd:a0:a4:36:3a:f1:cf:69:87:e8:
c1:a8:1c:26:e0:b6:57:30:5a:3c:89:d5:fa:0e:d7:
35:0f:7f:ef:2f:bd:c3:85:fd:c8:a8:94:84:79:ad:
a8:27:d5:f5:e9:78:ec:22:99:03:04:8b:1a:d3:a2:
57:31:e2:33:80:19:80:38:43:8e:5b:94:85:9b:c5:
10:84:19:51:96:0c:f3:63:c6:7d:99:49:e7:08:a3:
5a:4c:8a:46:a2:5c:a0:c2:3a:0c:05:88:8f:a5:79:
f6:ba:7b:89:a5:df:5c:67:e7:b6:db:d5:73:28:c9:
3c:9b:5e:99:17:b5:51:95:15:5b:f7:68:ef:4a:9b:
b6:02:0c:99:14:69:0c:d4:99:32:9a:55:eb:44:74:
03:16:35:46:8c:3e:81:7a:c3:d9:41:d5:a5:46:19:
af:26:55:50:dd:d9:aa:75:0f:4d:da:1f:c7:53:2a:
6f:21:98:0f:7f:ed:06:57:71:0e:4f:4d:98:6f:07:
4c:4f:24:9f:bd:01:cd:5a:34:53:8d:bb:01:92:2b:
d6:ce:4a:c9:b1:26:2b:b9:20:68:60:0f:8b:fd:e7:
b7:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:07:30:1B:C0:4C:3E:50:59:B0:71:1B:3F:68:AE:A0:4C:3C:E7:F5
X509v3 Authority Key Identifier:
keyid:9B:C3:50:BC:61:3D:05:DE:91:0A:8D:A2:6C:91:C2:97:17:10:78:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m8NQvGE9Bd6RCo2ibJHClxcQeLY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/fe5041-d3f4-499c-9853-22d10635f0c4/1/m8NQvGE9Bd6RCo2ibJHClxcQeLY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/fe5041-d3f4-499c-9853-22d10635f0c4/1/m8NQvGE9Bd6RCo2ibJHClxcQeLY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:20:7a:5e:c2:c8:5e:a1:65:87:d7:15:c0:24:71:6f:f2:50:
c2:e7:5c:b1:c5:81:a1:00:47:68:8c:4c:38:fc:1b:8e:a8:d4:
53:f6:bc:26:52:fb:c3:c1:c2:06:4b:87:16:18:d5:e5:c7:c2:
c4:96:b3:5f:83:a3:8f:85:6f:45:fa:3a:de:82:50:c1:80:b5:
46:1a:11:58:a6:38:cf:2f:2b:60:c6:bc:49:36:f3:8c:cf:d1:
51:34:d4:3c:84:f2:4d:bf:0e:24:2d:04:5d:7a:9b:eb:f0:83:
8c:87:11:ba:7e:4a:4c:0b:b3:ba:5a:a7:64:b6:82:92:e3:9b:
8e:02:c4:a9:01:72:48:a8:56:2b:8d:86:2e:57:0c:7f:6c:7d:
f4:9e:a3:21:f1:8a:e7:2b:18:50:08:3c:f8:91:63:49:fe:a3:
1e:a5:5c:a5:ed:07:69:e5:01:ec:63:81:ae:32:2e:58:05:2f:
1e:93:99:91:cb:69:70:57:45:69:a5:cb:22:2d:a7:f6:16:59:
1c:b1:ac:9d:df:ea:67:50:bc:9a:80:68:d9:25:14:00:84:d7:
a1:55:ab:62:f0:8f:0b:4c:ef:19:1a:b3:9a:a8:b2:b6:4b:71:
7e:86:19:f5:19:35:f9:8b:61:45:10:2f:26:af:50:6e:d3:6b:
04:27:cd:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:44:55 2025 by rpki-client