Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/ef2192-f2d9-4a56-93f6-17382539b000/1/swUV9H2pJdn5ATgIqpETwr3pbZo.mft
File: swUV9H2pJdn5ATgIqpETwr3pbZo.mft (raw, json)
Hash identifier: RrAGXIMwKoUB0p2pXtgFIcsOJkT4eQJfXsSffS9+lyI=
Subject key identifier: D2:9B:8B:68:B3:89:1F:72:81:3B:12:F6:DC:B9:52:64:0C:21:54:C4
Authority key identifier: B3:05:15:F4:7D:A9:25:D9:F9:01:38:08:AA:91:13:C2:BD:E9:6D:9A
Certificate issuer: /CN=b30515f47da925d9f9013808aa9113c2bde96d9a
Certificate serial: 0194BC3BD254E83CA83A0BA0181A2489C233
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/swUV9H2pJdn5ATgIqpETwr3pbZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/ef2192-f2d9-4a56-93f6-17382539b000/1/swUV9H2pJdn5ATgIqpETwr3pbZo.mft
Manifest number: 9A
Signing time: Fri 31 Jan 2025 12:00:24 +0000
Manifest this update: Fri 31 Jan 2025 12:00:24 +0000
Manifest next update: Sat 01 Feb 2025 12:00:24 +0000
Files and hashes: 1: 8D4_cs3El7iMnocmOE0P9fDWbGM.roa (hash: EF6oh36rQUWBSR4sj1xINR215tCyltEhPZYCKNWyilI=)
2: swUV9H2pJdn5ATgIqpETwr3pbZo.crl (hash: POH0wGC7Dj9NYeLC1hKB7vhYVCCkg3h31s6/rXYYap8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:d2:54:e8:3c:a8:3a:0b:a0:18:1a:24:89:c2:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b30515f47da925d9f9013808aa9113c2bde96d9a
Validity
Not Before: Jan 31 12:00:24 2025 GMT
Not After : Feb 1 12:00:24 2025 GMT
Subject: CN=d29b8b68b3891f72813b12f6dcb952640c2154c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a1:a2:83:0d:70:d1:cc:34:2d:15:f7:b2:6d:
37:b8:2a:c7:8a:4c:1e:0b:85:10:4f:56:fc:da:7d:
8a:9c:7a:8b:d4:45:65:5b:c2:5b:4c:e4:83:38:3d:
f3:d4:b9:e6:fd:79:67:f5:71:2b:32:d7:b1:b5:05:
42:1d:c7:9c:a8:51:f7:a0:90:b6:37:d8:d4:e7:4e:
99:2f:5c:a0:a4:44:73:72:23:13:0c:e3:aa:62:74:
10:b9:bb:44:45:0b:fd:09:a9:47:f9:b8:4c:23:db:
7e:2c:c3:31:c3:89:53:a3:ce:0b:66:db:6d:3e:0c:
0d:00:f7:2e:c6:65:71:07:fe:41:22:47:ce:ec:b6:
e5:b6:43:bc:be:7c:eb:6d:da:d4:ac:47:f8:91:96:
61:42:6f:f8:85:55:88:48:eb:fe:28:57:04:cc:1e:
82:27:68:8d:f4:e0:8c:4d:39:31:b9:b4:66:f5:2d:
b3:12:46:97:48:b8:8b:20:44:a7:8e:37:16:28:c4:
3f:a8:d7:b7:63:c9:46:2d:13:33:82:25:1e:cf:73:
eb:eb:e6:36:95:b9:56:ba:56:cf:b8:0d:46:5e:b2:
e2:05:8f:b7:ce:d9:25:00:b2:ce:69:5c:af:d9:9f:
f8:68:c2:f5:a1:b5:9a:11:bc:1b:2c:78:52:d4:91:
99:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:9B:8B:68:B3:89:1F:72:81:3B:12:F6:DC:B9:52:64:0C:21:54:C4
X509v3 Authority Key Identifier:
keyid:B3:05:15:F4:7D:A9:25:D9:F9:01:38:08:AA:91:13:C2:BD:E9:6D:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/swUV9H2pJdn5ATgIqpETwr3pbZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/ef2192-f2d9-4a56-93f6-17382539b000/1/swUV9H2pJdn5ATgIqpETwr3pbZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/ef2192-f2d9-4a56-93f6-17382539b000/1/swUV9H2pJdn5ATgIqpETwr3pbZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:0f:d4:fb:30:4e:ba:09:8e:fb:36:d8:c2:e6:e2:8b:0a:03:
cf:00:8e:6c:13:bb:7b:e9:dd:24:45:05:e9:bb:03:7b:04:b9:
27:c6:76:ec:90:d7:f6:04:2c:4d:6b:6c:f5:62:6a:01:55:26:
46:c3:af:eb:ae:a3:c2:28:d1:f5:69:5b:4b:71:12:37:a5:96:
5a:97:fd:31:7b:a4:25:8c:4b:a2:bf:f2:0c:de:b7:d8:cf:31:
e8:c7:10:81:9b:00:5e:2f:8b:ee:9b:57:34:71:73:a9:ab:07:
76:43:71:82:7b:1a:5b:a7:91:7e:85:f6:33:d5:e8:78:58:f5:
ef:f1:c3:e0:0a:1d:05:e7:6e:b0:77:07:0e:d0:d2:15:84:69:
89:57:66:2b:28:31:0c:2f:0a:4a:81:5a:da:50:0f:16:37:10:
ae:81:85:03:d9:e7:4f:6b:0a:42:6e:7f:9f:3f:67:2b:0e:13:
b6:41:77:26:36:c5:6c:23:97:50:47:9c:62:56:66:9b:67:32:
23:95:55:65:20:a7:10:43:50:51:89:a6:94:4c:04:b6:77:a0:
10:5b:6a:5d:33:93:bd:b5:32:c6:9a:95:1f:a8:f4:83:7d:9a:
3a:53:0c:8c:64:53:fc:09:b9:29:38:18:ba:67:1a:ed:28:82:
00:b5:ac:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:02:13 2025 by rpki-client