Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/5ab056-4bbe-484a-9352-8ac58f273756/1/MH5-J2p99YDftwcx1Int5EfgfQY.mft
File: MH5-J2p99YDftwcx1Int5EfgfQY.mft (raw, json)
Hash identifier: tGKWpcWuBxc5fTfY18GVHxq90ZGVRA1E0U4NHZD/0KY=
Subject key identifier: E9:56:86:1A:42:40:F0:16:A4:1E:D6:8D:7A:41:90:BB:0F:B3:8C:E4
Authority key identifier: 30:7E:7E:27:6A:7D:F5:80:DF:B7:07:31:D4:89:ED:E4:47:E0:7D:06
Certificate issuer: /CN=307e7e276a7df580dfb70731d489ede447e07d06
Certificate serial: 01870DFA6916D3805FCEFE0BC1B054931FA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MH5-J2p99YDftwcx1Int5EfgfQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/5ab056-4bbe-484a-9352-8ac58f273756/1/MH5-J2p99YDftwcx1Int5EfgfQY.mft
Manifest number: 0A89
Signing time: Thu 23 Mar 2023 10:18:47 +0000
Manifest this update: Thu 23 Mar 2023 10:18:47 +0000
Manifest next update: Fri 24 Mar 2023 10:18:47 +0000
Files and hashes: 1: 29bzbHvWnDslANyYyI8Wt1u4pPM.roa (hash: JJKlaNM8cGpUVIJ2wRuig1EZD8bLEa6oCenwLxsnmgg=)
2: MH5-J2p99YDftwcx1Int5EfgfQY.crl (hash: LVV1l2Mg4s2qaqmc9fna7irRbTLeQYyXSdC3cx+7jBQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:0d:fa:69:16:d3:80:5f:ce:fe:0b:c1:b0:54:93:1f:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=307e7e276a7df580dfb70731d489ede447e07d06
Validity
Not Before: Mar 23 10:18:47 2023 GMT
Not After : Mar 24 10:18:47 2023 GMT
Subject: CN=e956861a4240f016a41ed68d7a4190bb0fb38ce4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:bd:d5:86:c6:8b:37:fb:a8:a0:b9:73:54:f4:
6f:f3:cb:9d:bb:ca:c3:d2:38:55:1e:7d:5c:27:c7:
f6:0c:09:b4:de:51:01:47:40:51:3f:1b:f8:df:15:
e2:8d:64:2e:6e:7b:fe:75:99:3a:ed:b3:af:a9:b2:
ff:65:a1:27:09:45:37:a8:93:d4:b8:45:6f:92:4b:
f8:ab:a0:b9:1e:82:26:5e:e2:00:9a:6b:eb:df:06:
69:5f:c4:4a:1c:45:2b:51:bf:ca:be:01:22:48:2c:
bf:43:d1:d1:7f:22:07:9f:c6:97:23:ae:e0:15:96:
ac:64:f5:eb:56:84:54:54:fe:66:8e:67:59:89:94:
9a:a0:bd:4c:20:3f:d9:c9:7d:06:eb:63:20:69:28:
91:12:5a:05:57:48:02:b7:d7:ee:7c:d2:af:3d:3a:
bb:07:7d:c6:5c:91:63:97:6e:73:b0:8b:2d:84:9a:
80:53:64:93:cb:a3:79:89:bf:27:54:03:a8:60:ff:
66:34:14:a1:83:d6:68:7f:0c:03:35:0c:57:fe:7b:
cc:2b:85:27:72:39:c0:21:80:9e:ea:96:10:c0:0e:
55:85:4e:93:df:f7:e1:bf:33:9a:b0:d9:f8:d6:9d:
c1:0e:7a:8d:13:39:53:91:ac:3b:e8:7c:61:d4:01:
ac:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:56:86:1A:42:40:F0:16:A4:1E:D6:8D:7A:41:90:BB:0F:B3:8C:E4
X509v3 Authority Key Identifier:
keyid:30:7E:7E:27:6A:7D:F5:80:DF:B7:07:31:D4:89:ED:E4:47:E0:7D:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH5-J2p99YDftwcx1Int5EfgfQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/5ab056-4bbe-484a-9352-8ac58f273756/1/MH5-J2p99YDftwcx1Int5EfgfQY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/5ab056-4bbe-484a-9352-8ac58f273756/1/MH5-J2p99YDftwcx1Int5EfgfQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:4c:6b:b4:af:e5:e6:af:9f:5a:fb:59:86:af:54:fd:c7:ba:
2e:74:53:d2:f8:2d:3e:b1:96:c0:ea:a4:47:f0:2b:b4:dd:dd:
f5:13:51:89:36:b6:05:e1:fb:3c:f9:82:a6:97:2e:5a:39:b9:
3b:e4:2a:a9:9f:c5:a5:40:a8:04:7d:6e:e4:ab:4f:4e:7d:ca:
6a:73:34:f7:54:1a:79:75:53:e9:a6:cf:ae:72:3d:7c:13:dc:
6f:f1:11:fe:aa:3b:a9:7d:7b:dd:13:3b:f9:ad:76:5a:f6:69:
f6:b8:32:e8:02:ca:39:12:80:f0:12:9f:91:d9:51:82:32:00:
85:31:b3:d6:4c:a6:e0:88:de:f8:7b:3a:49:3b:f1:cf:17:96:
c2:2a:3a:a0:05:c2:77:b9:fc:17:8b:b4:36:b7:60:08:02:e0:
e8:d1:d2:9a:e2:c9:12:b6:1f:4a:14:1d:cb:91:1d:01:dc:e2:
f3:48:80:75:19:3e:33:71:fe:99:8c:62:75:7f:cd:5f:94:12:
4d:fc:f3:74:0d:cf:0f:71:4e:5e:26:af:d9:30:bc:0f:3e:42:
eb:8d:80:cd:98:f0:6b:4d:95:c8:95:d9:dc:ef:9d:a1:41:ac:
8b:96:7c:13:cb:40:78:00:0f:f7:56:91:31:2c:28:6d:6f:a9:
65:a7:53:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:46:54 2025 by rpki-client