Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/6e8ca0-cd40-46fd-8ee4-47fbe4c4a4fd/1/SiHJG2O7vaiASnSfPWEOiyF_m3M.mft
File: SiHJG2O7vaiASnSfPWEOiyF_m3M.mft (raw, json)
Hash identifier: afL6WfhHUVxjsRXvUGnewHsSBZGEoNLyseZ4M8z8UlY=
Subject key identifier: A9:E3:45:75:D0:74:5E:68:D3:AF:26:6B:9E:3E:49:E2:AC:C5:16:71
Authority key identifier: 4A:21:C9:1B:63:BB:BD:A8:80:4A:74:9F:3D:61:0E:8B:21:7F:9B:73
Certificate issuer: /CN=4a21c91b63bbbda8804a749f3d610e8b217f9b73
Certificate serial: 0194BC72CA0D087C4CD00CF945AB1FAB2863
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SiHJG2O7vaiASnSfPWEOiyF_m3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/6e8ca0-cd40-46fd-8ee4-47fbe4c4a4fd/1/SiHJG2O7vaiASnSfPWEOiyF_m3M.mft
Manifest number: 1028
Signing time: Fri 31 Jan 2025 13:00:26 +0000
Manifest this update: Fri 31 Jan 2025 13:00:26 +0000
Manifest next update: Sat 01 Feb 2025 13:00:26 +0000
Files and hashes: 1: 1Z1yWNgRSnqR3pt5WlApDelQe4o.roa (hash: 7G52qXZFDFq0XDjJ+/lW8m4SCa70rkFS2r1Ec1zORA4=)
2: SiHJG2O7vaiASnSfPWEOiyF_m3M.crl (hash: KXwSiy/hqlCyjDwZ03NRksyj6lceQlF30Mnk5N3LC08=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:ca:0d:08:7c:4c:d0:0c:f9:45:ab:1f:ab:28:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a21c91b63bbbda8804a749f3d610e8b217f9b73
Validity
Not Before: Jan 31 13:00:26 2025 GMT
Not After : Feb 1 13:00:26 2025 GMT
Subject: CN=a9e34575d0745e68d3af266b9e3e49e2acc51671
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f8:7c:a9:22:fe:c9:4e:f2:d3:35:b1:fc:3e:
a7:ca:79:4c:9b:8f:32:9b:d5:28:88:54:1e:2f:07:
4a:48:65:91:77:17:ea:7b:13:bc:f3:b7:49:9e:ec:
45:d2:c2:7f:a1:36:0d:60:6b:1b:9c:54:e7:ef:05:
b6:ca:f4:09:50:3e:b5:c5:f7:91:50:36:7e:a9:43:
70:3d:77:6d:c4:60:b9:a0:33:da:0e:84:fc:f3:10:
96:05:ca:64:12:d4:c3:0c:5b:a1:a7:18:17:88:3e:
d7:98:b5:f8:78:fa:cf:43:c6:b6:4d:9c:80:a0:ac:
28:f2:41:6e:c5:92:e9:68:77:c7:79:2e:de:e6:53:
33:b5:96:5f:ab:59:d6:1c:44:37:1a:f5:80:b7:49:
06:07:0e:11:8f:5f:87:9a:4f:dd:84:bb:2b:06:e5:
68:e5:8d:0d:b9:31:32:d9:e8:d5:05:34:fd:df:b6:
96:b7:56:2e:37:58:d7:a5:07:6c:db:71:11:03:a3:
5f:1e:44:5d:3f:40:0d:47:79:be:86:2f:52:4b:ca:
d3:54:92:27:99:a7:1f:b1:b9:90:25:4a:83:f9:0a:
ba:d8:61:75:85:a5:a6:47:f2:5f:fd:6d:ac:82:8a:
99:1b:7c:57:b2:ad:08:35:08:86:c2:df:fb:3b:7c:
7e:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:E3:45:75:D0:74:5E:68:D3:AF:26:6B:9E:3E:49:E2:AC:C5:16:71
X509v3 Authority Key Identifier:
keyid:4A:21:C9:1B:63:BB:BD:A8:80:4A:74:9F:3D:61:0E:8B:21:7F:9B:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SiHJG2O7vaiASnSfPWEOiyF_m3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/6e8ca0-cd40-46fd-8ee4-47fbe4c4a4fd/1/SiHJG2O7vaiASnSfPWEOiyF_m3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/6e8ca0-cd40-46fd-8ee4-47fbe4c4a4fd/1/SiHJG2O7vaiASnSfPWEOiyF_m3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:88:70:e2:ba:57:73:c3:fa:60:00:4c:e3:ed:15:95:ed:1b:
6e:aa:50:e9:0b:01:6a:c7:96:3c:5e:d4:75:68:c0:44:d9:8f:
11:83:4c:59:c2:47:30:3a:d5:6f:d0:97:1c:fa:72:e0:ec:95:
f8:34:7c:64:ad:28:f9:41:af:7e:24:91:88:9a:4f:4e:8a:ef:
b9:a2:2d:f0:12:ab:ab:db:28:1e:d8:ab:80:56:e4:ca:06:08:
82:a3:92:b6:16:51:b8:e4:b1:4a:0e:fd:ac:a0:6f:88:89:84:
c5:fa:e6:88:c4:ec:d8:c7:68:7e:e5:78:3f:82:b7:74:65:f4:
05:6d:49:3c:15:bd:4b:bf:5a:9c:d7:c6:f1:bf:f9:6e:67:ea:
8b:3b:13:34:a8:07:d2:e7:82:77:38:47:31:29:55:27:2a:bf:
8e:3c:49:97:e2:27:a1:8f:1d:b4:47:d6:df:85:87:c8:44:09:
f0:f2:7d:42:73:01:76:b1:d7:47:ba:47:b6:9e:ab:a7:60:5b:
31:c7:47:c2:b3:b5:1a:55:45:fc:0f:0f:5a:44:40:68:dc:79:
8e:07:58:82:c8:f6:2a:06:2b:7b:f4:79:21:e7:00:15:f3:fe:
6c:d1:72:09:cd:c2:79:8b:75:76:3e:6a:e7:92:23:6c:8b:a8:
f9:6b:89:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:19:02 2025 by rpki-client