Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/162186-50d1-4761-aaf0-a542589799bc/1/s1ogqGk5yN6K7cMFJDsP1K2GVNA.mft
File: s1ogqGk5yN6K7cMFJDsP1K2GVNA.mft (raw, json)
Hash identifier: m/Zt0SqE4x1FTARMVDjocsntpvWWi9p3GYQo3j5CBhE=
Subject key identifier: F5:28:5F:89:9C:71:83:0F:50:E7:6C:0B:A1:41:BF:8A:64:5A:C0:AB
Authority key identifier: B3:5A:20:A8:69:39:C8:DE:8A:ED:C3:05:24:3B:0F:D4:AD:86:54:D0
Certificate issuer: /CN=b35a20a86939c8de8aedc305243b0fd4ad8654d0
Certificate serial: 0194BC3C0597D149118E3EC7084AC0DBAD9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s1ogqGk5yN6K7cMFJDsP1K2GVNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/162186-50d1-4761-aaf0-a542589799bc/1/s1ogqGk5yN6K7cMFJDsP1K2GVNA.mft
Manifest number: 0B9D
Signing time: Fri 31 Jan 2025 12:00:37 +0000
Manifest this update: Fri 31 Jan 2025 12:00:37 +0000
Manifest next update: Sat 01 Feb 2025 12:00:37 +0000
Files and hashes: 1: 4EkSsDmoQioZqy5Nx3ZgwgNVKek.roa (hash: VGhbj0GwVploD/uygEp/n7MuApEtZ3hQmaUGbybY4XI=)
2: LXrqqPRInqT0YQQrkSiScVOv68s.roa (hash: RhWWbbeT6YQP2eTW6sSumZ2mUd9atkadmzcbsktp9d0=)
3: s1ogqGk5yN6K7cMFJDsP1K2GVNA.crl (hash: BmbMbdidXFxWPVbrdDYxDtRorOlxlVbOpd/LH2KVI1o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:05:97:d1:49:11:8e:3e:c7:08:4a:c0:db:ad:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b35a20a86939c8de8aedc305243b0fd4ad8654d0
Validity
Not Before: Jan 31 12:00:37 2025 GMT
Not After : Feb 1 12:00:37 2025 GMT
Subject: CN=f5285f899c71830f50e76c0ba141bf8a645ac0ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:7f:a6:ff:14:33:c0:90:f2:a9:b3:b2:bc:51:
b9:79:d9:97:a9:26:e1:5c:8f:89:86:52:7d:db:a5:
00:56:09:e2:57:7a:89:5a:38:40:0e:5b:b3:83:51:
b9:74:c7:f8:3d:56:e9:bd:90:2e:52:5d:08:cf:d8:
02:af:09:11:f7:2a:fc:72:af:1d:ec:eb:9e:2b:a7:
fe:7b:c2:cf:99:e9:65:0a:c9:56:29:64:88:85:3c:
68:50:e7:ab:78:46:4d:e6:e9:cf:e0:9d:2f:a2:56:
7b:58:6a:29:93:86:80:81:91:00:2e:1b:a5:c0:89:
d2:5e:46:bd:ee:f4:0a:4e:23:a5:42:9d:b5:92:eb:
a5:74:c9:0c:fd:ed:a2:d4:e5:5b:74:f0:54:3b:a3:
6f:d5:00:8d:1e:51:49:ec:2f:b8:ce:e6:2e:d1:0d:
b6:42:a4:8f:ea:81:3f:6d:72:20:14:fe:76:15:0a:
ba:b0:2a:6d:a8:9b:ac:c0:7f:aa:0e:6d:38:84:2d:
79:d9:ef:9a:89:0b:f1:95:41:36:05:f3:1f:26:ab:
d8:16:3d:63:1b:02:4a:ca:be:0b:61:77:cb:41:65:
b0:ac:30:68:5b:f9:fa:99:ef:68:a3:d2:b4:e1:08:
c9:d5:e4:ad:75:ca:8e:a4:de:c3:3d:66:80:91:51:
7a:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:28:5F:89:9C:71:83:0F:50:E7:6C:0B:A1:41:BF:8A:64:5A:C0:AB
X509v3 Authority Key Identifier:
keyid:B3:5A:20:A8:69:39:C8:DE:8A:ED:C3:05:24:3B:0F:D4:AD:86:54:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s1ogqGk5yN6K7cMFJDsP1K2GVNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/162186-50d1-4761-aaf0-a542589799bc/1/s1ogqGk5yN6K7cMFJDsP1K2GVNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/162186-50d1-4761-aaf0-a542589799bc/1/s1ogqGk5yN6K7cMFJDsP1K2GVNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:5d:aa:2f:e4:ac:98:7c:86:2c:18:63:3e:37:8b:2c:8f:74:
42:dd:79:15:ab:57:85:c8:f3:5e:09:f3:5b:41:43:07:5b:e8:
14:fe:f3:ce:39:89:1f:cc:29:50:c3:d3:17:2d:27:9f:13:ae:
ab:16:35:51:41:54:a8:a9:12:93:58:87:03:1d:44:47:24:20:
45:b0:52:d5:fd:16:7f:37:a2:62:8a:2f:2b:36:98:a8:91:e6:
e8:68:e4:ed:8d:06:7b:ad:89:e3:15:80:02:32:d9:4c:92:24:
c8:e5:10:06:d1:e7:07:db:34:ec:a0:e2:26:97:f8:1f:55:9f:
c0:6e:d0:5c:f1:10:74:89:f9:23:50:54:3b:e6:8d:67:fe:33:
8d:29:a0:cc:9e:08:fc:19:5c:a3:91:db:d9:52:0b:06:b5:fc:
a5:0e:76:31:0c:32:7e:3f:b0:52:dd:9a:53:b4:ad:51:c0:75:
c9:39:bf:db:69:7e:9b:ab:b3:7f:f1:9b:51:99:f9:59:7e:96:
cd:bd:4d:a4:97:2d:60:b1:cb:ba:bd:5a:b0:d6:9c:4d:da:f9:
fa:21:70:f6:5f:44:56:fe:6e:a1:08:d0:5a:7d:57:ae:f1:66:
f8:9d:1a:57:81:55:ca:1a:e8:11:c5:e8:a2:aa:2b:f6:03:f1:
34:14:2d:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:26:20 2025 by rpki-client