Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/18b52b-5011-4309-bfbf-6eaa1c89824a/1/sjby5CUi6Y03a-OKieXdUau_eZY.mft
File: sjby5CUi6Y03a-OKieXdUau_eZY.mft (raw, json)
Hash identifier: MpeXdgYRaFU1Y0aVuDaXi8cWuW71h3TGmGTpNUkz9C0=
Subject key identifier: 24:52:6F:08:BB:B5:BE:80:EB:0E:08:6D:C6:12:0C:71:DB:B8:AA:E2
Authority key identifier: B2:36:F2:E4:25:22:E9:8D:37:6B:E3:8A:89:E5:DD:51:AB:BF:79:96
Certificate issuer: /CN=b236f2e42522e98d376be38a89e5dd51abbf7996
Certificate serial: 0194BD4E8CDFC98AAE9CCFA774FDBD597876
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sjby5CUi6Y03a-OKieXdUau_eZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/18b52b-5011-4309-bfbf-6eaa1c89824a/1/sjby5CUi6Y03a-OKieXdUau_eZY.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 17:00:29 +0000
Manifest this update: Fri 31 Jan 2025 17:00:29 +0000
Manifest next update: Sat 01 Feb 2025 17:00:29 +0000
Files and hashes: 1: sjby5CUi6Y03a-OKieXdUau_eZY.crl (hash: jHL9fZtX5slULoRes1EQ7JKASBdDypZhBMIGDPpY4XU=)
2: v0rFapiuVgAPd3myx6BzGGJPu3Q.roa (hash: xPkjdAicyKc46/gVu1t411DskLBNUbMsE7SCd3XdA1A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:8c:df:c9:8a:ae:9c:cf:a7:74:fd:bd:59:78:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b236f2e42522e98d376be38a89e5dd51abbf7996
Validity
Not Before: Jan 31 17:00:29 2025 GMT
Not After : Feb 1 17:00:29 2025 GMT
Subject: CN=24526f08bbb5be80eb0e086dc6120c71dbb8aae2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:5a:0e:37:d6:56:a7:9a:30:32:b8:a0:de:cd:
d8:cd:20:bc:47:79:b2:12:24:88:2d:d6:19:20:e5:
c9:df:11:f0:fe:e9:ec:90:eb:1d:63:93:a5:04:a2:
a2:59:7b:72:b0:8a:1e:bf:0d:b8:66:92:dc:bb:27:
fc:b0:8b:9e:a4:5e:67:25:83:b8:52:49:c4:9e:c1:
58:7b:8c:d9:67:26:ec:e2:ef:92:d8:40:be:9c:ad:
df:38:30:4a:a8:aa:72:97:db:84:94:98:85:91:9b:
a5:83:ac:59:bd:b5:05:fa:2a:22:d4:7a:3d:85:8b:
57:89:7a:64:f7:67:bf:90:51:18:f6:67:5f:33:ef:
cf:f1:74:dc:60:39:21:cb:7d:eb:2e:18:97:40:30:
86:49:69:ad:6b:60:fe:ae:87:6b:50:ef:9f:d9:c5:
98:4e:bc:4f:42:d9:1f:50:4b:3c:4f:ff:31:7f:87:
9f:9d:4e:23:72:69:83:9d:bb:a3:a9:a8:0d:5d:e2:
76:c7:dd:2b:85:08:0d:81:14:ff:4a:a6:07:a2:fd:
7e:0a:aa:02:b5:db:da:57:36:02:e9:4c:8b:ca:bd:
ed:9c:43:a7:bd:27:56:dd:7a:02:3e:61:34:8f:6c:
d4:10:a6:4c:0f:a9:a4:a7:dc:97:f2:a6:c4:a8:bf:
b4:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:52:6F:08:BB:B5:BE:80:EB:0E:08:6D:C6:12:0C:71:DB:B8:AA:E2
X509v3 Authority Key Identifier:
keyid:B2:36:F2:E4:25:22:E9:8D:37:6B:E3:8A:89:E5:DD:51:AB:BF:79:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sjby5CUi6Y03a-OKieXdUau_eZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/18b52b-5011-4309-bfbf-6eaa1c89824a/1/sjby5CUi6Y03a-OKieXdUau_eZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/18b52b-5011-4309-bfbf-6eaa1c89824a/1/sjby5CUi6Y03a-OKieXdUau_eZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:b6:00:e3:5e:32:a8:41:b7:d2:3a:9d:e6:1c:0e:9e:07:69:
e5:88:23:4c:fa:44:47:7e:65:9e:6d:e5:52:c5:f4:1c:a7:03:
09:1e:ed:f1:89:d0:e5:db:04:95:dd:45:6b:d0:19:69:0b:b8:
95:ac:bf:3e:f5:e1:ed:f7:bc:66:be:c3:2a:b6:33:97:8e:73:
c3:9b:57:0d:52:bc:7b:2a:e6:f1:48:f5:bb:7b:ad:f5:3b:04:
d2:a6:02:26:35:e1:06:80:bf:26:e9:9d:33:99:38:b3:5c:c4:
c4:0b:c5:66:4d:28:1f:26:c8:f3:e0:8e:ac:28:9d:c5:2c:9c:
26:4d:71:6f:bd:50:c5:26:aa:ee:17:23:e3:68:a0:26:92:2e:
da:a9:60:a0:59:ba:87:bf:d9:f4:28:ac:52:ca:e2:a9:44:af:
ed:b1:63:49:9a:02:1d:d9:e5:93:c5:3a:33:53:88:35:cc:37:
28:de:c7:22:85:09:0e:b6:6f:7e:2f:9f:fe:b4:36:57:20:b0:
68:8c:a7:be:e1:48:df:68:88:d7:c7:54:92:4b:e9:56:d0:62:
64:62:fe:bf:91:e5:15:64:db:94:c6:65:32:9b:bb:36:b6:92:
0c:1e:73:f7:78:03:2b:74:a7:a7:01:bb:30:fc:76:ec:59:73:
48:6b:87:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:54:19 2025 by rpki-client