Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/c934da-978a-46f9-87a7-4f219db78508/1/MDeJJY5gnz5VjXezv9CKzzUV-pI.mft
File: MDeJJY5gnz5VjXezv9CKzzUV-pI.mft (raw, json)
Hash identifier: IlgK7INCe4q2YIz99Dd+K9UCQLUQ+w/vf3x8qBVC6fY=
Subject key identifier: 5A:58:CF:29:46:7F:7C:09:B2:32:DA:14:32:91:C9:6A:69:1D:3A:83
Authority key identifier: 30:37:89:25:8E:60:9F:3E:55:8D:77:B3:BF:D0:8A:CF:35:15:FA:92
Certificate issuer: /CN=303789258e609f3e558d77b3bfd08acf3515fa92
Certificate serial: 0194BBCDEB31B3C1A782D100CC55426CF786
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MDeJJY5gnz5VjXezv9CKzzUV-pI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/c934da-978a-46f9-87a7-4f219db78508/1/MDeJJY5gnz5VjXezv9CKzzUV-pI.mft
Manifest number: 0E04
Signing time: Fri 31 Jan 2025 10:00:21 +0000
Manifest this update: Fri 31 Jan 2025 10:00:21 +0000
Manifest next update: Sat 01 Feb 2025 10:00:21 +0000
Files and hashes: 1: CxgP4WGmDc-j3ZUPD_Rcb4uV8ns.roa (hash: XodVBcVXpLoQd1C4J0bRPfMq7vIVpbrh7r32+gpZkVk=)
2: MDeJJY5gnz5VjXezv9CKzzUV-pI.crl (hash: lrS4ECi0HHPXBG6AQdD+/L4jAuHFCeWgfpP9ZBOsRqI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:eb:31:b3:c1:a7:82:d1:00:cc:55:42:6c:f7:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=303789258e609f3e558d77b3bfd08acf3515fa92
Validity
Not Before: Jan 31 10:00:21 2025 GMT
Not After : Feb 1 10:00:21 2025 GMT
Subject: CN=5a58cf29467f7c09b232da143291c96a691d3a83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:e1:c6:1b:94:46:c5:19:40:8d:97:77:b7:46:
00:f8:fd:ff:e2:d5:b6:3a:2d:db:83:a0:df:37:22:
73:1f:a3:61:27:8a:59:8a:4b:29:26:56:7a:4f:84:
7b:12:2f:94:30:bf:a5:32:c5:a0:87:12:43:12:23:
de:dd:27:4a:21:e1:5e:22:0b:f9:36:fa:93:db:af:
3c:55:07:1d:57:7f:2d:ed:1d:f3:0d:aa:c2:06:1d:
67:5b:6c:5e:b5:32:72:f1:56:97:27:ca:c5:cd:87:
fa:7d:6b:37:de:ac:8e:4f:eb:be:72:06:7c:92:e7:
8b:b6:37:97:cd:0b:6e:49:5e:4a:05:55:81:e1:25:
58:45:86:56:f6:9d:53:02:b1:1a:dd:bc:a8:18:fc:
c2:df:23:37:25:79:02:a9:9d:93:d0:69:3e:24:e7:
f2:fc:91:72:4d:ef:62:c1:10:7b:21:11:e6:eb:f2:
cb:f9:bc:9d:9e:51:31:f2:a5:8d:d7:dc:c7:3d:a6:
fd:14:5c:a9:79:ce:26:50:50:43:2c:56:5c:85:14:
46:8b:60:dd:e7:03:82:e5:f0:67:9d:48:da:cb:5a:
42:35:c0:61:df:97:c2:86:84:e2:10:1f:70:b5:c9:
ad:5d:86:be:ea:11:25:0e:71:33:24:54:a2:ab:cd:
22:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:58:CF:29:46:7F:7C:09:B2:32:DA:14:32:91:C9:6A:69:1D:3A:83
X509v3 Authority Key Identifier:
keyid:30:37:89:25:8E:60:9F:3E:55:8D:77:B3:BF:D0:8A:CF:35:15:FA:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MDeJJY5gnz5VjXezv9CKzzUV-pI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/c934da-978a-46f9-87a7-4f219db78508/1/MDeJJY5gnz5VjXezv9CKzzUV-pI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/c934da-978a-46f9-87a7-4f219db78508/1/MDeJJY5gnz5VjXezv9CKzzUV-pI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:c1:82:ac:70:c3:c4:e0:b4:40:52:9e:4c:85:e2:b2:b2:a7:
93:96:84:c0:91:1d:cb:3c:66:f2:b7:1b:11:71:94:45:97:b1:
82:1a:9c:ee:c4:b2:01:0f:d4:78:e1:62:c5:2a:34:3c:3c:f3:
45:59:8a:07:40:b0:f8:0f:42:ab:0a:5b:9b:c4:93:be:80:ee:
26:a9:9b:e2:5a:b7:7e:4c:59:97:c2:a0:79:55:9e:1e:0e:16:
44:fa:92:b3:51:31:a5:2f:f2:64:63:c4:22:59:e1:2f:ed:d3:
45:c0:f6:68:63:92:51:03:fd:3f:61:c4:c5:9f:25:9a:25:52:
4e:a0:85:14:11:7b:ab:cc:fd:e0:8c:cb:29:35:b3:bb:46:fa:
47:e4:e2:ec:ab:66:a4:5d:bb:ea:19:41:cc:06:11:f6:06:5f:
a7:86:15:d0:cb:f1:52:6b:8b:cf:29:32:54:9b:6f:57:21:9d:
8b:10:2b:6b:76:22:39:ce:b5:8f:10:b5:84:8e:61:80:5c:de:
08:2f:42:7f:e0:a5:66:9f:2a:e7:cc:cc:93:67:87:a2:fc:bf:
c6:6c:88:ad:7d:d1:18:f5:15:e0:9b:ed:e0:4d:33:6d:ef:f2:
c9:96:69:40:f1:e9:3d:08:ca:4f:7c:0d:c5:f6:3b:38:b8:df:
d6:ce:a0:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 12:41:44 2025 by rpki-client