Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/ce0b21-d65c-42e6-874b-f4cb867f90d8/1/sG9AQEkaZW_3Um0vF2EbDWisvQw.mft
File: sG9AQEkaZW_3Um0vF2EbDWisvQw.mft (raw, json)
Hash identifier: I8+/8hPwpFWKgt7Dp4RtH7Ao9FGdt6UwWX4pIzAXfZQ=
Subject key identifier: B9:09:D8:83:AE:C4:3A:90:57:34:61:D4:6D:BB:20:60:54:62:EC:28
Authority key identifier: B0:6F:40:40:49:1A:65:6F:F7:52:6D:2F:17:61:1B:0D:68:AC:BD:0C
Certificate issuer: /CN=b06f4040491a656ff7526d2f17611b0d68acbd0c
Certificate serial: 0194BC3C26E3517CE11F852CFCB39BCBF87B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sG9AQEkaZW_3Um0vF2EbDWisvQw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/ce0b21-d65c-42e6-874b-f4cb867f90d8/1/sG9AQEkaZW_3Um0vF2EbDWisvQw.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 12:00:46 +0000
Manifest this update: Fri 31 Jan 2025 12:00:46 +0000
Manifest next update: Sat 01 Feb 2025 12:00:46 +0000
Files and hashes: 1: 3oQgBF8b0SlPmJhLRByZqFye4Kg.roa (hash: kYRYhVl9nNIlfjRJmfhpqtBDhLtp2pSGg+NrF/eLIP0=)
2: sG9AQEkaZW_3Um0vF2EbDWisvQw.crl (hash: dGGNkzr3mKUyu742nbrjyy67KQjrSwLMlIeJSkpzxrI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:26:e3:51:7c:e1:1f:85:2c:fc:b3:9b:cb:f8:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b06f4040491a656ff7526d2f17611b0d68acbd0c
Validity
Not Before: Jan 31 12:00:46 2025 GMT
Not After : Feb 1 12:00:46 2025 GMT
Subject: CN=b909d883aec43a90573461d46dbb20605462ec28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:63:eb:1a:f2:5f:35:ef:7c:92:8e:1b:7f:da:
e4:9b:b9:2c:20:c5:63:b5:26:b2:c6:54:36:de:85:
f7:a9:c5:35:66:2b:3d:b5:5d:a5:e9:54:a4:4b:b8:
c7:65:90:33:6b:fb:73:0e:1b:5a:d8:70:99:fd:b6:
c7:83:dc:c0:0b:fd:fd:04:9a:75:8e:2f:5a:f4:3e:
b8:16:66:f1:3a:0d:7e:a4:25:ad:bf:d0:53:e7:fb:
72:90:b1:3f:fa:f8:1a:7d:0b:7b:3f:3f:f5:6a:0c:
9c:09:c7:00:ef:7c:bd:43:32:78:28:f9:83:c2:34:
51:59:b4:ea:84:25:01:0d:e4:6c:ad:e6:f4:81:3a:
4c:a1:ee:5e:9a:7a:83:dd:ab:d6:fb:bf:18:09:4d:
75:f3:10:1d:54:c3:39:3b:73:b8:2b:d6:84:7e:17:
85:8d:75:ab:0d:ab:73:3f:d2:53:4f:cd:54:47:c3:
d5:c0:e1:bc:a1:2d:61:bc:fd:10:9b:fc:66:ec:34:
fd:a9:61:1b:f1:d2:03:d8:65:b7:b4:7c:42:ea:8a:
f7:08:9c:0d:4e:c3:8d:ea:75:42:7a:0b:12:39:78:
f7:37:7a:69:8c:57:d3:ce:e1:8b:12:69:86:ab:2c:
15:a9:60:59:40:b9:0b:a2:22:7b:48:e8:b0:b5:01:
5e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:09:D8:83:AE:C4:3A:90:57:34:61:D4:6D:BB:20:60:54:62:EC:28
X509v3 Authority Key Identifier:
keyid:B0:6F:40:40:49:1A:65:6F:F7:52:6D:2F:17:61:1B:0D:68:AC:BD:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sG9AQEkaZW_3Um0vF2EbDWisvQw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/ce0b21-d65c-42e6-874b-f4cb867f90d8/1/sG9AQEkaZW_3Um0vF2EbDWisvQw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/ce0b21-d65c-42e6-874b-f4cb867f90d8/1/sG9AQEkaZW_3Um0vF2EbDWisvQw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:1f:8b:d6:f8:e1:19:89:45:52:68:c4:57:88:a4:df:00:20:
6b:b5:50:b6:d8:73:ba:fd:0f:9e:e3:68:f4:15:c2:5d:6e:91:
2d:e0:5f:51:79:c9:d8:f0:5e:e0:24:c2:ee:b6:34:f8:1e:97:
c2:4e:dc:c4:61:a6:b9:9d:24:dd:d5:0c:e4:77:2a:38:5c:86:
e0:b1:3d:a9:c0:a6:3e:22:be:1c:22:e6:92:8c:4b:02:9b:ec:
8e:73:e7:03:12:04:78:0a:d2:59:bd:3b:e0:f3:70:c3:33:ab:
20:59:64:21:41:98:95:4c:87:78:73:44:bc:10:25:eb:3a:a5:
ca:4e:50:bc:7b:1c:21:b4:0f:67:ab:5b:16:37:bb:11:a8:f8:
7b:0b:2a:39:a0:72:7a:a4:db:de:1a:ec:4c:8e:d0:cd:bf:5d:
a0:08:af:ab:1b:cb:84:13:e0:37:c4:77:36:d7:dc:6e:04:e8:
d0:e1:47:e5:6d:4e:eb:cd:58:0e:e0:7e:3f:ca:f9:5a:72:af:
31:f6:9c:91:cd:97:8f:9c:58:14:3e:e7:e0:6a:29:88:f7:0b:
84:0c:b6:42:8a:aa:bc:71:de:dc:b7:df:00:38:51:00:f1:85:
76:34:37:64:c4:5c:e5:89:67:e5:5d:d4:46:d7:4e:39:a3:d9:
23:0b:2c:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:56:00 2025 by rpki-client