Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/S0jPFGtMc9J0CW1wVwjSS3KTKfg.mft
File: S0jPFGtMc9J0CW1wVwjSS3KTKfg.mft (raw, json)
Hash identifier: i5Z94uz+yRPu5mZO6T564D4M1epnTMjtkpuxTDxJpqk=
Subject key identifier: B7:EE:9B:76:5C:73:57:BF:1D:FA:78:6D:54:04:9C:C2:BA:3B:28:D1
Authority key identifier: 4B:48:CF:14:6B:4C:73:D2:74:09:6D:70:57:08:D2:4B:72:93:29:F8
Certificate issuer: /CN=4b48cf146b4c73d274096d705708d24b729329f8
Certificate serial: 0194BD859F11B54EAF3E2993F470FDE7C5AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S0jPFGtMc9J0CW1wVwjSS3KTKfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/S0jPFGtMc9J0CW1wVwjSS3KTKfg.mft
Manifest number: 1440
Signing time: Fri 31 Jan 2025 18:00:38 +0000
Manifest this update: Fri 31 Jan 2025 18:00:38 +0000
Manifest next update: Sat 01 Feb 2025 18:00:38 +0000
Files and hashes: 1: 4nd-DP_ymkf3DYArDQC7CtVceEQ.roa (hash: kWIc/fCxnFO7mZl60VV/nQnhRsbj6yvXCXmWGM67c1k=)
2: 64p5o-0qnUcfwWS02nv_DkPvL3I.roa (hash: niXYitJiZ8IxUWpDspPEEvq6acqCjMtSycTMiACHf58=)
3: BREbZFN6Rhj85h57UryeZAHjLKk.roa (hash: tLB1oKUW+Dho1hfNPpoz6yfVQeh4dvXZuSRcojuXxOA=)
4: IX3hpyLIN4WhHMana79sWPUI4X0.roa (hash: rCe6IZNZSjHSC1lZ+kxokCfhrF01W07U8ihTWZLrEJU=)
5: IfSKWBwWV6QcVsRSMjJ9wGMbUUk.roa (hash: HjUM6VN/VoF4kqrbPTW3NPTllgIWYUt/BGC2HsAIgNk=)
6: JtK5RD-DTIOQNW_JXWGlPrgL9tE.roa (hash: /+XnmRP4/kZj+79ZCDvZV6TsrFKYsjV9u/awORCe7Sg=)
7: S0jPFGtMc9J0CW1wVwjSS3KTKfg.crl (hash: b9k/zr8/b9o7Wrwf31eDS+rkRnbkXbSbyTqx3/iPteI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:9f:11:b5:4e:af:3e:29:93:f4:70:fd:e7:c5:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b48cf146b4c73d274096d705708d24b729329f8
Validity
Not Before: Jan 31 18:00:38 2025 GMT
Not After : Feb 1 18:00:38 2025 GMT
Subject: CN=b7ee9b765c7357bf1dfa786d54049cc2ba3b28d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ac:d2:68:f7:2d:fc:c9:59:7a:f9:f4:9e:90:
2a:da:b6:5a:77:8b:df:41:38:2c:e0:04:62:54:bd:
ac:5b:f2:32:0e:22:70:49:04:e2:84:01:31:80:94:
48:27:8e:fe:20:d2:67:6a:51:54:62:06:ed:dc:d4:
53:e4:f6:6a:85:a9:cc:89:10:35:48:c1:df:c8:be:
6c:81:13:9b:1f:1a:91:57:89:99:d6:7e:a8:6a:bc:
00:aa:d4:5c:8b:1c:83:54:d8:7e:f8:5b:96:31:3f:
61:4c:98:da:25:80:d7:a5:15:16:e3:08:72:77:d9:
d8:71:a7:19:0a:12:9c:75:28:5f:d5:87:ba:19:ac:
a9:93:55:35:9e:57:86:3a:d3:ff:39:b6:f7:91:34:
77:63:b2:da:6f:8f:7c:52:e4:3c:66:02:59:c3:21:
f7:00:88:f1:c8:73:85:d9:d1:a3:a8:b9:48:a5:17:
32:84:43:5e:30:15:7a:91:21:d1:cd:a4:4c:2e:ff:
af:96:4c:3e:f3:d2:3d:19:f7:32:37:83:8f:f4:59:
80:e1:df:84:08:a3:3e:bb:f2:27:10:99:82:cf:dc:
7e:98:5e:86:af:ad:7f:7a:90:ad:78:25:03:84:30:
41:7d:97:d0:f1:79:3b:65:a1:e3:65:93:e4:ed:b9:
1c:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:EE:9B:76:5C:73:57:BF:1D:FA:78:6D:54:04:9C:C2:BA:3B:28:D1
X509v3 Authority Key Identifier:
keyid:4B:48:CF:14:6B:4C:73:D2:74:09:6D:70:57:08:D2:4B:72:93:29:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S0jPFGtMc9J0CW1wVwjSS3KTKfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/S0jPFGtMc9J0CW1wVwjSS3KTKfg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/S0jPFGtMc9J0CW1wVwjSS3KTKfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:2c:e6:8d:e3:95:a0:08:d3:f9:ea:f7:a7:d3:43:b8:db:e0:
25:b9:ba:83:0b:e3:12:06:fb:3d:0f:1c:a3:90:a3:9e:4d:05:
08:70:8d:09:8e:cb:5d:7c:8f:3a:8d:d3:56:19:6d:c7:47:7f:
78:b7:09:80:36:3b:9b:c6:8c:cb:22:fe:5e:6f:91:ff:16:42:
2a:d6:53:ab:8b:cf:b4:29:d9:87:e3:43:73:67:68:42:21:0b:
e0:d1:8a:11:88:e2:99:3a:4d:8a:c5:e8:5b:a7:ab:4e:03:db:
87:23:52:9b:f1:65:56:e8:24:ae:87:fb:c1:0d:db:6e:73:09:
86:e1:b0:84:98:f7:84:fd:2a:9c:cc:5a:71:31:4c:e9:7a:be:
a5:8e:1e:c9:bc:f0:c3:2f:80:50:b3:ba:f2:13:02:9e:a5:81:
89:bc:34:0e:80:4a:24:42:70:97:a2:e1:84:06:d0:7f:88:00:
cf:7a:d3:72:b1:ce:87:f2:13:8d:2d:d3:5b:86:19:4d:34:90:
fa:b0:e7:c7:e3:71:d9:88:89:51:4a:a2:7b:eb:e7:6f:81:5d:
4d:cf:73:ac:58:bb:db:31:c6:01:9a:ab:75:61:6b:dd:2f:77:
28:e6:51:cd:b3:79:eb:b8:c3:0c:bb:66:b9:7e:0e:88:fd:c8:
fc:ba:2b:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:19:00 2025 by rpki-client