Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/990595-5157-4036-b601-60843b5bbb81/1/SnX6lUdbre63H4ROCwtEtqj-qf4.mft
File: SnX6lUdbre63H4ROCwtEtqj-qf4.mft (raw, json)
Hash identifier: /gW09mbbuTfaa8EpQAk3fapJGvu6BkuNP2wQdPgQDfY=
Subject key identifier: 4F:70:3F:28:10:7F:D0:C2:90:F9:50:18:F1:B7:B6:02:0E:5A:00:41
Authority key identifier: 4A:75:FA:95:47:5B:AD:EE:B7:1F:84:4E:0B:0B:44:B6:A8:FE:A9:FE
Certificate issuer: /CN=4a75fa95475badeeb71f844e0b0b44b6a8fea9fe
Certificate serial: 0194BCE09BCE86008476DB00D86D6504E05F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SnX6lUdbre63H4ROCwtEtqj-qf4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/990595-5157-4036-b601-60843b5bbb81/1/SnX6lUdbre63H4ROCwtEtqj-qf4.mft
Manifest number: 0719
Signing time: Fri 31 Jan 2025 15:00:23 +0000
Manifest this update: Fri 31 Jan 2025 15:00:23 +0000
Manifest next update: Sat 01 Feb 2025 15:00:23 +0000
Files and hashes: 1: SnX6lUdbre63H4ROCwtEtqj-qf4.crl (hash: VyAGYr2P3aSEChaGRQr2okLXu0UrlPsgA2UUfN2pU68=)
2: _2GPXm0W5pqTGfOSlDVI1ePI1QE.roa (hash: 9R3xfYmKYkm/k3uZLHas6Z2h3l83dSwTWGdwQsjNnVM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:9b:ce:86:00:84:76:db:00:d8:6d:65:04:e0:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a75fa95475badeeb71f844e0b0b44b6a8fea9fe
Validity
Not Before: Jan 31 15:00:23 2025 GMT
Not After : Feb 1 15:00:23 2025 GMT
Subject: CN=4f703f28107fd0c290f95018f1b7b6020e5a0041
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:8e:a4:6b:1e:10:5c:57:da:6b:b3:a2:19:ea:
de:34:65:6a:41:14:ff:ce:e8:cd:9e:9c:fc:f8:e9:
e3:3b:3a:e6:1a:cd:89:a6:6d:1b:05:0d:8e:bd:77:
08:a4:5b:be:78:ce:2b:3c:45:23:5a:0a:26:2d:de:
20:5c:35:de:b3:04:d5:44:c4:54:13:df:6d:52:0c:
f6:ce:0a:20:cd:27:42:ea:e1:be:f9:25:c3:32:dc:
ff:4a:85:85:78:2c:c6:d7:dc:a5:ff:a9:29:b0:4f:
1a:67:98:8b:e8:65:8c:34:62:49:ff:d4:ce:37:45:
e8:90:2f:ba:16:07:d3:76:a5:39:8c:18:c0:46:f0:
9e:40:af:65:16:31:18:de:80:e9:ce:a3:f5:55:b3:
90:9d:5b:48:76:d6:a7:4d:4f:3c:8c:55:90:80:5c:
08:4b:19:4f:ba:ef:63:09:6d:6b:5e:c0:4b:d4:a2:
71:46:94:57:84:c7:12:56:7e:10:f7:59:26:a3:79:
a4:0d:68:64:dd:9c:e2:bf:6e:c1:21:d5:1a:7a:1a:
36:27:78:58:eb:a9:26:f3:04:97:a3:6a:07:3f:d7:
7d:b8:94:1a:49:18:a5:22:da:3b:d7:d2:91:99:5d:
80:3b:98:b7:e1:c9:2f:fd:3d:0e:33:40:b6:05:15:
57:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:70:3F:28:10:7F:D0:C2:90:F9:50:18:F1:B7:B6:02:0E:5A:00:41
X509v3 Authority Key Identifier:
keyid:4A:75:FA:95:47:5B:AD:EE:B7:1F:84:4E:0B:0B:44:B6:A8:FE:A9:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SnX6lUdbre63H4ROCwtEtqj-qf4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/990595-5157-4036-b601-60843b5bbb81/1/SnX6lUdbre63H4ROCwtEtqj-qf4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/990595-5157-4036-b601-60843b5bbb81/1/SnX6lUdbre63H4ROCwtEtqj-qf4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:3c:9b:86:db:96:90:75:2a:b9:b2:ea:0c:22:d7:37:9b:ec:
2b:13:72:4f:52:17:e3:28:66:89:5f:eb:64:90:dc:fb:73:be:
27:94:54:01:94:39:90:5a:07:19:2e:df:01:b9:89:f1:eb:b7:
94:d4:cd:c8:1f:42:a3:e9:d3:e6:f7:4d:ba:3f:0a:76:4d:18:
55:8d:f2:c4:c5:3b:f3:8e:8b:09:06:fe:2d:0c:33:7e:2f:fc:
17:e7:8d:45:c6:ab:21:aa:13:a0:f5:3d:26:5f:48:02:c9:cc:
0a:ee:20:35:81:bd:30:74:75:f6:ce:17:88:36:2b:74:c6:b2:
37:2e:eb:c4:c0:48:eb:96:e9:9c:a5:8e:f6:22:7a:a8:61:ab:
08:d1:fe:e0:79:9f:1e:36:a2:79:97:a1:54:0f:2e:24:46:89:
33:ea:96:05:14:7e:12:f2:7e:0f:e3:9a:f1:3b:84:ca:ec:05:
7a:8c:d0:d8:58:ad:a9:a1:2d:44:4f:ed:6f:22:83:28:ed:9b:
67:db:53:c3:bb:b0:15:f9:42:fd:db:4a:46:7b:19:f5:0c:22:
2e:f4:eb:a3:40:17:59:66:11:26:a6:00:9b:a0:22:f2:14:b6:
d3:67:6b:37:74:e4:6e:84:26:06:51:5a:8d:53:fb:b0:d4:f2:
fc:2a:3e:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:02 2025 by rpki-client