Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/9f6233-782a-4140-b500-9971907a95a7/1/MRf9In6dzpeAXAPl8zACrqGMN90.mft
File: MRf9In6dzpeAXAPl8zACrqGMN90.mft (raw, json)
Hash identifier: pVmjM+HT1+FY8Ms+YaAQvigscoLosF8XJCvKtmUU1BM=
Subject key identifier: 5F:23:6D:E4:05:EE:B0:A9:B3:BC:C4:6A:6A:52:B3:CF:BD:AC:9A:92
Authority key identifier: 31:17:FD:22:7E:9D:CE:97:80:5C:03:E5:F3:30:02:AE:A1:8C:37:DD
Certificate issuer: /CN=3117fd227e9dce97805c03e5f33002aea18c37dd
Certificate serial: 0195E00F7FE4AA7FD7CCEA0F3651E2D8D906
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MRf9In6dzpeAXAPl8zACrqGMN90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/9f6233-782a-4140-b500-9971907a95a7/1/MRf9In6dzpeAXAPl8zACrqGMN90.mft
Manifest number: 1453
Signing time: Sat 29 Mar 2025 04:01:06 +0000
Manifest this update: Sat 29 Mar 2025 04:01:06 +0000
Manifest next update: Sun 30 Mar 2025 04:01:06 +0000
Files and hashes: 1: 8FKyt8eDnO1kLTJD9dF4kktBbnk.roa (hash: 9mNmQ05G/Q2P4wE3xyuelgcW7lRtN/p4eyiaB9oB3rE=)
2: MRf9In6dzpeAXAPl8zACrqGMN90.crl (hash: PrkhtI3SwFtKCLLb7qOhtK/8J+scxUvl+W11iEfR4Q0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:0f:7f:e4:aa:7f:d7:cc:ea:0f:36:51:e2:d8:d9:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3117fd227e9dce97805c03e5f33002aea18c37dd
Validity
Not Before: Mar 29 04:01:06 2025 GMT
Not After : Mar 30 04:01:06 2025 GMT
Subject: CN=5f236de405eeb0a9b3bcc46a6a52b3cfbdac9a92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f1:b9:c6:08:f1:c8:f2:91:fb:d6:4a:81:ad:
8d:4a:93:cb:0b:f9:6b:3c:e1:2b:cd:99:00:b3:b9:
5e:a1:eb:ed:7b:cd:f7:01:92:a2:0e:f1:28:8d:e9:
75:01:da:08:8b:2c:b6:0c:48:72:72:e7:ad:5d:b5:
1a:07:02:30:52:ae:ae:e2:56:c7:93:81:35:8c:12:
b2:da:ea:5e:0d:7e:de:eb:1f:28:0d:37:cf:15:e2:
45:30:13:58:ba:4c:55:08:df:4a:1e:dc:38:f7:d1:
09:dd:b2:98:2b:9a:cc:49:77:9f:31:40:aa:fe:c6:
6c:08:2b:d6:0e:56:55:bb:2d:44:47:06:89:8e:9a:
1d:fb:e1:a4:5b:e9:09:88:01:a2:60:53:61:29:03:
81:88:ae:65:00:a1:ca:27:ab:49:4d:69:9f:e7:58:
a6:be:01:b2:98:c2:dd:c8:a6:d8:42:f7:21:96:f8:
8f:3a:58:0a:d2:70:b1:1a:b0:f8:c5:c2:b3:48:72:
fa:67:a2:46:f4:3a:58:01:06:c9:d1:43:df:0f:57:
fa:ff:b5:8d:2c:b8:48:48:64:52:b4:39:23:1d:85:
d5:a5:90:82:3e:ea:94:50:f1:a6:b5:6c:b5:bd:d7:
91:1b:53:27:c5:12:1a:f6:7f:8f:01:3b:6a:33:ba:
1b:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:23:6D:E4:05:EE:B0:A9:B3:BC:C4:6A:6A:52:B3:CF:BD:AC:9A:92
X509v3 Authority Key Identifier:
keyid:31:17:FD:22:7E:9D:CE:97:80:5C:03:E5:F3:30:02:AE:A1:8C:37:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MRf9In6dzpeAXAPl8zACrqGMN90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/9f6233-782a-4140-b500-9971907a95a7/1/MRf9In6dzpeAXAPl8zACrqGMN90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/9f6233-782a-4140-b500-9971907a95a7/1/MRf9In6dzpeAXAPl8zACrqGMN90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:8d:b7:5f:da:83:42:b2:73:f7:5b:11:99:36:83:26:cb:06:
f4:43:4c:b5:e1:66:75:89:25:10:64:ae:e8:94:06:d2:45:45:
41:e2:db:7c:63:06:06:85:d7:67:9b:04:d0:e4:8f:a9:ca:e8:
05:85:37:ae:2b:7a:3c:da:d6:72:a7:ec:ee:b4:42:a6:bb:6b:
f5:1e:47:b5:e9:0b:d0:98:75:4f:c4:8b:8d:9f:7f:b9:ac:69:
56:18:c0:bd:b5:ce:3e:1d:d1:8a:6d:e2:5b:07:1d:b9:64:06:
37:aa:eb:bf:b2:a3:d5:fc:36:ea:7c:ab:a1:e4:97:7b:f4:ea:
09:94:f7:07:2d:36:15:1f:8b:0e:2f:13:1a:be:2a:5c:51:aa:
cc:a6:b6:46:5c:ab:51:7b:f4:d2:64:1d:5d:f1:02:60:57:f6:
23:aa:9a:cb:c5:62:61:c3:1c:d8:50:f0:41:70:67:91:9c:e6:
77:2d:ad:34:16:82:88:67:9e:69:00:1c:6e:88:4a:4d:bf:06:
df:31:70:a0:f6:d5:41:0b:6b:b3:1d:dd:94:91:1a:73:f7:04:
44:ce:3a:f1:f0:50:41:9f:b0:e7:4e:7b:18:68:98:a3:57:5b:
8f:0b:c3:a2:f2:48:9f:90:53:c1:39:d0:10:81:29:ee:49:6c:
62:52:c7:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 07:39:12 2025 by rpki-client