Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/9453a0-e655-480e-b6a9-e39524e7a6ed/1/mVXFpxN-tdR-ok4X0n-pLQtC-9g.mft
File: mVXFpxN-tdR-ok4X0n-pLQtC-9g.mft (raw, json)
Hash identifier: czIFlhKZjeihTZEd3GDQM/a85oVoesMZP71cJWxN4Mo=
Subject key identifier: E6:F0:B8:C1:8A:9C:40:17:0F:7A:75:6F:49:71:32:63:4E:68:5C:B5
Authority key identifier: 99:55:C5:A7:13:7E:B5:D4:7E:A2:4E:17:D2:7F:A9:2D:0B:42:FB:D8
Certificate issuer: /CN=9955c5a7137eb5d47ea24e17d27fa92d0b42fbd8
Certificate serial: 0194BBCEE6E9C32A081890A9CE988D5C85A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mVXFpxN-tdR-ok4X0n-pLQtC-9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/9453a0-e655-480e-b6a9-e39524e7a6ed/1/mVXFpxN-tdR-ok4X0n-pLQtC-9g.mft
Manifest number: 130D
Signing time: Fri 31 Jan 2025 10:01:26 +0000
Manifest this update: Fri 31 Jan 2025 10:01:26 +0000
Manifest next update: Sat 01 Feb 2025 10:01:26 +0000
Files and hashes: 1: 2z0NeYZe1xNl9FiaXMK1zDvmewM.roa (hash: cOILWkUhsnduTiBD7sHiLuG2BYfCl/U6Tpdfh+0XXP8=)
2: 5Sxq5_88aKl6Q1AixLmSpdxssj4.roa (hash: 930p4kPdeb7NPu1eD23W3ram0O2yZZYGtkILA0nswPo=)
3: BnHU_9oB_ewnVOgPSPpU2bWe8Zk.roa (hash: go8wZXjflDuAlY6EuMTLQuty8jZX31nqsRbiTUQs4zs=)
4: mVXFpxN-tdR-ok4X0n-pLQtC-9g.crl (hash: GbGRsvdX2eJ2xPmvZO1VijLBCzS6EGFdsalh267QJE0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:e6:e9:c3:2a:08:18:90:a9:ce:98:8d:5c:85:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9955c5a7137eb5d47ea24e17d27fa92d0b42fbd8
Validity
Not Before: Jan 31 10:01:26 2025 GMT
Not After : Feb 1 10:01:26 2025 GMT
Subject: CN=e6f0b8c18a9c40170f7a756f497132634e685cb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:55:5d:b9:05:a1:aa:0b:42:7b:ff:2e:27:e5:
d0:60:39:7f:e8:f5:c8:4b:d3:df:d3:1a:08:05:b2:
7b:f2:61:c3:f4:74:1a:cc:a0:f2:ed:e7:06:a7:f9:
7b:99:87:58:a0:77:0a:38:78:47:42:16:76:8e:58:
f4:4d:87:e8:39:e5:a8:83:1b:0a:7b:f6:23:74:c9:
5d:cf:a1:a9:11:8b:c5:82:ed:cb:1f:f0:e0:42:5e:
6c:bd:f7:7c:11:56:bd:b7:44:3d:a6:0e:7c:4b:f3:
93:98:c0:e0:e3:45:82:b6:fa:c3:72:6d:7a:34:e5:
45:ec:3d:8a:d7:76:93:e1:cf:82:4b:da:37:56:e8:
48:f0:cb:fa:52:7f:a7:c1:7a:48:13:05:8a:dd:bb:
04:84:ec:87:60:8d:9c:48:eb:a7:46:d6:a9:6c:f4:
27:bc:67:29:65:ab:4f:c8:29:2c:2e:87:23:2a:56:
d1:60:b0:b4:9b:97:b1:24:d9:e8:7f:b4:90:2a:5f:
85:e7:07:19:10:f8:e0:61:ed:99:8f:72:23:76:dc:
c3:71:d6:91:aa:52:bc:78:5d:1f:67:cb:38:54:b1:
ee:d6:f3:a4:dd:62:be:14:79:00:78:5d:ba:cb:69:
e7:12:88:bc:b1:4f:b5:5d:43:c0:b5:16:9a:f1:92:
20:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:F0:B8:C1:8A:9C:40:17:0F:7A:75:6F:49:71:32:63:4E:68:5C:B5
X509v3 Authority Key Identifier:
keyid:99:55:C5:A7:13:7E:B5:D4:7E:A2:4E:17:D2:7F:A9:2D:0B:42:FB:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mVXFpxN-tdR-ok4X0n-pLQtC-9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/9453a0-e655-480e-b6a9-e39524e7a6ed/1/mVXFpxN-tdR-ok4X0n-pLQtC-9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/9453a0-e655-480e-b6a9-e39524e7a6ed/1/mVXFpxN-tdR-ok4X0n-pLQtC-9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:03:fe:0d:52:fe:99:4f:af:63:dc:32:29:8a:e7:d2:3a:51:
54:6d:06:8d:69:46:94:ca:fb:77:8a:b3:7a:72:20:e8:0d:99:
7d:78:a7:86:13:e4:a9:96:1d:4c:1b:f4:ea:64:d7:84:18:ab:
ce:69:94:e8:ef:aa:30:c1:01:12:c8:fb:c8:b6:05:29:8e:ad:
58:7d:ca:ae:8e:11:f7:c6:50:94:d5:ec:03:3c:9e:0f:97:b4:
42:91:ca:7d:32:1c:a5:66:76:b0:18:54:cf:4c:6c:e4:db:ed:
d3:f9:a7:76:40:97:cd:6b:4c:c2:3a:db:42:8f:01:86:bc:72:
cb:c4:61:a7:2d:fc:53:71:75:5c:4c:00:cf:fe:73:fa:6e:c7:
5f:02:d1:21:c4:6f:8d:3d:dd:3a:55:bd:03:b8:b9:82:f2:d1:
4e:13:63:8e:d9:b4:68:21:db:2d:34:49:4f:35:6c:5f:79:eb:
3b:fd:bb:d6:2a:7d:3b:ab:14:bf:16:23:53:45:bc:48:d2:eb:
4c:79:d2:99:7b:54:f5:ee:d5:84:fe:3c:05:97:5c:b7:4f:4e:
28:2e:76:b5:ef:1a:b4:e6:51:93:2e:3c:a9:8e:e7:88:0a:69:
4d:8f:89:e7:64:02:37:45:d5:b6:27:ce:b2:56:b1:55:eb:d7:
d8:b2:e8:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:13 2025 by rpki-client