Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/9a1e6f-2e1c-4743-a7a6-06f36628c8a1/1/SxojjgQ_4GOnI7YxWQFTk6ZK_Os.mft
File: SxojjgQ_4GOnI7YxWQFTk6ZK_Os.mft (raw, json)
Hash identifier: yYmBnoiCcjaBGo0ENvtD92ZWtR3DZzyH0L5KCcyGdzg=
Subject key identifier: F1:D4:D2:FE:0B:70:6C:C7:F9:9E:2E:9D:9C:36:1C:81:73:D9:44:7E
Authority key identifier: 4B:1A:23:8E:04:3F:E0:63:A7:23:B6:31:59:01:53:93:A6:4A:FC:EB
Certificate issuer: /CN=4b1a238e043fe063a723b63159015393a64afceb
Certificate serial: 0194BBCE4238D11E553516CFBD7157786CA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SxojjgQ_4GOnI7YxWQFTk6ZK_Os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/9a1e6f-2e1c-4743-a7a6-06f36628c8a1/1/SxojjgQ_4GOnI7YxWQFTk6ZK_Os.mft
Manifest number: 0355
Signing time: Fri 31 Jan 2025 10:00:44 +0000
Manifest this update: Fri 31 Jan 2025 10:00:44 +0000
Manifest next update: Sat 01 Feb 2025 10:00:44 +0000
Files and hashes: 1: SxojjgQ_4GOnI7YxWQFTk6ZK_Os.crl (hash: bO09fK+deBJh8HmXRx9nX97v86I/YvvDKZPRqaufYrw=)
2: irUXbj8pGyxrPmrP5os28F3HvOo.roa (hash: NW1tIg5uUb1UHmkij/j3iUK3J1fgZQvXI2Lvvn/5OOk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:42:38:d1:1e:55:35:16:cf:bd:71:57:78:6c:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b1a238e043fe063a723b63159015393a64afceb
Validity
Not Before: Jan 31 10:00:44 2025 GMT
Not After : Feb 1 10:00:44 2025 GMT
Subject: CN=f1d4d2fe0b706cc7f99e2e9d9c361c8173d9447e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ba:d5:e3:2d:a8:3a:c3:ac:35:62:eb:ad:8e:
3c:41:cd:a4:5d:b9:06:38:a7:f5:d1:a6:b0:76:e6:
95:a7:e4:a2:7f:65:58:44:60:de:e3:96:c4:27:13:
2f:d9:78:dc:e3:66:7f:77:68:33:46:e2:0f:a7:d0:
e0:52:06:5d:be:30:91:ea:08:90:62:fb:fe:c6:bb:
49:5d:e9:e3:45:7d:54:ac:db:0b:9c:4c:89:09:35:
8d:5a:ec:1d:a6:29:65:57:27:86:09:99:24:27:e9:
97:50:80:9e:e2:2e:8b:70:4e:38:b3:71:27:81:30:
0d:56:88:aa:98:a9:47:0a:91:65:89:34:02:45:04:
ec:7f:ee:a6:8b:b5:cd:ca:67:db:82:af:74:f8:9c:
83:78:2f:a5:2b:5f:04:fd:8e:e9:d5:ab:8c:0e:79:
ab:eb:6e:40:da:64:e3:70:39:f3:0a:7c:25:8e:e8:
56:c4:b4:3b:e0:86:07:32:94:c5:4a:bd:7b:91:d8:
52:c4:35:19:f4:9e:1a:df:0a:b5:33:99:2c:b2:a0:
a8:c3:b3:13:ce:46:55:38:b5:8f:80:9b:46:d9:dd:
82:03:39:b6:b6:0e:3e:c2:a1:23:d3:65:2d:8a:2d:
69:b0:27:0a:f2:93:89:eb:db:7f:0a:9b:6f:30:8f:
9b:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:D4:D2:FE:0B:70:6C:C7:F9:9E:2E:9D:9C:36:1C:81:73:D9:44:7E
X509v3 Authority Key Identifier:
keyid:4B:1A:23:8E:04:3F:E0:63:A7:23:B6:31:59:01:53:93:A6:4A:FC:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SxojjgQ_4GOnI7YxWQFTk6ZK_Os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/9a1e6f-2e1c-4743-a7a6-06f36628c8a1/1/SxojjgQ_4GOnI7YxWQFTk6ZK_Os.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/9a1e6f-2e1c-4743-a7a6-06f36628c8a1/1/SxojjgQ_4GOnI7YxWQFTk6ZK_Os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d3:93:cd:3d:34:b3:65:ca:cb:49:c1:d9:34:1c:d4:ed:ab:f3:
58:95:f1:03:fd:20:58:0d:ea:b2:02:e0:35:e1:3f:45:05:e4:
11:af:e1:aa:d0:8c:f0:36:01:3f:10:97:52:24:69:7e:ba:56:
c9:6b:81:94:d8:17:c7:0c:da:73:c6:b6:ce:ee:24:5d:cf:f4:
75:28:50:e9:de:df:21:1d:48:4b:a1:f7:df:4f:fd:85:66:ce:
55:88:43:30:e7:5e:5d:6a:28:f8:b0:b2:9e:ab:ea:6a:21:44:
9a:8d:19:6f:bc:a4:b8:c3:5b:3b:07:0e:ea:64:5c:20:ae:0e:
bc:94:f7:74:17:38:3b:04:cd:e4:25:d5:63:39:58:06:42:a4:
3b:47:d1:fb:00:a8:91:3a:fd:81:aa:05:77:9f:6c:38:84:61:
d0:cd:ee:12:f5:f2:1b:65:55:83:08:1e:94:18:a9:56:7b:ed:
0f:cd:b6:bb:09:99:d5:70:2d:2d:5c:3d:36:2c:dc:6d:a3:26:
7e:62:a3:06:c0:84:8a:8c:b1:52:df:a1:1d:11:89:a5:85:e4:
38:ad:e1:68:80:cd:07:82:a2:b7:4c:42:a6:b2:80:6f:1c:92:
9a:eb:1a:07:89:2e:ed:6b:df:44:47:c1:3d:f0:bb:20:1d:96:
6b:85:0a:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:27 2025 by rpki-client