Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/e4ffc5-fb8d-4c40-8b73-bfeb7cea209d/1/S6_0itEUWxAMeD-3r7bzAovY804.mft
File: S6_0itEUWxAMeD-3r7bzAovY804.mft (raw, json)
Hash identifier: vXCGJPXt3aZfQApIbYRhM4BCgqbUTKPUYcYqUadbUqg=
Subject key identifier: 37:40:19:7C:FF:52:48:81:DB:B4:6C:27:42:70:9E:6C:FA:8D:A4:93
Authority key identifier: 4B:AF:F4:8A:D1:14:5B:10:0C:78:3F:B7:AF:B6:F3:02:8B:D8:F3:4E
Certificate issuer: /CN=4baff48ad1145b100c783fb7afb6f3028bd8f34e
Certificate serial: 0194BCE0BC7A3D0F55F07B8CC0D666A332FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S6_0itEUWxAMeD-3r7bzAovY804.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/e4ffc5-fb8d-4c40-8b73-bfeb7cea209d/1/S6_0itEUWxAMeD-3r7bzAovY804.mft
Manifest number: 0B63
Signing time: Fri 31 Jan 2025 15:00:32 +0000
Manifest this update: Fri 31 Jan 2025 15:00:32 +0000
Manifest next update: Sat 01 Feb 2025 15:00:32 +0000
Files and hashes: 1: 07VM5GQDyy0wcSk66eg9Nc4GYr0.roa (hash: tZR04Bh0g3Sbqjc1Ej/IqbvRwZJEdNyq0qHOrpzegq8=)
2: S6_0itEUWxAMeD-3r7bzAovY804.crl (hash: uzn9sKsrpxg8AT8BDO413F0rKEDitHi7OoP8maKoLNw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:bc:7a:3d:0f:55:f0:7b:8c:c0:d6:66:a3:32:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4baff48ad1145b100c783fb7afb6f3028bd8f34e
Validity
Not Before: Jan 31 15:00:32 2025 GMT
Not After : Feb 1 15:00:32 2025 GMT
Subject: CN=3740197cff524881dbb46c2742709e6cfa8da493
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e8:65:eb:14:97:77:24:42:bb:c8:7a:a0:fd:
3b:63:e9:9f:97:f9:bd:9d:53:97:ab:c7:2e:a1:21:
0d:4b:8a:2c:40:c0:8b:db:95:1d:7d:8a:73:61:78:
38:fb:f7:6a:6b:29:09:43:88:68:6c:4d:2d:9c:ee:
1a:c2:94:79:33:61:81:59:29:cc:cc:32:46:b5:5c:
7c:7e:4f:4e:2a:34:b6:50:b7:4d:c6:c8:01:3a:b1:
e3:41:bf:1a:08:dc:ed:4e:27:72:f0:2a:3e:06:f6:
ca:f6:a3:d5:7d:70:0a:b5:06:85:56:a3:7c:0a:75:
55:b2:25:2b:2e:99:29:cd:71:da:cc:7f:40:2d:6d:
9c:60:87:32:c2:b4:86:9f:a0:bb:1a:09:24:6f:de:
02:18:ca:eb:71:71:e1:53:89:fc:50:02:41:6c:fd:
05:74:f0:38:35:5b:3f:21:89:d7:44:f6:29:47:37:
3f:16:74:b3:68:ba:0f:d1:0c:8e:9e:0c:20:2a:44:
e4:6f:45:4e:4b:ca:33:2f:4e:39:4e:ac:de:0b:13:
6e:3c:ad:de:22:ce:b3:24:f4:42:84:b0:f9:b0:fc:
12:d2:6e:a8:6e:7e:8f:b5:0f:65:17:cf:9f:08:de:
bb:9b:4b:63:96:07:11:bb:c8:70:dd:13:94:70:e9:
66:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:40:19:7C:FF:52:48:81:DB:B4:6C:27:42:70:9E:6C:FA:8D:A4:93
X509v3 Authority Key Identifier:
keyid:4B:AF:F4:8A:D1:14:5B:10:0C:78:3F:B7:AF:B6:F3:02:8B:D8:F3:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S6_0itEUWxAMeD-3r7bzAovY804.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e4ffc5-fb8d-4c40-8b73-bfeb7cea209d/1/S6_0itEUWxAMeD-3r7bzAovY804.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e4ffc5-fb8d-4c40-8b73-bfeb7cea209d/1/S6_0itEUWxAMeD-3r7bzAovY804.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:a8:53:e8:7b:c7:56:72:1b:e1:76:31:0b:1f:06:02:d3:03:
65:b6:84:09:af:b5:4a:62:16:e6:59:71:b2:63:74:40:9f:16:
4e:0b:74:1c:33:fc:b3:9c:5e:c0:01:68:dd:a4:9d:05:0c:55:
59:be:a7:c0:f2:a9:e4:54:79:3c:73:0e:ae:72:52:75:4b:44:
eb:75:51:bf:0d:67:b3:11:5a:6a:80:c5:dc:4f:67:d0:a5:e2:
27:17:97:b2:87:6c:ae:76:27:1f:09:46:b1:a1:f6:21:3d:98:
ad:f8:47:17:c7:86:b4:05:9a:f9:aa:ee:6e:18:67:e3:02:34:
02:b9:d7:b3:e3:ae:a3:33:2f:07:20:9e:73:2d:18:c1:d9:e3:
58:b9:4f:c4:52:d3:f4:2d:d3:5f:7b:1f:1f:b2:a1:08:98:c6:
cc:03:f6:80:65:a6:ee:a9:f1:16:60:e0:11:42:d6:4f:b5:ec:
31:8b:0b:b9:ed:89:94:3f:f8:99:fb:ee:7e:71:83:54:b3:bd:
e1:e5:4e:69:bf:f9:69:45:6b:ba:3f:93:53:3f:c5:65:8f:10:
44:10:d0:4c:7e:d2:b7:98:d0:89:28:88:3d:bd:f5:d1:e1:2d:
8d:ca:dc:d0:d6:ca:65:ec:23:4f:75:6c:5f:99:37:41:95:6c:
73:0e:08:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:38:55 2025 by rpki-client