Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.mft
File: mJAcfP_Rmk_qePebEASZkmbcwiQ.mft (raw, json)
Hash identifier: yiBJg6Vh8HpvYahyWjHDRETlXkOhJ4yQ56fwvH7wJus=
Subject key identifier: CB:6A:4C:95:E3:0C:BE:1E:C9:0A:17:51:B6:CB:86:2F:96:A7:44:D3
Authority key identifier: 98:90:1C:7C:FF:D1:9A:4F:EA:78:F7:9B:10:04:99:92:66:DC:C2:24
Certificate issuer: /CN=98901c7cffd19a4fea78f79b1004999266dcc224
Certificate serial: 0195E07DB411001E0D7BDBE0F76CC554F8C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mJAcfP_Rmk_qePebEASZkmbcwiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.mft
Manifest number: 14C4
Signing time: Sat 29 Mar 2025 06:01:29 +0000
Manifest this update: Sat 29 Mar 2025 06:01:29 +0000
Manifest next update: Sun 30 Mar 2025 06:01:29 +0000
Files and hashes: 1: HGWBnpYX08vMWUwwLOMJq_k78S0.roa (hash: yttjunWIbX6dwAiOo7g6fUQGb+c1a+Xf5qmbeU/dnp4=)
2: XmFs6QZFMPRdJzopVIFXmV--Vrs.roa (hash: btfm0oGigPJzbc1bJybbkI9gWRtDv9TpTBsAYkeB30s=)
3: mJAcfP_Rmk_qePebEASZkmbcwiQ.crl (hash: Q5PN13S0q7pvYD97EekGl2e0qP4W8175m6Z3+pHs4C4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:7d:b4:11:00:1e:0d:7b:db:e0:f7:6c:c5:54:f8:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98901c7cffd19a4fea78f79b1004999266dcc224
Validity
Not Before: Mar 29 06:01:29 2025 GMT
Not After : Mar 30 06:01:29 2025 GMT
Subject: CN=cb6a4c95e30cbe1ec90a1751b6cb862f96a744d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:07:38:26:fa:24:fe:67:7c:75:1c:be:df:f8:
7a:97:35:5c:d9:6b:05:a5:59:48:ea:8c:6a:28:1d:
12:12:df:19:84:f0:ca:09:af:0a:89:c2:cf:4d:de:
c3:91:a8:78:c6:0f:42:fe:c8:a2:3d:58:98:e8:6a:
08:b1:3d:2b:bf:93:1e:e1:b7:c7:49:64:cd:a6:7f:
d6:ec:e5:8a:9f:26:ad:1e:5c:f8:f3:04:c3:15:d4:
c4:b9:73:99:db:87:49:74:10:aa:25:ea:70:e9:25:
82:f0:53:e3:0d:eb:9b:3e:3b:4f:6b:e9:9f:14:3b:
14:a1:42:03:45:d7:14:ee:9e:33:dd:a8:de:ea:34:
38:28:f8:b4:93:77:87:c7:1c:8e:8d:bd:fc:19:9d:
13:d7:83:2b:ce:76:23:80:38:94:c1:2b:70:24:aa:
52:b2:ed:eb:09:57:3b:a0:25:f6:9c:c8:f6:bb:91:
a6:5e:01:63:15:79:4a:80:35:52:bb:51:f3:6a:0d:
58:e8:2e:7f:6b:2a:56:1d:4c:e0:44:15:0c:0f:7a:
67:5d:51:a0:4f:78:ac:7a:39:68:c1:48:4d:60:9d:
7d:2b:01:88:73:e8:19:38:5f:0e:55:20:db:8c:62:
48:d4:3e:6c:69:fb:5a:a1:3d:bb:74:25:3d:38:14:
86:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:6A:4C:95:E3:0C:BE:1E:C9:0A:17:51:B6:CB:86:2F:96:A7:44:D3
X509v3 Authority Key Identifier:
keyid:98:90:1C:7C:FF:D1:9A:4F:EA:78:F7:9B:10:04:99:92:66:DC:C2:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mJAcfP_Rmk_qePebEASZkmbcwiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:9d:08:ac:c0:8b:e1:01:3f:56:31:34:fc:d6:de:7d:80:11:
b7:2a:29:8f:1f:6a:f5:b8:55:26:c6:a2:a7:df:17:ac:81:31:
5b:c2:67:85:8e:e1:dd:50:f7:37:72:dc:bc:31:e4:5b:87:81:
ce:a4:ed:28:e2:d7:bd:7d:9c:51:07:ab:48:e5:45:95:4a:b0:
88:83:3d:77:1e:3a:be:bb:f1:3c:19:b9:50:5d:d9:f3:2a:af:
c1:1a:90:c5:3c:11:5b:75:0a:c9:fa:a9:24:38:70:a5:14:4b:
9f:a4:4f:4d:50:61:6d:30:e1:d0:57:4c:20:cd:dc:83:53:d0:
65:9f:41:b2:3a:d4:2c:99:1d:57:de:1e:a3:ea:a8:98:0c:79:
30:0a:e8:ef:0f:e1:f5:fe:70:1f:36:96:0f:32:6d:23:42:23:
9b:79:de:c6:92:b6:c9:df:a7:ac:4c:4c:25:17:3d:68:2a:af:
96:18:95:2f:87:47:7c:74:dd:07:26:70:c5:6b:e1:37:24:57:
46:09:30:1e:c8:51:e9:2f:e6:91:f3:d4:93:2d:94:58:d0:ab:
8d:06:f4:a1:53:55:bc:7b:10:d4:fd:d7:92:9c:01:d8:34:8c:
25:df:7e:98:93:f5:ef:8b:c7:ed:e4:7b:d1:2b:75:a5:99:7f:
84:9e:fb:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:08:06 2025 by rpki-client