Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/3b2ae9-668f-4a0f-ab1e-dcb915d1d50a/1/mVnOTq5ftlkrnkLhQzgYtqhmTKo.mft
File: mVnOTq5ftlkrnkLhQzgYtqhmTKo.mft (raw, json)
Hash identifier: tUjDYCAsg76VEkQ4VyBojEI8edkTJLL7wmA0utc6QZM=
Subject key identifier: 7A:E6:3E:7A:94:A5:74:A6:5E:22:74:0D:A9:32:92:49:FA:16:E3:1D
Authority key identifier: 99:59:CE:4E:AE:5F:B6:59:2B:9E:42:E1:43:38:18:B6:A8:66:4C:AA
Certificate issuer: /CN=9959ce4eae5fb6592b9e42e1433818b6a8664caa
Certificate serial: 018E750EFECD0ACC65C82C04B41257FE29CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mVnOTq5ftlkrnkLhQzgYtqhmTKo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/3b2ae9-668f-4a0f-ab1e-dcb915d1d50a/1/mVnOTq5ftlkrnkLhQzgYtqhmTKo.mft
Manifest number: 02AC
Signing time: Mon 25 Mar 2024 10:01:40 +0000
Manifest this update: Mon 25 Mar 2024 10:01:40 +0000
Manifest next update: Tue 26 Mar 2024 10:01:40 +0000
Files and hashes: 1: IhUFYPSCw5XleWK7wmLZ1QR42zM.roa (hash: zK6DGK5wTxfbB9rE474le4/Y/1usjGV35sogv+qjOMU=)
2: mVnOTq5ftlkrnkLhQzgYtqhmTKo.crl (hash: 3pWxB0eeW6Ah8Z1Df7xDB/9xcJLY0JAx0uITxVtf27o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:75:0e:fe:cd:0a:cc:65:c8:2c:04:b4:12:57:fe:29:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9959ce4eae5fb6592b9e42e1433818b6a8664caa
Validity
Not Before: Mar 25 10:01:40 2024 GMT
Not After : Mar 26 10:01:40 2024 GMT
Subject: CN=7ae63e7a94a574a65e22740da9329249fa16e31d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:47:79:12:80:1b:b4:5f:fc:9b:d7:97:1c:a4:
17:c6:e5:31:df:16:27:77:82:df:5d:27:80:98:67:
ca:35:fb:2d:d1:cf:7e:5e:7f:8f:9b:f3:a1:48:d2:
94:5e:d4:a6:47:92:5d:4c:ca:ae:50:74:b4:66:09:
30:6d:fc:9c:5a:3c:6d:48:5b:94:05:9d:aa:08:2b:
b2:0b:ba:0f:26:aa:43:ec:58:3c:13:ed:d1:52:4d:
5a:72:45:d7:f8:1a:ea:04:1b:f3:37:f3:eb:0d:ce:
46:f4:86:b8:dc:a1:a8:30:59:bc:ff:4b:ec:1f:80:
80:8a:68:db:6f:d1:61:b6:d8:f2:3e:97:85:b1:a9:
a7:4c:a1:2c:92:c1:c6:3e:5b:bb:ff:d6:f0:e5:f2:
c6:26:6b:9a:ff:c0:6f:34:23:78:bd:7a:e6:7e:64:
35:77:6d:53:74:80:c6:a2:1b:53:9a:25:05:e5:b5:
a3:40:fa:f4:a5:bd:e9:54:e3:86:a0:09:c2:01:11:
9d:d3:99:14:af:d0:9d:b5:f1:d5:6c:7f:0c:60:8b:
5b:10:32:3f:7e:f3:17:a4:e7:e4:38:9d:b9:91:94:
78:fd:d1:55:53:c0:4d:b8:44:13:9f:4f:49:53:79:
47:e0:d1:87:83:00:88:31:fe:92:68:cf:d5:fa:db:
35:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:E6:3E:7A:94:A5:74:A6:5E:22:74:0D:A9:32:92:49:FA:16:E3:1D
X509v3 Authority Key Identifier:
keyid:99:59:CE:4E:AE:5F:B6:59:2B:9E:42:E1:43:38:18:B6:A8:66:4C:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mVnOTq5ftlkrnkLhQzgYtqhmTKo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3b2ae9-668f-4a0f-ab1e-dcb915d1d50a/1/mVnOTq5ftlkrnkLhQzgYtqhmTKo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3b2ae9-668f-4a0f-ab1e-dcb915d1d50a/1/mVnOTq5ftlkrnkLhQzgYtqhmTKo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:28:6c:a1:bf:3a:75:eb:80:05:dc:f7:12:a4:e1:79:7d:76:
69:3e:ae:fa:4b:93:8c:d4:5c:61:84:83:34:50:ca:df:e0:3d:
c2:95:d9:21:58:44:7d:89:10:ca:70:75:3d:d0:2d:bd:b4:d0:
29:fe:e0:83:f8:20:5f:df:97:c0:49:39:7c:2e:de:d7:2d:ae:
93:23:df:25:c7:6d:96:16:b0:fa:0b:10:31:28:76:8e:f7:f6:
63:4f:24:71:60:f0:b6:92:87:fc:ac:3a:99:ea:b3:0a:fc:1d:
83:a0:f9:60:68:ef:ad:1a:68:5b:c2:5f:19:bf:60:8d:6e:2f:
3e:4b:6f:e3:d4:34:60:5d:4f:61:3b:17:22:0a:c7:e9:8b:fb:
e2:20:4f:e4:04:bc:f8:a2:af:6e:bc:68:77:41:34:e8:7a:59:
e7:6b:49:78:c1:99:ef:11:17:3c:53:b7:11:d2:f2:b1:99:50:
59:5c:42:6f:33:d9:7a:88:27:50:cb:05:0f:af:9e:9a:60:45:
d1:ef:45:5f:5f:b9:30:74:04:07:fa:9d:a8:74:60:66:aa:34:
95:7d:80:02:03:d9:63:37:f5:17:d8:4b:a4:1d:15:ac:23:0e:
1a:de:66:3d:c6:30:20:32:54:13:10:85:55:0b:9e:5d:0f:8d:
27:f5:a6:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:33:28 2025 by rpki-client