Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/72a495-2b5d-4a23-99c4-ef0671c7c0df/1/sXQMTAefLR3uhUOfgngbm651apU.mft
File: sXQMTAefLR3uhUOfgngbm651apU.mft (raw, json)
Hash identifier: M4BYiuVjphRDTE9ZT4LOszBnZZWW0fBrf7Fe1Bj9VFs=
Subject key identifier: 94:F0:64:0B:B7:31:56:A1:D2:6C:78:4C:D9:A7:E2:0C:85:9F:44:19
Authority key identifier: B1:74:0C:4C:07:9F:2D:1D:EE:85:43:9F:82:78:1B:9B:AE:75:6A:95
Certificate issuer: /CN=b1740c4c079f2d1dee85439f82781b9bae756a95
Certificate serial: 0194BD4E5F94801FC43A5FAC3790F929DFB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXQMTAefLR3uhUOfgngbm651apU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/72a495-2b5d-4a23-99c4-ef0671c7c0df/1/sXQMTAefLR3uhUOfgngbm651apU.mft
Manifest number: 1077
Signing time: Fri 31 Jan 2025 17:00:17 +0000
Manifest this update: Fri 31 Jan 2025 17:00:17 +0000
Manifest next update: Sat 01 Feb 2025 17:00:17 +0000
Files and hashes: 1: 0kGm7IS6foM84ApNB5wMBZmcs70.roa (hash: fsNAu7RVtrbBsKEN64Ou91zqn3ieSIW0lwlDv3luCl0=)
2: QHGLz4vDf8HU0PXuv58AHJKDNwE.roa (hash: zsAsJqx3Xlx/j+LLE8QbsIeKt4A9wuocERvf2nTmf7A=)
3: Sz2kPMld2S0NhbWe3VBXUQg4E_g.roa (hash: CgZe2V9k88f5ug37ai2G7ohUxSeYSwTeyOJXFySNdfc=)
4: sXQMTAefLR3uhUOfgngbm651apU.crl (hash: 3fVw6tna0rhNZ6np+F9QRBwfMyZH3TI///fKy69kbas=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:5f:94:80:1f:c4:3a:5f:ac:37:90:f9:29:df:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1740c4c079f2d1dee85439f82781b9bae756a95
Validity
Not Before: Jan 31 17:00:17 2025 GMT
Not After : Feb 1 17:00:17 2025 GMT
Subject: CN=94f0640bb73156a1d26c784cd9a7e20c859f4419
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:29:01:07:47:39:12:e9:f9:df:57:c8:df:57:
db:41:02:9a:2c:a4:43:b7:5b:25:d0:e9:36:dc:fb:
bd:bb:21:76:f3:bc:0b:7f:91:18:0d:2b:93:af:4f:
51:83:6a:96:54:7a:ec:e3:1a:72:b7:26:20:fe:3d:
bc:51:44:c3:d3:5d:4e:ab:f4:68:84:18:4a:74:19:
60:e6:7d:b3:2f:9d:42:6d:03:38:a9:84:92:54:db:
d5:b6:4f:77:2c:38:f1:33:7c:fc:c7:06:14:4a:9f:
11:eb:c4:44:d9:d8:ef:c0:4c:11:ee:3a:3e:f0:bf:
f4:70:04:44:d7:b2:81:d7:ac:1e:47:f4:a4:74:b9:
71:41:64:dc:b5:4f:ed:b3:28:4a:fc:ac:56:a4:6b:
26:49:65:96:4f:87:ea:64:57:0d:d8:b3:35:cc:5e:
1d:6d:dd:eb:38:2b:67:d7:95:43:41:d2:93:0a:12:
3b:6f:8e:4b:3f:7c:70:6f:e8:67:d1:72:f0:6c:ed:
71:b5:13:ff:21:b5:eb:6a:6a:d8:e0:87:c0:6d:1f:
5f:41:33:b8:8b:c1:ac:37:93:ac:8c:3a:16:ba:ba:
af:e4:64:d1:61:96:88:4b:2d:95:a0:8f:05:1c:60:
fc:46:6a:8d:7c:c7:17:1b:44:d1:48:8b:18:df:14:
dc:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:F0:64:0B:B7:31:56:A1:D2:6C:78:4C:D9:A7:E2:0C:85:9F:44:19
X509v3 Authority Key Identifier:
keyid:B1:74:0C:4C:07:9F:2D:1D:EE:85:43:9F:82:78:1B:9B:AE:75:6A:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXQMTAefLR3uhUOfgngbm651apU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/72a495-2b5d-4a23-99c4-ef0671c7c0df/1/sXQMTAefLR3uhUOfgngbm651apU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/72a495-2b5d-4a23-99c4-ef0671c7c0df/1/sXQMTAefLR3uhUOfgngbm651apU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:95:3c:a9:b0:b0:84:61:6d:06:0b:a0:fd:04:6f:ce:91:c1:
53:05:48:f3:e6:94:bc:be:a0:31:ec:1e:47:f3:9b:cc:f8:00:
e8:bf:9e:10:d2:55:05:2e:4d:3b:77:5c:26:5c:fd:66:bd:80:
25:94:f9:79:57:69:d8:c2:5e:36:e5:82:45:85:f7:88:d5:09:
c5:ad:05:26:38:83:68:5a:37:84:a2:06:65:a7:40:ec:6e:a3:
74:73:a2:60:1c:f2:20:63:56:f3:98:02:0a:57:f0:35:35:c0:
ee:05:b2:df:22:7a:ed:46:f7:02:3d:e1:d9:09:db:71:15:bf:
a6:84:e3:3b:b4:50:3f:01:1b:83:16:fc:db:1f:66:46:04:95:
81:fc:7d:5d:52:0b:e6:e8:b9:ae:a7:a6:59:f1:6e:4b:d0:c6:
bb:dd:90:e3:cf:9b:56:e6:0f:6b:8d:57:b2:a4:50:0a:70:6c:
fa:88:1f:71:7c:ab:03:30:85:2a:81:e2:02:3f:5f:c5:59:25:
14:76:e9:85:33:af:5d:52:46:7f:db:2d:8c:8b:98:be:03:56:
a8:38:e5:9e:2e:ce:f3:b0:60:7b:b9:9f:e6:61:04:9c:fa:b8:
23:44:5e:32:b0:bf:b2:60:ea:2f:f4:e6:27:6d:0e:8d:ac:1b:
e6:fd:1f:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:09:22 2025 by rpki-client