Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/267966-f039-4174-810d-3f4ef81a2e53/1/S8hY5QhWNUaEpdBKPsw1klgNVI0.mft
File: S8hY5QhWNUaEpdBKPsw1klgNVI0.mft (raw, json)
Hash identifier: d3x6QGxdrkmDi0xqy1qAR7vPOlWuw632MQMt/388+3Y=
Subject key identifier: 58:AF:90:08:D9:53:A6:6C:9B:13:2F:97:B4:0D:31:97:9F:17:68:2D
Authority key identifier: 4B:C8:58:E5:08:56:35:46:84:A5:D0:4A:3E:CC:35:92:58:0D:54:8D
Certificate issuer: /CN=4bc858e50856354684a5d04a3ecc3592580d548d
Certificate serial: 0194BBCDAF5CF781CC420EC86692F760E950
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S8hY5QhWNUaEpdBKPsw1klgNVI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/267966-f039-4174-810d-3f4ef81a2e53/1/S8hY5QhWNUaEpdBKPsw1klgNVI0.mft
Manifest number: 06E7
Signing time: Fri 31 Jan 2025 10:00:06 +0000
Manifest this update: Fri 31 Jan 2025 10:00:06 +0000
Manifest next update: Sat 01 Feb 2025 10:00:06 +0000
Files and hashes: 1: 1kPYBeHFqZcRahwRlHXvuPvT0zI.roa (hash: qhycFEi6FwqVVERso5+P+dTV24QXX6z3cT56YMpxbXU=)
2: S8hY5QhWNUaEpdBKPsw1klgNVI0.crl (hash: fnMyi5NacphBwTNdYw0aCRd8phGjV3k4RUXkb4MJ9x4=)
3: aB5cBy65RFAHls1vV8087q2f8aM.roa (hash: 8SgzFwiw3uNLh4r/2nOtnYE1hDmT2PxsFGPqhzFqtAQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:af:5c:f7:81:cc:42:0e:c8:66:92:f7:60:e9:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bc858e50856354684a5d04a3ecc3592580d548d
Validity
Not Before: Jan 31 10:00:06 2025 GMT
Not After : Feb 1 10:00:06 2025 GMT
Subject: CN=58af9008d953a66c9b132f97b40d31979f17682d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:bc:7f:b0:a5:8c:78:f0:47:d7:bc:02:2f:04:
f9:bb:c1:23:5e:65:65:7d:29:87:26:22:3c:03:50:
a9:ff:1c:c1:5e:80:3c:be:14:dd:33:b4:4b:a2:14:
6d:0b:4f:1f:78:c6:4d:9f:28:3e:49:f8:01:fd:5a:
d0:21:2e:95:17:c3:c0:1c:12:f2:d5:68:9a:fd:12:
89:5c:2b:2e:61:88:71:82:23:df:a6:d6:46:25:d2:
0a:d3:14:d6:d4:db:84:24:3f:1d:f1:62:cc:c0:f3:
30:26:44:c3:d6:c1:f7:ea:ad:56:9f:50:3a:7e:d7:
a2:93:0d:6b:b9:96:83:85:51:a6:f6:cd:e3:46:24:
3e:d3:46:6b:d7:2c:b2:5b:67:1f:de:77:11:96:70:
5d:69:9c:a9:7d:a9:7f:6d:ca:9c:67:ac:0a:3f:d6:
2d:64:ec:08:4e:39:26:46:05:73:f0:21:1b:e5:57:
ae:31:d3:2b:68:6a:94:fd:b7:91:b4:b9:cb:c5:bf:
33:b0:d8:5d:5d:1f:61:48:05:b9:24:f3:cf:2c:6b:
67:54:b6:27:e5:da:83:ff:36:ce:2d:82:17:54:f6:
88:0f:73:ba:4b:bd:ab:ba:a1:8c:03:34:30:dc:af:
29:58:db:23:c8:3c:b7:21:cd:71:e1:d3:3c:a6:15:
74:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:AF:90:08:D9:53:A6:6C:9B:13:2F:97:B4:0D:31:97:9F:17:68:2D
X509v3 Authority Key Identifier:
keyid:4B:C8:58:E5:08:56:35:46:84:A5:D0:4A:3E:CC:35:92:58:0D:54:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S8hY5QhWNUaEpdBKPsw1klgNVI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/267966-f039-4174-810d-3f4ef81a2e53/1/S8hY5QhWNUaEpdBKPsw1klgNVI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/267966-f039-4174-810d-3f4ef81a2e53/1/S8hY5QhWNUaEpdBKPsw1klgNVI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:6a:5d:67:31:01:c9:e1:c6:0e:d8:e0:06:e6:b5:67:45:13:
4d:fc:e7:de:1f:fa:2f:f8:e9:99:d9:df:87:6b:08:0b:3d:88:
89:f2:7e:19:a4:f6:00:b7:5f:d5:ed:bc:30:04:c4:f3:70:48:
ba:79:1b:c6:61:01:e5:5f:9a:71:f9:cd:33:92:0d:04:43:5c:
60:7f:e0:c0:81:96:12:db:60:ee:f8:79:66:0f:bb:17:ed:90:
62:8b:d5:8e:34:94:3d:44:e0:3a:c2:9e:73:64:10:9d:61:ea:
11:1c:f6:66:6d:85:3d:e7:7e:a1:74:c4:56:e8:b7:71:76:8e:
f0:41:95:24:78:f7:b1:b8:ae:d0:21:65:b5:eb:9b:76:bb:e7:
6f:ed:f2:09:80:70:d6:c6:f7:5c:f8:59:15:ff:55:86:67:28:
c9:78:34:6d:25:c1:ba:33:22:66:2d:e4:bc:54:36:a2:4e:33:
57:01:73:ef:55:31:ef:b5:16:d5:e3:ce:46:c6:ae:89:cf:ff:
7d:dd:76:9d:65:04:fb:a2:0b:d6:62:58:2d:d3:a3:7c:5a:98:
c8:32:9f:fe:4c:48:4b:73:8a:56:06:5b:c7:db:f2:4d:9b:82:
fb:9c:5d:db:6d:67:49:8e:a3:c8:ef:c0:56:f1:0d:cd:42:bf:
9f:37:7f:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:51:12 2025 by rpki-client