Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/sDmrgpj6NjroN-UwAolpzFy_EE4.mft
File: sDmrgpj6NjroN-UwAolpzFy_EE4.mft (raw, json)
Hash identifier: XsLatm67A/VrDKrohQ5aaYujeicR4vjwC/IeTj6YMZc=
Subject key identifier: F2:9E:CD:1C:78:8D:B5:BC:6E:B2:35:CB:D6:7F:6C:53:07:F1:94:CC
Authority key identifier: B0:39:AB:82:98:FA:36:3A:E8:37:E5:30:02:89:69:CC:5C:BF:10:4E
Certificate issuer: /CN=b039ab8298fa363ae837e530028969cc5cbf104e
Certificate serial: 0194BD176CC99EB32E37FE8435FDB594EFC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sDmrgpj6NjroN-UwAolpzFy_EE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/sDmrgpj6NjroN-UwAolpzFy_EE4.mft
Manifest number: 0289
Signing time: Fri 31 Jan 2025 16:00:16 +0000
Manifest this update: Fri 31 Jan 2025 16:00:16 +0000
Manifest next update: Sat 01 Feb 2025 16:00:16 +0000
Files and hashes: 1: PM9vUgvftogOQeT0OmZK9fL4cPE.roa (hash: w38RqWqCQvckgI8s1dDuKDyQH4CjWPVhD0xwM2FPrMY=)
2: sDmrgpj6NjroN-UwAolpzFy_EE4.crl (hash: jQotRO1/hWlSPVuQ2a5EH+jVstkk/z/suot2yBdqt6A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:6c:c9:9e:b3:2e:37:fe:84:35:fd:b5:94:ef:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b039ab8298fa363ae837e530028969cc5cbf104e
Validity
Not Before: Jan 31 16:00:16 2025 GMT
Not After : Feb 1 16:00:16 2025 GMT
Subject: CN=f29ecd1c788db5bc6eb235cbd67f6c5307f194cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:38:c9:b3:46:a1:ba:fb:be:be:15:ea:14:ae:
90:d4:02:ad:64:fa:3f:70:33:b9:98:f1:55:98:28:
0b:bc:a9:95:aa:a1:ee:73:a4:33:f2:cb:2b:c0:0e:
e4:3e:12:5d:6a:83:72:e3:7f:ab:41:2a:08:b9:39:
c4:cb:01:01:ac:79:f7:68:86:b1:96:cc:6f:95:aa:
7a:f1:87:f8:6b:c0:88:d5:7e:b5:a4:92:58:bd:03:
03:4c:a1:9a:aa:8b:40:e2:e9:f1:96:e7:c3:cd:34:
07:b7:c8:91:ea:2d:fe:36:42:2a:16:73:a1:d3:cc:
75:1a:d7:bb:fd:8d:25:37:26:30:0b:50:45:26:c1:
09:ad:7d:93:b0:6f:07:2f:6d:e9:3a:cb:56:b4:1a:
84:6d:9a:1d:cd:53:bd:03:07:8d:ba:1e:85:1b:2e:
20:8f:54:17:2b:04:14:81:f1:e6:2b:f7:14:05:a3:
c2:8e:a2:0a:c5:66:66:e5:c4:be:3c:39:c0:c5:7e:
07:20:e3:b2:7f:de:16:2d:ec:66:9f:e5:1f:d2:f7:
42:72:97:07:1c:fe:ae:01:ab:e8:07:42:04:74:ae:
48:d9:9b:0a:87:b6:ec:17:4d:1f:51:82:e3:c4:ea:
aa:d2:9d:6f:90:a5:db:2c:3a:b7:74:23:2b:a8:1f:
c0:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:9E:CD:1C:78:8D:B5:BC:6E:B2:35:CB:D6:7F:6C:53:07:F1:94:CC
X509v3 Authority Key Identifier:
keyid:B0:39:AB:82:98:FA:36:3A:E8:37:E5:30:02:89:69:CC:5C:BF:10:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sDmrgpj6NjroN-UwAolpzFy_EE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/sDmrgpj6NjroN-UwAolpzFy_EE4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/sDmrgpj6NjroN-UwAolpzFy_EE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:58:b4:d0:58:83:c9:06:bf:04:aa:dc:3e:ca:69:6b:33:ac:
fa:ab:0e:85:0e:ff:9b:45:36:fa:72:72:51:68:00:0f:9e:da:
fd:32:fa:07:db:78:11:0b:29:37:93:28:6f:cb:60:c5:39:64:
8e:eb:93:59:c1:3a:5b:4c:ab:4f:ea:cf:ea:1a:9a:d3:c9:36:
33:69:5d:ee:e5:23:f3:8c:8b:dc:64:12:9c:d8:ab:8d:0d:90:
a1:6a:dd:d2:f6:23:3f:2c:40:29:09:06:90:f0:1e:c2:aa:10:
83:01:10:7b:d4:7b:e2:b9:77:28:66:f7:00:7a:c4:ef:5d:f5:
4a:8a:dd:28:92:ce:c1:97:f8:f1:ba:25:1c:15:67:ee:e6:4e:
b5:3e:01:44:44:40:d4:8b:40:59:d7:8c:54:19:c4:9a:d5:ab:
a8:8c:eb:49:a1:0e:c8:58:38:7a:46:60:5a:cb:70:b8:3d:ce:
ba:f0:cf:ae:34:9b:26:48:4e:7c:3b:2a:52:3f:aa:4a:02:4d:
a3:93:60:37:78:1e:e4:6d:9c:83:f3:01:33:e1:99:a4:da:e3:
bd:b1:3d:2a:1b:f5:4f:d1:49:ac:24:52:0b:94:27:31:aa:8e:
82:8f:b9:3f:d5:d8:51:ea:e4:0b:72:a5:d5:13:a8:c8:f4:4b:
c5:77:82:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:31:56 2025 by rpki-client