Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/638f28-00d5-463b-b16c-f845bfc42f6d/1/sCQrfkMFPJE9Yr9duxaC_-a43-I.mft
File: sCQrfkMFPJE9Yr9duxaC_-a43-I.mft (raw, json)
Hash identifier: E3RKWQBI0yI0wLF5Kd2DLGLeiGsxtXuAmQJwL6OczoM=
Subject key identifier: 90:24:0F:4C:EF:D1:CB:E3:63:E9:40:17:5E:A8:F2:CC:A8:76:B5:46
Authority key identifier: B0:24:2B:7E:43:05:3C:91:3D:62:BF:5D:BB:16:82:FF:E6:B8:DF:E2
Certificate issuer: /CN=b0242b7e43053c913d62bf5dbb1682ffe6b8dfe2
Certificate serial: 0194BC04BAD83DAE415EAE653C8AAF6DA7EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sCQrfkMFPJE9Yr9duxaC_-a43-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/638f28-00d5-463b-b16c-f845bfc42f6d/1/sCQrfkMFPJE9Yr9duxaC_-a43-I.mft
Manifest number: 0D90
Signing time: Fri 31 Jan 2025 11:00:14 +0000
Manifest this update: Fri 31 Jan 2025 11:00:14 +0000
Manifest next update: Sat 01 Feb 2025 11:00:14 +0000
Files and hashes: 1: VXSaoq70xTeN6W3C76eUA8OC5cU.roa (hash: vEwflplyRjS2mkClV+Bpny4Bw/QU3HBBti723DFTvj4=)
2: sCQrfkMFPJE9Yr9duxaC_-a43-I.crl (hash: j7OJo4lqjTQCXqvk2gaErzf0Rap5Qx2vZiEBHM8Eqtg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:ba:d8:3d:ae:41:5e:ae:65:3c:8a:af:6d:a7:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0242b7e43053c913d62bf5dbb1682ffe6b8dfe2
Validity
Not Before: Jan 31 11:00:14 2025 GMT
Not After : Feb 1 11:00:14 2025 GMT
Subject: CN=90240f4cefd1cbe363e940175ea8f2cca876b546
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:9c:88:84:57:06:4e:bf:54:79:9a:ff:ec:ef:
51:dd:c2:fd:b9:06:82:6b:33:ad:dc:b3:4a:f7:96:
57:6b:f5:81:ea:01:96:93:e9:3a:c6:b8:28:bd:f5:
99:5d:45:44:63:e2:d4:f9:19:c3:eb:49:e6:3e:5e:
90:bd:49:d6:aa:8e:09:f1:9e:5f:39:fe:c2:2c:83:
7d:00:c9:9c:1f:38:59:6d:77:5f:38:4f:42:03:6b:
ec:0b:61:21:3a:7f:fd:64:7a:b3:d7:6f:e0:f1:28:
a6:b2:00:dc:f8:d6:7a:6d:79:69:32:c2:50:e2:f1:
c5:c3:d8:94:7f:2a:a5:97:a9:04:bc:b0:7d:62:75:
38:e3:b4:6e:57:f8:a2:70:bb:cd:92:31:36:2b:f2:
aa:a2:ce:64:84:1b:27:c8:d4:73:93:f9:bf:7f:c9:
db:8f:db:47:c1:74:fa:82:05:32:df:1b:6d:04:35:
3c:68:5a:bb:51:dd:12:90:af:98:c6:90:89:d5:1b:
90:fd:55:e8:23:9d:d0:9c:7b:88:d5:3d:8b:eb:a4:
65:bb:e1:14:d2:12:00:61:44:d8:97:74:51:27:d5:
a0:85:4f:0c:57:e6:d9:29:84:5a:0a:5d:83:0a:c5:
20:08:98:56:07:fd:d8:e6:4b:2c:57:13:34:a4:06:
f4:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:24:0F:4C:EF:D1:CB:E3:63:E9:40:17:5E:A8:F2:CC:A8:76:B5:46
X509v3 Authority Key Identifier:
keyid:B0:24:2B:7E:43:05:3C:91:3D:62:BF:5D:BB:16:82:FF:E6:B8:DF:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sCQrfkMFPJE9Yr9duxaC_-a43-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/638f28-00d5-463b-b16c-f845bfc42f6d/1/sCQrfkMFPJE9Yr9duxaC_-a43-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/638f28-00d5-463b-b16c-f845bfc42f6d/1/sCQrfkMFPJE9Yr9duxaC_-a43-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:ed:76:aa:78:f8:cd:a1:e8:cc:57:25:44:e6:03:93:6d:55:
3f:e9:e4:d8:3c:ee:64:02:3d:79:ff:ff:04:2e:93:b5:a6:c4:
a7:af:4a:31:86:0e:ed:eb:6c:bf:91:86:23:a0:27:74:9e:ff:
5f:e3:62:6d:e9:b0:a6:be:96:17:cc:b1:f6:28:de:74:74:1e:
e5:fc:5a:ef:d8:71:83:06:f8:a4:23:aa:3a:62:7e:97:f8:e3:
b7:47:5c:23:73:f5:84:21:37:19:77:1d:b9:c1:5d:a1:02:17:
ec:c2:86:82:ca:c4:30:c5:08:3e:17:e6:b1:26:86:c7:ab:b4:
5c:6b:61:a5:03:d5:c4:f1:46:3f:10:11:5b:02:bf:45:75:c9:
f8:32:ef:db:3c:8f:a2:96:34:13:60:a6:6b:23:c0:80:81:7f:
62:7b:d8:8b:94:e1:f3:6d:6e:a2:5d:52:38:bd:2a:53:aa:0a:
96:61:6a:d6:a9:6a:f4:6c:98:45:a7:95:2d:22:16:ff:d3:98:
12:74:7e:04:b4:c0:08:4c:e3:31:25:49:4e:4d:7e:ba:f4:78:
df:af:ef:ab:82:a8:be:89:14:36:9b:fd:b3:45:5c:b9:31:f7:
ad:7c:44:05:55:f5:7f:fa:0e:7a:7a:2d:fa:85:3f:ef:79:fc:
89:9f:f2:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:11:44 2025 by rpki-client