Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/d8d6ba-ef95-4dc5-be98-671bee2bcc04/1/rMQxZSzc9SHFW8QAXA2uMsoKPsY.mft
File: rMQxZSzc9SHFW8QAXA2uMsoKPsY.mft (raw, json)
Hash identifier: sd/lu26e3Bi48xgc4zhwa6tIcRwOi6b7Z8w5D003SaI=
Subject key identifier: 23:2C:74:7A:70:D3:67:FD:F5:B5:91:84:C9:A5:26:DD:B2:61:61:B2
Authority key identifier: AC:C4:31:65:2C:DC:F5:21:C5:5B:C4:00:5C:0D:AE:32:CA:0A:3E:C6
Certificate issuer: /CN=acc431652cdcf521c55bc4005c0dae32ca0a3ec6
Certificate serial: 0194BCE0DEF8FF7F43B1F4E26A7554073D63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rMQxZSzc9SHFW8QAXA2uMsoKPsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/d8d6ba-ef95-4dc5-be98-671bee2bcc04/1/rMQxZSzc9SHFW8QAXA2uMsoKPsY.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 15:00:41 +0000
Manifest this update: Fri 31 Jan 2025 15:00:41 +0000
Manifest next update: Sat 01 Feb 2025 15:00:41 +0000
Files and hashes: 1: KfdFKMsjdHv-q7t8wKVB68imJFI.roa (hash: /pY/O4QXO7BvEAN+9S1nVpoPg09znAHFBvFlWdPOJZg=)
2: bChpq7eC8HUZiOWdmJZzTGK-ZCk.roa (hash: Sf8LAE4WGl0MHG0bbn/YLP58QNfCYpZtLL1+SAh0T/A=)
3: rMQxZSzc9SHFW8QAXA2uMsoKPsY.crl (hash: 2AksMakfWDvKwC9sMiuFwbXKWf++pVcHD+xLjHUlnlo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:de:f8:ff:7f:43:b1:f4:e2:6a:75:54:07:3d:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acc431652cdcf521c55bc4005c0dae32ca0a3ec6
Validity
Not Before: Jan 31 15:00:41 2025 GMT
Not After : Feb 1 15:00:41 2025 GMT
Subject: CN=232c747a70d367fdf5b59184c9a526ddb26161b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:9e:f4:00:3d:00:ab:3e:00:71:79:1e:90:6e:
c8:96:4f:a1:b3:c3:d0:c1:d9:72:af:a2:68:92:89:
75:d0:eb:5f:d3:ba:88:e0:db:2a:1d:33:44:2d:f4:
8b:8f:07:28:de:cf:e5:bb:4d:3a:63:fe:78:c6:76:
61:40:c8:8e:0e:e8:f6:7b:3c:19:76:75:fb:e7:20:
f9:2a:bd:f0:86:1d:c6:b4:36:81:36:de:dd:b0:76:
cb:f0:06:09:2b:e2:f6:0d:7a:e1:59:a0:cc:3a:bc:
d9:46:9b:08:a8:2d:aa:cf:1d:32:8f:91:dc:21:92:
26:05:6a:91:b4:eb:f1:02:af:83:cf:16:a3:3e:3e:
25:55:22:fc:09:63:2f:aa:52:a4:18:ad:04:75:fa:
8a:38:f6:d6:e2:67:42:9b:dd:b7:3d:39:d4:6e:d6:
52:05:0e:7f:4a:03:46:24:fa:47:a8:28:ca:90:f7:
02:ca:d1:14:60:72:af:62:6b:95:64:be:df:0a:8f:
83:72:2f:e7:51:3e:84:7f:e3:6f:48:5f:da:aa:99:
41:79:c3:c8:64:63:18:04:03:dc:5d:d5:fd:45:fc:
d1:db:82:9f:a1:b6:10:19:74:c6:36:30:a7:2e:71:
fb:37:17:5d:d5:f2:6d:6b:1a:86:9d:df:ec:e4:e1:
8e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:2C:74:7A:70:D3:67:FD:F5:B5:91:84:C9:A5:26:DD:B2:61:61:B2
X509v3 Authority Key Identifier:
keyid:AC:C4:31:65:2C:DC:F5:21:C5:5B:C4:00:5C:0D:AE:32:CA:0A:3E:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rMQxZSzc9SHFW8QAXA2uMsoKPsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d8d6ba-ef95-4dc5-be98-671bee2bcc04/1/rMQxZSzc9SHFW8QAXA2uMsoKPsY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d8d6ba-ef95-4dc5-be98-671bee2bcc04/1/rMQxZSzc9SHFW8QAXA2uMsoKPsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:93:8c:22:2a:d2:be:fc:8a:ef:3f:c2:1b:45:98:5c:89:c3:
fb:de:5b:57:7f:dc:5a:18:69:31:15:ab:23:74:d8:88:35:7f:
22:bd:94:67:9a:bd:2b:aa:ee:cd:e7:8c:21:65:f3:8d:2b:ce:
de:fa:7a:69:af:51:57:ae:ed:8a:be:a2:b7:24:1c:9c:ce:79:
2f:9a:1a:fe:98:7e:d5:05:15:18:44:8f:53:78:86:39:66:be:
fd:35:dd:ce:3d:16:aa:aa:3c:9b:06:9c:ec:24:f4:a8:5e:8c:
3a:dc:8d:72:17:ad:aa:f7:69:27:4a:bc:21:c6:5b:82:fc:9a:
a4:0d:3c:c2:de:ed:0c:45:9f:cc:1b:5d:09:c9:40:4a:7d:02:
ef:64:3b:90:5a:55:6e:a5:c4:59:64:ac:af:eb:5c:ad:37:78:
b4:d2:d3:23:ec:e3:ef:de:de:5b:10:be:9e:80:08:81:b6:5c:
e8:9a:0e:4a:46:b6:59:ab:84:c1:2d:d6:6e:35:04:9f:9d:3a:
36:eb:b4:f5:d1:48:a4:dd:05:0a:a2:13:b9:cc:2b:8d:c9:b1:
ed:50:d4:03:60:a7:f9:fb:09:30:98:f4:56:b2:67:21:e7:ed:
a6:82:33:63:bc:33:e2:e8:38:1a:f3:ec:68:1d:e1:2e:44:ab:
f9:61:36:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:21:07 2025 by rpki-client