Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/942e61-7ee6-41d4-b691-019a05ce5e7a/1/S4xZ6sloSDTLl8wq2FjVx03PbO0.mft
File: S4xZ6sloSDTLl8wq2FjVx03PbO0.mft (raw, json)
Hash identifier: LpchTKmG6I8hbtR73p8h9UgzKDCYT4w3oWVPsYWaKhc=
Subject key identifier: C2:34:0E:B0:4C:F3:49:79:CB:B3:AB:89:3C:6C:37:59:EE:06:05:07
Authority key identifier: 4B:8C:59:EA:C9:68:48:34:CB:97:CC:2A:D8:58:D5:C7:4D:CF:6C:ED
Certificate issuer: /CN=4b8c59eac9684834cb97cc2ad858d5c74dcf6ced
Certificate serial: 0194BD17B58927C68581C27703E213E657F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S4xZ6sloSDTLl8wq2FjVx03PbO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/942e61-7ee6-41d4-b691-019a05ce5e7a/1/S4xZ6sloSDTLl8wq2FjVx03PbO0.mft
Manifest number: 0291
Signing time: Fri 31 Jan 2025 16:00:35 +0000
Manifest this update: Fri 31 Jan 2025 16:00:35 +0000
Manifest next update: Sat 01 Feb 2025 16:00:35 +0000
Files and hashes: 1: RX0vF7s1v3ZmCOZA2PNfN34Nc0Q.roa (hash: DL5GkVVXEPj8zi75flOVBOwBTEyMxXVt8DN9ATKiCDI=)
2: S4xZ6sloSDTLl8wq2FjVx03PbO0.crl (hash: KsuUd7+GXPIv7ryzw9c3NW38qfIrfJ7whQB6zHruI6w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:b5:89:27:c6:85:81:c2:77:03:e2:13:e6:57:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b8c59eac9684834cb97cc2ad858d5c74dcf6ced
Validity
Not Before: Jan 31 16:00:35 2025 GMT
Not After : Feb 1 16:00:35 2025 GMT
Subject: CN=c2340eb04cf34979cbb3ab893c6c3759ee060507
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:a1:4c:76:92:78:0c:cf:83:8b:93:e6:1b:09:
2f:0e:8f:57:f6:ff:6f:4c:83:4a:31:e8:d8:cf:ad:
d7:db:60:a6:74:48:e0:8c:54:68:dd:5d:ce:b2:57:
dc:18:75:61:ec:99:da:85:94:46:03:e9:1c:12:c8:
5e:9e:c0:47:ad:cd:aa:41:b9:4d:c6:db:64:33:8e:
cf:64:f7:1b:ac:c9:19:2d:7a:02:25:bc:dc:2f:56:
c9:db:c5:05:1b:8e:a0:36:22:a3:1f:6f:64:6b:dc:
c9:35:c1:5b:a0:3d:88:96:a5:a4:24:43:6e:bf:fd:
42:a4:65:a3:34:35:a8:d8:58:22:94:1c:b6:46:3e:
79:57:8d:bf:ab:8c:1a:bc:3b:0f:44:dd:51:68:77:
3b:4d:ab:72:c8:b2:5b:35:a0:83:da:24:33:38:4a:
6f:91:3e:b3:37:d2:cc:09:4a:62:4d:c3:66:74:12:
06:91:b2:c0:94:25:1b:aa:ac:70:ef:c4:83:28:ea:
e2:ba:bc:f3:67:d6:0d:b6:9a:10:99:cf:ae:c1:22:
09:0b:0a:75:40:72:60:3b:a4:96:6c:d3:c6:03:b8:
e0:09:cd:ae:ce:59:04:a1:74:96:51:77:5a:b3:fa:
cc:d0:c6:c0:19:fd:9b:84:ee:e0:0d:67:e2:11:af:
bb:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:34:0E:B0:4C:F3:49:79:CB:B3:AB:89:3C:6C:37:59:EE:06:05:07
X509v3 Authority Key Identifier:
keyid:4B:8C:59:EA:C9:68:48:34:CB:97:CC:2A:D8:58:D5:C7:4D:CF:6C:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S4xZ6sloSDTLl8wq2FjVx03PbO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/942e61-7ee6-41d4-b691-019a05ce5e7a/1/S4xZ6sloSDTLl8wq2FjVx03PbO0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/942e61-7ee6-41d4-b691-019a05ce5e7a/1/S4xZ6sloSDTLl8wq2FjVx03PbO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:68:70:fc:41:d9:6d:ec:13:ca:ef:fb:e8:f1:bd:09:58:4e:
df:a2:a7:d3:8a:c4:51:78:af:66:e0:d8:95:8f:7b:b3:e9:8e:
2a:c1:e1:28:5a:19:20:34:3d:b6:ee:89:61:42:1b:6c:83:b3:
4c:39:c8:93:dc:08:ad:f7:21:ba:e3:b0:cd:30:df:2f:d1:0c:
2b:0c:16:2c:da:54:0b:41:db:10:6a:f4:f5:cd:f5:11:84:b3:
fe:50:8c:bf:66:8c:87:26:76:69:9f:bf:22:24:dd:16:b7:fa:
10:28:95:b3:de:52:3f:3a:e0:be:01:e7:25:3f:a8:4d:53:1a:
c8:a4:b4:a9:01:bf:94:1a:eb:cf:3e:99:b1:20:45:b9:fe:52:
66:42:dd:28:07:4c:e2:eb:22:74:a9:d1:76:05:93:bd:0d:7e:
be:8e:28:21:8c:88:ff:fd:03:95:a0:87:19:bd:9f:77:13:bc:
67:d4:de:51:b8:05:08:a4:6c:9b:ad:33:7b:8d:5c:63:c4:15:
ae:26:b4:33:b0:71:f3:8c:ec:a6:65:65:4f:94:f4:41:c6:19:
d5:49:dd:aa:d5:5c:ba:9c:2b:cf:13:5c:48:94:92:dd:7b:47:
9f:17:46:e5:a0:a6:66:a2:d7:5e:5c:d7:17:07:de:80:75:eb:
8a:db:38:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:21:07 2025 by rpki-client