Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/e738c9-c821-434e-a26e-8a84bfd8f099/1/Mo1NdPJBWjV_502-BA8BVPHaz3w.mft
File: Mo1NdPJBWjV_502-BA8BVPHaz3w.mft (raw, json)
Hash identifier: Lhu9F8vsh19sB6welKadVbjEj/VQOMKWVFLtO8HoCfo=
Subject key identifier: FD:AA:5A:2D:74:3E:65:8F:C4:7C:35:5C:84:52:04:32:2D:65:3B:EF
Authority key identifier: 32:8D:4D:74:F2:41:5A:35:7F:E7:4D:BE:04:0F:01:54:F1:DA:CF:7C
Certificate issuer: /CN=328d4d74f2415a357fe74dbe040f0154f1dacf7c
Certificate serial: 0194BBCF0496834EB77DF2FA6796FE1A750D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mo1NdPJBWjV_502-BA8BVPHaz3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/e738c9-c821-434e-a26e-8a84bfd8f099/1/Mo1NdPJBWjV_502-BA8BVPHaz3w.mft
Manifest number: 07AA
Signing time: Fri 31 Jan 2025 10:01:33 +0000
Manifest this update: Fri 31 Jan 2025 10:01:33 +0000
Manifest next update: Sat 01 Feb 2025 10:01:33 +0000
Files and hashes: 1: K-39Hqy0AFDZY_cxbUsSzlTGpbc.roa (hash: HOWSSaTxDqgiwOmso54SMRF/DSbrMg9/uUoQhZYJC/c=)
2: Mo1NdPJBWjV_502-BA8BVPHaz3w.crl (hash: 4tzP0iLNrj9Oxxr5zQJQiUEUcBn+lExNaMOuSRVHmIw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cf:04:96:83:4e:b7:7d:f2:fa:67:96:fe:1a:75:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=328d4d74f2415a357fe74dbe040f0154f1dacf7c
Validity
Not Before: Jan 31 10:01:33 2025 GMT
Not After : Feb 1 10:01:33 2025 GMT
Subject: CN=fdaa5a2d743e658fc47c355c845204322d653bef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:a1:f5:fb:27:a5:cc:b6:1a:ea:30:f0:89:c0:
b1:2b:3b:70:23:a0:69:b5:c3:c4:19:be:0f:e9:81:
62:60:c3:d9:79:f1:3e:3f:f7:1f:4a:f3:32:f7:5f:
63:01:80:a5:06:aa:d1:5a:71:ea:c4:c1:5e:08:1f:
95:8d:e7:66:08:56:ec:b7:3d:0b:a0:6a:a2:f2:f9:
fd:23:f3:4f:df:f8:14:56:31:fa:c6:ce:94:09:49:
a9:6c:ff:79:84:d0:fe:43:fd:2d:ed:b2:c4:94:22:
94:bd:ca:1c:b8:02:7c:e7:b3:3a:4a:03:0e:ac:4a:
90:e0:33:33:a0:1e:e8:10:05:fe:a6:c4:90:01:6c:
18:83:d0:6a:18:5f:53:45:d2:99:d3:28:48:88:e5:
2d:cf:89:21:51:d4:47:12:19:f2:b7:ed:52:c7:57:
6a:aa:72:a4:56:fa:07:4b:c8:15:53:79:eb:03:5c:
e9:00:47:96:bf:91:25:9b:e6:6d:2c:78:92:c9:85:
23:e1:89:b8:c7:3b:0d:20:8b:23:35:c3:15:f0:e8:
7e:41:64:f3:52:a0:58:a8:1f:8d:b7:ec:65:ec:55:
e5:af:e7:33:06:52:a1:53:1a:b4:55:9b:25:ac:67:
0d:ca:63:08:73:55:ec:4e:f1:c4:64:3a:24:02:94:
a0:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:AA:5A:2D:74:3E:65:8F:C4:7C:35:5C:84:52:04:32:2D:65:3B:EF
X509v3 Authority Key Identifier:
keyid:32:8D:4D:74:F2:41:5A:35:7F:E7:4D:BE:04:0F:01:54:F1:DA:CF:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mo1NdPJBWjV_502-BA8BVPHaz3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/e738c9-c821-434e-a26e-8a84bfd8f099/1/Mo1NdPJBWjV_502-BA8BVPHaz3w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/e738c9-c821-434e-a26e-8a84bfd8f099/1/Mo1NdPJBWjV_502-BA8BVPHaz3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:c3:00:b6:37:d3:8d:3d:dd:a3:4f:d6:c2:aa:4b:9d:f1:b5:
3e:20:bd:7f:96:b1:af:83:93:81:56:9b:82:0d:ef:a4:25:60:
e9:24:e3:ba:9f:68:03:b0:de:6b:c2:8f:60:10:18:b3:4e:af:
e7:d2:92:66:68:0f:37:34:bb:49:12:4f:58:fb:f8:55:74:6d:
2e:b5:c5:36:36:23:56:ad:54:4d:76:73:7d:93:43:77:e8:d9:
18:96:00:2e:84:28:b4:ee:31:94:f5:59:e8:c8:72:bc:0a:c5:
c3:79:6e:8c:67:b2:b8:94:89:87:f5:1e:2e:cd:1e:57:cc:80:
1a:8b:5a:74:73:30:59:cd:f4:38:e3:d3:b3:c6:89:68:1d:b1:
c2:19:99:fc:bb:9a:71:1d:e7:15:ea:5f:92:7b:54:a3:2c:56:
34:be:d0:45:df:6b:0d:aa:25:f5:f8:b9:54:07:2b:a0:98:7f:
e9:b3:36:b4:05:2f:96:f0:a9:f2:c3:eb:a7:b3:f5:0b:c7:9f:
2e:9d:d7:7d:76:25:14:56:82:6b:f3:ce:7c:98:e1:70:de:12:
9f:1a:d8:d0:a4:98:e2:fc:7f:73:03:24:d0:01:f9:00:06:d8:
2f:79:02:6c:61:4e:a3:1a:e4:ce:0d:08:9b:45:b1:a4:73:1f:
fc:0f:a3:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:49:19 2025 by rpki-client