Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/8ffa79-7528-4fca-9cdf-69bb282cf5ae/1/SBE8kWpZ2k1DuO-nc5rRFnrOWf0.mft
File: SBE8kWpZ2k1DuO-nc5rRFnrOWf0.mft (raw, json)
Hash identifier: QfpjMcim8NJquhU+iqwMzv7ZIf0aqv5IEilo7ASKOz0=
Subject key identifier: 2F:E8:0F:24:AD:21:86:17:2E:74:DB:62:F8:68:C5:7A:15:99:A1:84
Authority key identifier: 48:11:3C:91:6A:59:DA:4D:43:B8:EF:A7:73:9A:D1:16:7A:CE:59:FD
Certificate issuer: /CN=48113c916a59da4d43b8efa7739ad1167ace59fd
Certificate serial: 0194BBCDB866C37755BFB9071AFF0DA27B14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SBE8kWpZ2k1DuO-nc5rRFnrOWf0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/8ffa79-7528-4fca-9cdf-69bb282cf5ae/1/SBE8kWpZ2k1DuO-nc5rRFnrOWf0.mft
Manifest number: 0FEC
Signing time: Fri 31 Jan 2025 10:00:08 +0000
Manifest this update: Fri 31 Jan 2025 10:00:08 +0000
Manifest next update: Sat 01 Feb 2025 10:00:08 +0000
Files and hashes: 1: SBE8kWpZ2k1DuO-nc5rRFnrOWf0.crl (hash: RJbzJovyW4YmTJPN7X3Cy6j9l5sXOUZRXyy+6XuTDHM=)
2: gblVtIBn8mlQxz2yiWejH0FdMyM.roa (hash: s042MfHWtsi+LtfhO/ecUQnxypSSkEI5Z5QOz7/NUTc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:b8:66:c3:77:55:bf:b9:07:1a:ff:0d:a2:7b:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48113c916a59da4d43b8efa7739ad1167ace59fd
Validity
Not Before: Jan 31 10:00:08 2025 GMT
Not After : Feb 1 10:00:08 2025 GMT
Subject: CN=2fe80f24ad2186172e74db62f868c57a1599a184
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:b3:42:6f:66:d3:c2:c5:a4:5e:f4:ed:2d:60:
38:e5:30:85:cb:31:44:33:1a:1a:43:25:9e:31:b4:
ac:42:66:fa:35:02:70:26:ca:dd:40:2a:aa:0a:a6:
22:4a:1c:5a:f8:9b:68:b0:1f:4c:cb:a7:0e:a9:fb:
00:83:c5:3a:6f:73:ab:a4:0b:3d:3b:5e:fa:e9:15:
4a:8a:1b:93:4f:0d:b3:fa:3f:d9:be:77:e8:ab:bc:
bb:3a:03:ba:db:d1:e7:7c:47:b5:2d:bd:f3:83:3d:
db:5a:7e:04:0e:6e:b2:4e:e7:33:d6:ef:65:68:4a:
6e:e2:75:c3:95:57:ec:11:c9:97:2d:f4:30:b7:d1:
91:bd:ce:d8:bb:0e:6d:a0:11:25:75:e3:39:99:8f:
c5:ea:26:03:76:49:ef:19:82:a9:12:f0:93:9a:17:
13:ed:06:1a:4f:23:5f:be:66:ca:e6:ae:b9:fa:34:
0c:5e:92:7f:ed:49:31:48:45:67:a5:2c:24:fd:a5:
29:99:9a:25:73:4d:07:7f:86:2c:e6:37:bf:9f:ca:
7d:6a:72:28:d7:53:a7:aa:76:a8:8e:ed:3f:42:7e:
c7:57:a9:f6:59:ff:be:bc:47:d1:df:95:a8:7e:dc:
da:8c:3e:47:42:67:ac:fd:8e:23:d6:2c:e4:2b:41:
40:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:E8:0F:24:AD:21:86:17:2E:74:DB:62:F8:68:C5:7A:15:99:A1:84
X509v3 Authority Key Identifier:
keyid:48:11:3C:91:6A:59:DA:4D:43:B8:EF:A7:73:9A:D1:16:7A:CE:59:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SBE8kWpZ2k1DuO-nc5rRFnrOWf0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/8ffa79-7528-4fca-9cdf-69bb282cf5ae/1/SBE8kWpZ2k1DuO-nc5rRFnrOWf0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/8ffa79-7528-4fca-9cdf-69bb282cf5ae/1/SBE8kWpZ2k1DuO-nc5rRFnrOWf0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:ad:fb:6f:38:fe:f5:12:db:04:fb:06:4d:16:1c:3a:0c:c3:
0a:e7:99:8d:93:03:5f:15:3d:16:11:25:1e:6a:e9:83:fc:b6:
d3:eb:da:61:a5:79:c4:29:d1:10:78:86:68:4b:02:e7:f8:1e:
39:20:b8:5f:8a:16:7e:12:2b:6f:0e:df:c7:72:70:93:b9:44:
a5:49:8b:c9:82:06:40:b6:d1:a1:71:7e:a1:dd:8b:f0:5e:14:
06:1c:10:9f:09:83:ce:30:0e:6a:2e:95:e3:54:db:fc:7b:d9:
8b:3a:53:0f:f9:a9:34:e9:e3:39:d0:17:b0:81:4c:57:b6:8d:
b9:8f:cf:09:0b:09:3b:d0:05:d8:49:96:76:8d:da:1f:57:a5:
e7:c1:56:79:81:6c:35:41:ac:8e:b8:3d:3c:82:ab:65:23:de:
da:fe:65:ec:d5:47:88:81:7e:e9:d9:01:a1:35:c5:8f:76:71:
a2:d0:91:cc:7c:75:f4:59:85:12:d9:e3:65:08:56:6c:45:30:
d9:33:71:c4:e3:8d:97:83:b4:9e:3f:f5:1c:0f:eb:24:8e:86:
89:19:34:fa:63:9f:7b:da:6a:cc:5f:d7:8b:e1:95:10:57:ae:
35:9e:aa:ae:50:37:25:e1:38:35:74:01:5d:ca:a9:51:ae:24:
68:f7:56:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 15:49:17 2025 by rpki-client