Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/3663ba-a80d-4108-8708-0b15d97ad561/1/mWsinL82Z6zid7FgBcOQctBnP88.mft
File: mWsinL82Z6zid7FgBcOQctBnP88.mft (raw, json)
Hash identifier: K9WMmXzYeRPnzhzmdaKL9gFJoiIewTiET9guWlgn3Z0=
Subject key identifier: 75:3D:A8:45:CD:2D:9B:07:71:AA:90:35:BD:11:68:12:10:C7:B2:5D
Authority key identifier: 99:6B:22:9C:BF:36:67:AC:E2:77:B1:60:05:C3:90:72:D0:67:3F:CF
Certificate issuer: /CN=996b229cbf3667ace277b16005c39072d0673fcf
Certificate serial: 0194BC72DB696C9363D092ABD4C727504ABF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mWsinL82Z6zid7FgBcOQctBnP88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/3663ba-a80d-4108-8708-0b15d97ad561/1/mWsinL82Z6zid7FgBcOQctBnP88.mft
Manifest number: 0290
Signing time: Fri 31 Jan 2025 13:00:31 +0000
Manifest this update: Fri 31 Jan 2025 13:00:31 +0000
Manifest next update: Sat 01 Feb 2025 13:00:31 +0000
Files and hashes: 1: YKl2f2IPF1HilabBLdWdBFhWqWU.roa (hash: Ji5xPVt5I1nXvu8659S7ksrNu2RDx/GRkGsd+dxvHXE=)
2: mWsinL82Z6zid7FgBcOQctBnP88.crl (hash: CyN+hkCNRidVxvCsKnFvA4ySFXqikklUDTxRDUMR6bw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:db:69:6c:93:63:d0:92:ab:d4:c7:27:50:4a:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=996b229cbf3667ace277b16005c39072d0673fcf
Validity
Not Before: Jan 31 13:00:31 2025 GMT
Not After : Feb 1 13:00:31 2025 GMT
Subject: CN=753da845cd2d9b0771aa9035bd11681210c7b25d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:35:5b:fa:db:45:38:26:ff:1b:88:77:9a:6f:
62:0e:ce:cd:db:e5:82:5b:51:bc:66:50:3e:0f:6e:
7d:57:dd:14:57:cd:36:86:77:f3:a3:b0:52:f8:c4:
a6:44:49:2f:d8:c0:10:a0:fe:fa:d2:c8:c0:7b:79:
e8:9c:f6:1f:7a:f1:19:8e:77:c9:a5:b9:fe:94:62:
58:5c:f0:fb:ee:92:c2:61:94:44:b6:8e:19:cd:54:
74:60:f4:9e:99:b6:35:9e:8a:c1:a6:1a:7d:ce:75:
6c:1b:cf:5d:d8:55:c3:30:1a:fa:ee:59:b2:90:53:
db:06:34:56:a6:07:0c:a5:6d:fe:4e:56:31:13:15:
49:78:8a:23:1b:50:66:2e:a6:15:d3:25:98:df:fd:
11:15:96:82:6e:a5:fa:5b:91:1f:18:b8:96:50:d7:
72:02:b0:40:aa:e9:d8:18:bc:85:14:18:f3:65:b4:
6c:5e:6c:f9:38:02:56:c6:b5:c8:88:89:4b:56:4f:
f8:9c:59:d0:df:5c:fe:b4:05:d7:f3:76:2d:9e:51:
03:31:50:00:f2:c4:95:7f:b2:d7:2f:0c:79:6b:95:
bd:f8:05:43:ea:11:8d:8d:a2:d8:4f:08:b1:7d:22:
e2:0f:31:5c:09:8f:7f:d3:11:5c:ee:15:76:e6:d9:
c8:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:3D:A8:45:CD:2D:9B:07:71:AA:90:35:BD:11:68:12:10:C7:B2:5D
X509v3 Authority Key Identifier:
keyid:99:6B:22:9C:BF:36:67:AC:E2:77:B1:60:05:C3:90:72:D0:67:3F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mWsinL82Z6zid7FgBcOQctBnP88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/3663ba-a80d-4108-8708-0b15d97ad561/1/mWsinL82Z6zid7FgBcOQctBnP88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/3663ba-a80d-4108-8708-0b15d97ad561/1/mWsinL82Z6zid7FgBcOQctBnP88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:6a:76:55:90:ec:f5:5b:8e:20:7b:fc:1c:3c:e9:b6:a5:36:
cf:9f:a7:26:df:d1:c8:e0:0a:f3:ab:89:1e:6d:54:2f:b0:c0:
b4:a1:1a:a2:63:55:42:23:e7:b8:01:da:11:f2:0d:2b:fd:00:
68:ab:8f:9c:8c:7a:b9:c6:da:d8:c0:84:c5:ed:96:3d:48:5b:
2a:2e:c1:7c:56:51:4a:4b:3a:a6:2f:21:2b:d8:bf:b2:5c:ee:
90:a3:29:f1:05:45:ef:de:2a:9f:49:49:ca:bd:3e:bf:f3:15:
91:17:4a:a8:be:e2:84:fe:ba:6d:c0:34:47:cc:63:f7:18:52:
de:c1:da:16:ed:31:16:03:da:84:5f:1c:ca:be:66:84:6d:b1:
f6:29:ee:ca:6e:e6:43:cc:6b:92:30:92:c3:53:74:ab:de:0c:
51:4e:29:19:d9:c4:5f:64:16:a7:39:77:c5:08:1e:d3:99:18:
e6:65:19:63:9e:ae:64:a6:0e:50:9f:30:a2:c3:66:af:d6:a4:
bb:9a:ee:cd:e9:3d:56:12:c4:18:47:4f:0d:ec:0e:ac:c9:6b:
c5:b0:ef:c7:dd:52:e3:2c:c8:df:ac:0f:6d:5b:a4:fe:28:0e:
70:61:2b:65:78:36:d9:00:b7:a2:91:74:d7:64:4a:76:6f:c4:
ef:11:f4:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:37:19 2025 by rpki-client