Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/SY9VU0446sLDJ6lB4aJrnEAxvhg.mft
File: SY9VU0446sLDJ6lB4aJrnEAxvhg.mft (raw, json)
Hash identifier: ewMjycwXqap96Exsh5ncEVf2gBfhdtGfCneYF8Dy7fM=
Subject key identifier: 17:31:23:47:E3:87:C6:20:F1:93:20:F8:76:7A:42:5F:28:D1:C7:33
Authority key identifier: 49:8F:55:53:4E:38:EA:C2:C3:27:A9:41:E1:A2:6B:9C:40:31:BE:18
Certificate issuer: /CN=498f55534e38eac2c327a941e1a26b9c4031be18
Certificate serial: 0194BD17CF2F6B19E9A6F729CA1300605CAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SY9VU0446sLDJ6lB4aJrnEAxvhg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/SY9VU0446sLDJ6lB4aJrnEAxvhg.mft
Manifest number: 0B11
Signing time: Fri 31 Jan 2025 16:00:41 +0000
Manifest this update: Fri 31 Jan 2025 16:00:41 +0000
Manifest next update: Sat 01 Feb 2025 16:00:41 +0000
Files and hashes: 1: SY9VU0446sLDJ6lB4aJrnEAxvhg.crl (hash: GE+z2KzW8yXw/dwEaqAcmgzRHQ/HFUalt4yAJvACxCY=)
2: bTKBc42tXDi_zX0dMq0HddtScgI.roa (hash: lEi06vaib9NpWsrvDpoqTavKihSNsj4G7hhaYfH95VQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:cf:2f:6b:19:e9:a6:f7:29:ca:13:00:60:5c:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=498f55534e38eac2c327a941e1a26b9c4031be18
Validity
Not Before: Jan 31 16:00:41 2025 GMT
Not After : Feb 1 16:00:41 2025 GMT
Subject: CN=17312347e387c620f19320f8767a425f28d1c733
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:06:3c:96:78:68:d3:5f:d3:ce:50:0d:bf:c0:
40:74:67:56:34:47:96:7d:e7:98:1b:35:cf:1a:ce:
a5:eb:2d:a8:52:e5:dd:36:72:fc:b6:06:34:a7:eb:
d9:f3:e8:fd:c6:fa:86:de:01:be:fa:20:6e:a2:a5:
5a:fa:9a:3a:fd:32:26:c9:d5:d5:98:80:e3:5a:2e:
9e:b0:c1:32:c3:8c:49:03:b0:b6:65:f3:ef:de:7a:
c6:69:81:63:64:81:da:a2:b5:dc:a2:d4:f0:e8:2d:
ee:96:e8:e3:3e:19:47:c1:2e:9c:14:5c:68:31:72:
0c:f9:6c:b6:39:1f:f9:3c:48:dc:4d:b7:a2:9e:c0:
b3:45:d1:e6:05:bf:90:2e:70:f0:bb:e1:f9:14:29:
d3:5e:47:4f:5c:af:0a:80:c2:46:58:58:53:43:d5:
5f:83:84:8e:ab:1e:93:b0:10:1c:cc:30:3b:f9:28:
55:12:02:d6:12:7d:c4:e7:30:7c:f0:7d:19:3c:61:
2c:26:21:19:4a:c3:72:4f:98:cd:08:68:84:7e:36:
57:f1:7a:c6:d4:3f:31:4f:a4:44:13:8e:4b:0e:50:
75:0d:22:3f:e3:1a:ea:a5:5b:0f:db:cc:8a:1e:1a:
6c:c6:b0:34:43:94:30:55:c0:72:1b:c9:7f:74:32:
0f:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:31:23:47:E3:87:C6:20:F1:93:20:F8:76:7A:42:5F:28:D1:C7:33
X509v3 Authority Key Identifier:
keyid:49:8F:55:53:4E:38:EA:C2:C3:27:A9:41:E1:A2:6B:9C:40:31:BE:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SY9VU0446sLDJ6lB4aJrnEAxvhg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/SY9VU0446sLDJ6lB4aJrnEAxvhg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/SY9VU0446sLDJ6lB4aJrnEAxvhg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:3c:c6:72:f2:73:40:50:db:be:6c:5b:69:99:2d:f8:fa:67:
db:c0:4b:02:d5:22:d4:91:f2:59:d5:07:bb:91:c6:04:eb:e1:
cd:d5:bf:06:18:f0:b9:55:96:1a:cb:ee:22:5e:60:8e:8f:88:
57:e3:c2:ca:3b:aa:dc:c3:5a:72:e8:23:58:d4:e7:6e:09:b2:
40:19:68:81:db:21:b4:a0:3f:43:47:ce:86:00:90:f2:a6:0b:
51:b8:83:f7:62:c9:a6:7b:61:ee:c6:4e:93:d5:d1:12:0a:48:
05:61:67:12:68:e6:27:4d:a0:4c:c7:58:31:e3:fc:24:5e:af:
20:61:81:50:88:64:f8:0a:19:fb:ac:33:4a:04:16:24:f9:b0:
a7:8c:c7:43:78:63:0c:94:e1:1a:88:ef:a7:f9:f6:6d:8d:b7:
79:77:80:b2:b1:d5:f7:2b:e7:44:7a:3a:d2:10:77:25:b8:2f:
0f:af:60:71:91:8c:a8:c3:ac:ee:3e:92:c6:50:89:2c:2f:37:
92:ba:a7:33:8a:4c:ec:6b:f9:d6:ad:ce:ce:80:8c:97:2d:8a:
c9:7c:66:77:ea:5c:4f:3c:90:fb:f6:fc:71:86:d3:be:e6:c5:
f4:8b:f8:cb:0c:f8:b5:32:15:69:da:08:99:23:8b:26:f5:9c:
5b:c9:fd:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:44:06 2025 by rpki-client