Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/839b34-3529-438b-87d0-ce5019264895/1/sEsc31Bs5emTfnf4Jj7PbdslWwU.mft
File: sEsc31Bs5emTfnf4Jj7PbdslWwU.mft (raw, json)
Hash identifier: DhSNOMgWknUO5HwEctoBubrWlPdh1UtEaJn6hHU1/pc=
Subject key identifier: A2:3D:00:AF:97:B3:3F:DF:6E:FC:07:AA:86:73:EC:CB:E9:EA:33:3A
Authority key identifier: B0:4B:1C:DF:50:6C:E5:E9:93:7E:77:F8:26:3E:CF:6D:DB:25:5B:05
Certificate issuer: /CN=b04b1cdf506ce5e9937e77f8263ecf6ddb255b05
Certificate serial: 0194BBCEC6B220D3BB3A8A392332EB5A8522
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sEsc31Bs5emTfnf4Jj7PbdslWwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/839b34-3529-438b-87d0-ce5019264895/1/sEsc31Bs5emTfnf4Jj7PbdslWwU.mft
Manifest number: 1286
Signing time: Fri 31 Jan 2025 10:01:18 +0000
Manifest this update: Fri 31 Jan 2025 10:01:18 +0000
Manifest next update: Sat 01 Feb 2025 10:01:18 +0000
Files and hashes: 1: sEsc31Bs5emTfnf4Jj7PbdslWwU.crl (hash: yLUVRtuOZPiwGIXmGuASZ2pM8SJ8xs/WsLLj2/dztoU=)
2: tUy7VKDDVboY2Qo-sNWljYmxPOI.roa (hash: nOufD9VcAARAPXFJN7YbCFA3vo77wDsfl0JVajaSTdE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:c6:b2:20:d3:bb:3a:8a:39:23:32:eb:5a:85:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b04b1cdf506ce5e9937e77f8263ecf6ddb255b05
Validity
Not Before: Jan 31 10:01:18 2025 GMT
Not After : Feb 1 10:01:18 2025 GMT
Subject: CN=a23d00af97b33fdf6efc07aa8673eccbe9ea333a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f9:6c:4a:24:9d:98:3a:fb:fc:84:ee:03:ea:
25:be:7f:63:d6:04:3b:29:8b:bf:f2:98:b7:a7:7d:
b6:f0:d5:2d:2d:d5:ca:d2:4b:d7:c3:d2:1f:2d:40:
8e:93:ae:45:42:5a:73:c1:c4:40:01:1b:71:c9:ca:
11:86:2b:16:9a:1a:a8:5e:ec:5f:84:31:7c:07:b4:
ec:76:eb:84:09:07:c0:63:d4:bc:97:e0:83:b8:a8:
bd:3d:0c:43:cb:4e:b3:2c:a7:b4:64:01:fb:54:9e:
dc:a2:35:c1:38:36:95:99:70:6e:16:74:c7:12:7d:
53:23:10:13:49:47:64:a5:bd:a1:d1:d2:27:5f:5f:
bb:e8:c0:c8:35:64:ae:d2:0f:66:38:31:de:66:4e:
db:b4:2f:b0:64:44:b3:c5:7f:a9:d1:dd:3d:02:69:
92:75:f7:ba:ee:3c:30:20:2c:2d:c8:84:82:9c:d4:
9d:e2:88:cb:6c:77:67:22:91:06:28:d0:24:2c:92:
d5:3d:2e:82:1a:2a:dd:4a:f2:b6:3d:94:ab:d2:09:
ac:8f:0e:1b:1f:32:20:c8:ca:bf:9a:21:7f:ca:58:
52:aa:f0:6e:53:d2:74:9d:cc:b8:fd:ab:b2:09:34:
9a:49:a8:73:36:41:1d:d3:ce:fc:e5:5d:79:fe:28:
15:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:3D:00:AF:97:B3:3F:DF:6E:FC:07:AA:86:73:EC:CB:E9:EA:33:3A
X509v3 Authority Key Identifier:
keyid:B0:4B:1C:DF:50:6C:E5:E9:93:7E:77:F8:26:3E:CF:6D:DB:25:5B:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sEsc31Bs5emTfnf4Jj7PbdslWwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/839b34-3529-438b-87d0-ce5019264895/1/sEsc31Bs5emTfnf4Jj7PbdslWwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/839b34-3529-438b-87d0-ce5019264895/1/sEsc31Bs5emTfnf4Jj7PbdslWwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:2b:a2:0d:f8:63:7a:2f:2b:5c:69:7a:1d:5d:24:bc:e6:ed:
ef:18:cd:3b:c3:9b:a4:cb:64:ac:74:3c:dd:43:fb:ca:4d:69:
50:86:ac:d9:9f:ae:eb:ce:4b:2a:d3:ea:a4:78:65:b4:91:f7:
89:e8:59:21:e1:41:2e:89:18:e7:27:d5:a4:f1:56:ad:c6:e3:
e3:d6:43:cf:95:d0:5c:ff:4e:f6:aa:7a:2c:73:de:49:1d:43:
3b:8e:7d:c6:cb:97:7f:ef:29:0f:0a:1b:ee:ac:f3:71:5d:30:
ca:8d:99:b1:03:4b:d3:98:d5:65:c7:c9:66:ea:4a:80:7a:5a:
ae:32:16:d0:df:3b:0b:3a:31:5c:31:f3:78:5d:95:c0:d9:81:
88:3d:62:ed:88:9c:00:4a:f4:be:8a:f8:86:9f:1c:af:5f:26:
34:5a:08:86:44:a7:e9:38:15:92:28:a6:37:eb:b6:3b:06:ef:
fd:08:c8:d0:ca:b6:05:a4:ba:53:60:ed:60:d7:7d:b7:33:c4:
9b:db:42:fe:ce:0f:5b:29:c2:88:f9:d1:96:12:10:cb:d1:e1:
3d:24:7f:6a:c1:a3:91:07:f6:ca:4c:f9:19:81:f0:81:16:50:
3d:d5:da:53:69:14:59:9a:40:2e:03:b7:e0:0a:d3:27:38:8c:
36:47:b3:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 14:20:47 2025 by rpki-client