Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/ec401c-44e4-4fcc-b037-3bc44101ec00/1/mPtYLBzRiB8tRtCnA4LKtpIl8ak.mft
File: mPtYLBzRiB8tRtCnA4LKtpIl8ak.mft (raw, json)
Hash identifier: 7MlZxncU2AOjNqPl3kBmwXq36qACVtQQIdn7kG4aNSM=
Subject key identifier: 20:E1:D4:15:24:E1:02:46:28:C6:7B:99:10:81:B2:EA:6E:CD:E5:02
Authority key identifier: 98:FB:58:2C:1C:D1:88:1F:2D:46:D0:A7:03:82:CA:B6:92:25:F1:A9
Certificate issuer: /CN=98fb582c1cd1881f2d46d0a70382cab69225f1a9
Certificate serial: 0194BD4E4749382CE06E54C3D2B8E4E6D6FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mPtYLBzRiB8tRtCnA4LKtpIl8ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/ec401c-44e4-4fcc-b037-3bc44101ec00/1/mPtYLBzRiB8tRtCnA4LKtpIl8ak.mft
Manifest number: 01A0
Signing time: Fri 31 Jan 2025 17:00:11 +0000
Manifest this update: Fri 31 Jan 2025 17:00:11 +0000
Manifest next update: Sat 01 Feb 2025 17:00:11 +0000
Files and hashes: 1: ZGE5AizrKbXlhiOgUpEa0BfhvKE.roa (hash: Sdtf+jxpdyeU8qrUbikLaDInkHhOfKlXAEXYnF5rIdk=)
2: mPtYLBzRiB8tRtCnA4LKtpIl8ak.crl (hash: HBPOVNiFJC6nCD9u0Xb+mD4Y6aLmaOI/P89kz5/xr/4=)
3: ubYQhCPAc1y9PWfDDFmtFKcMhjQ.roa (hash: 4pYqeQ4V8Sj7VAcygq8v+qY+0dXhWe9XfBkV8soN9nY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:47:49:38:2c:e0:6e:54:c3:d2:b8:e4:e6:d6:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98fb582c1cd1881f2d46d0a70382cab69225f1a9
Validity
Not Before: Jan 31 17:00:11 2025 GMT
Not After : Feb 1 17:00:11 2025 GMT
Subject: CN=20e1d41524e1024628c67b991081b2ea6ecde502
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:78:c2:76:c4:85:a6:d4:c6:f6:3b:9f:80:6c:
19:3a:ef:ea:07:04:aa:12:dd:fb:bf:14:81:78:49:
c9:6f:fa:5e:0b:24:11:bd:85:34:01:75:40:6e:6f:
df:59:e2:cb:be:e9:8a:06:7d:db:64:f6:bd:35:be:
cb:d8:d4:02:d8:5d:6e:40:8b:c0:6b:c0:df:52:22:
68:ab:c8:74:2f:55:a7:fe:52:a2:77:fb:24:b2:4f:
3f:1c:d3:ab:59:16:d0:de:49:cb:70:48:8b:48:f7:
01:2c:c5:3f:93:94:13:6f:79:0f:b0:4f:f4:79:70:
a4:f5:5f:cd:82:90:0d:e4:97:42:e9:51:c9:b7:55:
c3:6e:14:90:a3:c5:4c:75:c6:6e:a1:f0:70:53:bc:
49:0c:b3:a2:0c:5c:f7:22:3a:55:8d:d5:ab:81:b5:
ba:19:be:cc:53:62:ed:2f:d2:68:c3:a7:86:5b:da:
ce:bf:5a:34:04:d4:44:9a:9d:42:7f:89:ec:b1:06:
75:84:12:6f:86:ca:97:6e:95:51:6c:ed:4f:e2:0d:
97:da:79:49:52:61:89:a9:5a:54:40:12:e4:f4:ac:
86:21:e3:b8:70:cc:ff:d1:0a:17:cb:5b:33:e7:e1:
1b:48:aa:ea:be:16:f9:f3:91:f4:23:96:d2:5e:44:
3a:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:E1:D4:15:24:E1:02:46:28:C6:7B:99:10:81:B2:EA:6E:CD:E5:02
X509v3 Authority Key Identifier:
keyid:98:FB:58:2C:1C:D1:88:1F:2D:46:D0:A7:03:82:CA:B6:92:25:F1:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mPtYLBzRiB8tRtCnA4LKtpIl8ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ec401c-44e4-4fcc-b037-3bc44101ec00/1/mPtYLBzRiB8tRtCnA4LKtpIl8ak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ec401c-44e4-4fcc-b037-3bc44101ec00/1/mPtYLBzRiB8tRtCnA4LKtpIl8ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:eb:3a:20:c2:44:ca:d0:4f:b6:bf:07:a9:08:f1:ce:bc:ef:
44:97:ac:92:44:26:8a:a7:86:7c:49:c4:10:ee:50:6e:5b:b7:
b3:82:f5:00:26:a2:11:f1:66:67:6f:29:b0:27:b1:76:24:5e:
79:04:83:39:23:0f:a8:f0:20:11:c9:65:f7:76:5c:83:74:8c:
02:e5:23:9f:e8:8d:77:80:5d:05:2a:39:26:08:6b:98:9b:a6:
6c:70:92:56:98:38:02:2d:31:11:d2:fd:60:57:04:8a:77:ba:
5e:90:7c:2e:ac:3d:70:88:94:96:22:ec:41:16:f6:be:6c:69:
b1:ac:b8:a2:0f:6a:fd:d8:b1:65:10:dd:86:e1:3c:a7:94:6f:
50:6e:41:60:50:4b:eb:69:71:f4:26:0b:57:8e:35:18:d6:5c:
50:2c:cf:7f:63:75:c2:bd:b7:fa:38:6c:0f:2c:79:c1:de:a2:
2e:5d:90:17:3b:ff:8c:be:00:6b:68:e8:63:f1:6c:76:b2:8f:
66:b3:14:8c:40:78:c5:93:66:94:17:31:29:da:85:78:cc:93:
92:5c:54:3c:f7:d7:90:df:4a:9e:c2:75:5b:45:e1:03:9e:06:
f5:c4:79:88:f8:b1:af:ca:f5:5e:08:3e:98:df:29:ff:73:88:
a4:70:da:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:49:44 2025 by rpki-client