Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/c69174-c031-45fd-a9c9-11b24d113f22/1/SEQEnTlhdqG16ziFSNm-PrPn1lE.mft
File: SEQEnTlhdqG16ziFSNm-PrPn1lE.mft (raw, json)
Hash identifier: Y3tuD3rxAUSboOqzqEVS0uwXsi7vASjrCUpYZ+sGo90=
Subject key identifier: 08:38:DB:D6:32:18:C6:39:38:81:6D:F9:1A:87:12:FF:FF:0A:34:D9
Authority key identifier: 48:44:04:9D:39:61:76:A1:B5:EB:38:85:48:D9:BE:3E:B3:E7:D6:51
Certificate issuer: /CN=4844049d396176a1b5eb388548d9be3eb3e7d651
Certificate serial: 0194BC3C9C5377A7792AD36CD8201EFC876F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SEQEnTlhdqG16ziFSNm-PrPn1lE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/c69174-c031-45fd-a9c9-11b24d113f22/1/SEQEnTlhdqG16ziFSNm-PrPn1lE.mft
Manifest number: 09F7
Signing time: Fri 31 Jan 2025 12:01:16 +0000
Manifest this update: Fri 31 Jan 2025 12:01:16 +0000
Manifest next update: Sat 01 Feb 2025 12:01:16 +0000
Files and hashes: 1: SEQEnTlhdqG16ziFSNm-PrPn1lE.crl (hash: B3tifWcSPJL1ArSyqFUhnuw2OiN0n9bmsjX/af9Bbtw=)
2: T5aESWxAVXZQCKU4hKQ7Mbe0-gU.roa (hash: /yZIDrhN4+3klzibXSLP0BAGEXpbbrny28/lcBpDjcU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:9c:53:77:a7:79:2a:d3:6c:d8:20:1e:fc:87:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4844049d396176a1b5eb388548d9be3eb3e7d651
Validity
Not Before: Jan 31 12:01:16 2025 GMT
Not After : Feb 1 12:01:16 2025 GMT
Subject: CN=0838dbd63218c63938816df91a8712ffff0a34d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c6:e6:92:67:50:66:af:c4:d8:d8:33:76:c8:
e7:15:65:ed:0d:39:b2:dd:58:d6:9b:5a:ec:d5:cd:
ec:be:71:98:fb:73:57:36:c4:38:3d:8c:60:50:ac:
07:42:f4:43:cc:b3:d8:03:19:62:d4:f3:85:db:9b:
55:2d:c3:ee:54:4e:ce:64:16:6e:ab:61:c0:2a:31:
3f:9b:1d:04:8b:50:33:3f:0d:76:62:6b:f7:d8:e0:
25:33:68:8d:bc:f6:98:e4:84:0c:fd:25:9b:3d:51:
48:17:91:de:04:1a:a4:34:2a:1d:e7:aa:2f:9e:17:
19:b3:5e:1e:5f:86:4f:fe:46:ee:1a:a4:c9:5f:28:
93:a4:5d:dc:de:aa:b9:3f:95:35:e6:2c:68:01:63:
ae:97:06:8a:a5:6c:b0:00:66:0e:62:13:fc:44:18:
12:df:c0:bf:59:6b:43:00:10:d4:84:0c:8f:79:26:
7b:d7:61:72:6a:80:3f:d8:e1:a2:3e:fa:e3:e6:83:
68:c7:e9:c6:54:0e:14:77:7a:e0:44:98:9f:71:d6:
58:c5:e7:8f:1a:b9:3e:1b:45:a0:99:e8:49:b0:32:
a6:47:27:d3:17:54:9d:f0:b2:e1:41:5d:06:99:36:
c1:0c:ef:5e:c7:66:1b:58:bc:69:0b:2d:2a:7e:a1:
fd:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:38:DB:D6:32:18:C6:39:38:81:6D:F9:1A:87:12:FF:FF:0A:34:D9
X509v3 Authority Key Identifier:
keyid:48:44:04:9D:39:61:76:A1:B5:EB:38:85:48:D9:BE:3E:B3:E7:D6:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SEQEnTlhdqG16ziFSNm-PrPn1lE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/c69174-c031-45fd-a9c9-11b24d113f22/1/SEQEnTlhdqG16ziFSNm-PrPn1lE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/c69174-c031-45fd-a9c9-11b24d113f22/1/SEQEnTlhdqG16ziFSNm-PrPn1lE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:af:e5:08:63:88:c6:5d:df:19:a4:16:f0:51:8c:a9:7b:05:
c8:6e:e3:73:36:74:71:aa:46:62:86:c5:a7:f1:c4:97:10:61:
9d:72:03:0d:fa:ac:3e:64:6f:76:58:de:7b:4c:cf:12:4d:7d:
4e:65:a8:d7:aa:28:bc:46:b9:36:bf:29:5d:ed:dc:d1:2f:28:
90:49:02:5b:0f:6a:cb:3d:9d:a4:ef:58:1a:36:93:8b:22:40:
35:1b:04:5a:3a:bd:81:cf:74:32:95:a0:44:e8:2d:d4:01:77:
18:d4:a0:95:7c:66:34:09:80:44:e4:5c:cd:33:2a:3e:35:03:
4a:75:d7:24:0a:46:0d:1e:97:b4:fa:90:f6:b5:48:35:fc:e3:
65:f5:8e:db:79:37:05:6c:26:47:fd:59:2a:18:99:d5:ac:97:
1f:68:ba:95:9c:dc:f4:ca:5a:68:c4:4d:ee:55:77:c3:7d:9a:
a6:3b:2b:5f:bb:d4:f4:9f:fe:2f:96:98:60:d1:c5:92:c2:c2:
c3:f0:9d:d3:2b:75:a5:b1:25:93:c7:54:6c:79:75:68:39:e8:
e9:1a:ce:69:44:34:5a:53:3c:4a:12:33:83:9e:88:f0:e7:dc:
e7:cb:8c:66:a2:8e:06:ae:53:f5:e3:e1:20:18:0a:9a:ed:b4:
5a:0e:c1:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:51:07 2025 by rpki-client