Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/9657a5-8ce2-405e-ac8c-dd2accacfccc/1/sWIVb1nPx5OW5k8zQt5k3j-I7hg.mft
File: sWIVb1nPx5OW5k8zQt5k3j-I7hg.mft (raw, json)
Hash identifier: SIUAyHeNljDOvbOGQxRdivaR7jVoqxyF1pIxstYS3MA=
Subject key identifier: 20:4D:E2:DC:94:AB:99:9A:D1:8B:8F:C7:D4:54:7D:C3:C2:99:7F:96
Authority key identifier: B1:62:15:6F:59:CF:C7:93:96:E6:4F:33:42:DE:64:DE:3F:88:EE:18
Certificate issuer: /CN=b162156f59cfc79396e64f3342de64de3f88ee18
Certificate serial: 0194BD17EF3BC2E7540CC686439F377AD80F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sWIVb1nPx5OW5k8zQt5k3j-I7hg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/9657a5-8ce2-405e-ac8c-dd2accacfccc/1/sWIVb1nPx5OW5k8zQt5k3j-I7hg.mft
Manifest number: 03DA
Signing time: Fri 31 Jan 2025 16:00:49 +0000
Manifest this update: Fri 31 Jan 2025 16:00:49 +0000
Manifest next update: Sat 01 Feb 2025 16:00:49 +0000
Files and hashes: 1: bx_l27hAP8O-cN20bSgkC97xE0w.roa (hash: CvRYAhtCHrK4e4xO6GAddJnUj7IW4xcxplg1YukPV2Y=)
2: sWIVb1nPx5OW5k8zQt5k3j-I7hg.crl (hash: vE+IdyvHj3t16f3Iqp2LL/tVFk15+tHPId6lzC8MXzM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:ef:3b:c2:e7:54:0c:c6:86:43:9f:37:7a:d8:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b162156f59cfc79396e64f3342de64de3f88ee18
Validity
Not Before: Jan 31 16:00:49 2025 GMT
Not After : Feb 1 16:00:49 2025 GMT
Subject: CN=204de2dc94ab999ad18b8fc7d4547dc3c2997f96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b3:7c:fc:4b:f6:67:44:23:d5:af:6a:9b:71:
67:11:3e:c3:f2:f1:b8:33:9a:d2:9b:14:cb:e5:81:
92:dd:b5:9b:23:70:3e:7e:9d:3f:04:8c:82:40:58:
77:52:a3:37:11:e1:d7:0e:35:69:3a:8d:20:45:d9:
5a:3e:73:b3:5d:00:0b:4f:88:05:75:63:cd:ed:42:
79:22:a9:34:f0:1e:52:38:ca:4a:13:1b:9e:26:58:
63:a6:fb:bd:09:79:b2:58:7b:42:1f:3f:a4:41:29:
d0:15:c4:4d:af:71:58:68:f7:3a:69:22:ca:00:bd:
5a:ac:9a:5f:47:12:5d:a5:e5:40:f0:fe:a1:f0:03:
77:00:8b:c5:4b:47:f9:b7:a2:79:c6:a7:e5:17:94:
cf:7d:c0:e4:fe:c8:83:f6:e7:2f:ec:2f:41:a8:8d:
b7:40:16:7c:0e:65:85:93:2a:6a:dc:ff:fb:ef:c1:
6f:3d:dd:56:fa:6b:f2:12:06:5e:36:4d:f0:ec:8a:
34:10:10:1a:f7:26:74:0f:ed:25:4d:53:55:3c:0b:
97:f1:9b:2c:aa:a1:86:22:cb:45:53:da:c6:c1:3e:
56:c9:ae:80:dd:dd:27:53:14:05:48:0d:54:fb:88:
48:50:7d:56:15:1e:be:59:90:19:02:2f:25:78:cc:
09:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:4D:E2:DC:94:AB:99:9A:D1:8B:8F:C7:D4:54:7D:C3:C2:99:7F:96
X509v3 Authority Key Identifier:
keyid:B1:62:15:6F:59:CF:C7:93:96:E6:4F:33:42:DE:64:DE:3F:88:EE:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sWIVb1nPx5OW5k8zQt5k3j-I7hg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/9657a5-8ce2-405e-ac8c-dd2accacfccc/1/sWIVb1nPx5OW5k8zQt5k3j-I7hg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/9657a5-8ce2-405e-ac8c-dd2accacfccc/1/sWIVb1nPx5OW5k8zQt5k3j-I7hg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:3a:40:5c:89:fb:db:2a:d2:6a:81:7f:be:87:20:c3:ba:76:
52:3d:19:f0:ce:be:30:07:8c:fe:ce:54:38:01:07:47:3b:01:
1e:0c:62:7f:7a:b9:4e:be:8f:18:e5:a8:a9:9f:36:a2:ed:ac:
9a:d8:dd:4c:08:a6:49:42:df:16:17:73:66:ee:55:00:f5:38:
e1:f4:c1:16:e4:2f:ae:10:0e:eb:c4:d5:b5:48:50:b3:bc:17:
51:67:47:f0:46:74:e6:0d:65:df:23:03:36:9b:57:92:2e:82:
f3:7d:23:1d:e3:45:b5:89:ac:0e:06:01:ed:6f:19:09:32:5b:
42:76:7b:05:df:62:f0:a5:4b:05:1c:b1:6c:9f:f5:87:26:6c:
80:c9:f7:03:f1:b9:48:df:88:fd:01:9e:fb:32:d6:dd:16:78:
1f:bb:f6:d0:da:02:a3:67:ec:2f:02:b7:00:2e:60:fb:02:04:
6e:35:bc:e9:da:25:e6:f3:73:46:d0:36:5b:98:9b:a8:4f:72:
fd:f8:a2:c1:a1:4c:58:3c:b5:e5:d9:7e:2f:5b:f9:79:0c:1c:
af:88:14:11:81:2b:49:bd:f8:a8:bb:4a:9a:9a:50:c0:3e:d9:
17:3c:28:1d:b4:aa:4e:d8:54:a8:a0:59:06:a9:51:c0:31:56:
ae:b4:3b:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 23:06:01 2025 by rpki-client