Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/c41f77-b6a2-4494-a074-4fae84fa158e/1/fSoBIksdqGSAz-y8tsUt-YEpaOg.mft
File: fSoBIksdqGSAz-y8tsUt-YEpaOg.mft (raw, json)
Hash identifier: 8ghWktZ/OeJbuOu7bpZIf6Lgi3tp7qmweiJLEVfIXd8=
Subject key identifier: 41:26:75:31:D3:5A:98:62:91:ED:FD:E0:95:41:24:87:BD:F6:1F:E0
Authority key identifier: 7D:2A:01:22:4B:1D:A8:64:80:CF:EC:BC:B6:C5:2D:F9:81:29:68:E8
Certificate issuer: /CN=7d2a01224b1da86480cfecbcb6c52df9812968e8
Certificate serial: 0194BD859E0801288BD5BBC01BD202340DC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fSoBIksdqGSAz-y8tsUt-YEpaOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/c41f77-b6a2-4494-a074-4fae84fa158e/1/fSoBIksdqGSAz-y8tsUt-YEpaOg.mft
Manifest number: 0DD4
Signing time: Fri 31 Jan 2025 18:00:37 +0000
Manifest this update: Fri 31 Jan 2025 18:00:37 +0000
Manifest next update: Sat 01 Feb 2025 18:00:37 +0000
Files and hashes: 1: 3L4Ds4lPDiLLOvZ8T2NW6fHNbRs.roa (hash: NwLfkOcBti2VO8eJgA/iflwdsDMiN5aPUXSbDozw53I=)
2: Gg8qXyeg-gil2NOkr3thvUZqwIE.roa (hash: pEcvppDB8KUs5+dwI7YABXPT/TWvmUqee92Iz6LzfZk=)
3: fSoBIksdqGSAz-y8tsUt-YEpaOg.crl (hash: ZLO02mBXVlDjdkTeePk2rggwcc+2iC8G0TX1YsclWDw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:9e:08:01:28:8b:d5:bb:c0:1b:d2:02:34:0d:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d2a01224b1da86480cfecbcb6c52df9812968e8
Validity
Not Before: Jan 31 18:00:37 2025 GMT
Not After : Feb 1 18:00:37 2025 GMT
Subject: CN=41267531d35a986291edfde095412487bdf61fe0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:91:8b:92:b5:4a:8d:76:b4:86:b3:94:7d:f2:
9f:3d:3f:c3:5a:0e:45:89:4e:93:9c:54:2a:cd:6f:
ac:89:fe:f1:8a:b0:3b:54:f0:c4:9d:99:8a:5e:7e:
bb:f7:de:65:91:fe:0e:1a:b3:ae:2c:c0:46:0c:37:
b8:ea:83:94:e9:f0:2f:e3:12:de:37:91:8b:3f:12:
e0:48:96:c5:97:be:f0:d8:f0:73:6c:e1:83:5f:2a:
4a:1f:4d:85:8c:92:68:f1:66:8c:b9:6f:62:0d:4a:
97:db:fb:b2:ec:b4:33:93:69:b2:ba:2b:32:a4:f2:
2a:cc:c0:8c:84:48:a4:d1:41:3f:93:a1:d3:27:2f:
c8:d2:42:4a:5b:83:e7:6e:1b:3d:d5:31:da:30:a9:
db:d0:64:c8:eb:ee:74:5b:d0:71:dd:23:b1:9a:f5:
74:80:8e:62:21:28:dd:cd:6d:ae:7f:3a:8f:80:c1:
52:30:35:1a:1f:24:e9:74:57:a1:2a:a9:c1:0d:20:
6f:e8:94:a0:b4:02:47:ab:6c:78:88:0a:ed:f0:0d:
36:02:fe:05:e0:39:c7:2c:c2:fb:95:5c:f3:c2:e4:
1c:22:e2:48:a5:5e:b8:ff:e4:30:b0:50:98:85:74:
3a:3b:88:2d:38:70:f5:4e:84:07:55:07:ba:0b:02:
94:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:26:75:31:D3:5A:98:62:91:ED:FD:E0:95:41:24:87:BD:F6:1F:E0
X509v3 Authority Key Identifier:
keyid:7D:2A:01:22:4B:1D:A8:64:80:CF:EC:BC:B6:C5:2D:F9:81:29:68:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fSoBIksdqGSAz-y8tsUt-YEpaOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c41f77-b6a2-4494-a074-4fae84fa158e/1/fSoBIksdqGSAz-y8tsUt-YEpaOg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c41f77-b6a2-4494-a074-4fae84fa158e/1/fSoBIksdqGSAz-y8tsUt-YEpaOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:3b:ac:15:32:ad:db:58:2a:43:65:50:da:46:34:8f:48:08:
0c:49:1d:b5:9a:c6:dc:44:48:26:15:70:49:22:50:10:7e:9a:
ec:fd:b1:5f:49:e4:50:5e:98:5f:bd:e7:db:54:04:a7:54:f4:
23:b9:60:26:58:37:8d:34:fe:7d:86:07:95:3b:12:ef:7c:ed:
0a:41:92:55:a2:b9:c9:f0:84:c5:ed:28:95:dc:d1:03:f3:5c:
81:57:8e:41:92:1d:c9:42:c2:98:ea:db:41:b2:e4:4f:70:59:
db:77:4b:6b:cc:1f:0a:7c:dd:fb:b2:2f:b0:61:69:6c:f7:ba:
87:aa:67:8c:44:92:d4:80:44:2f:d1:c2:d9:b4:ce:d2:cd:48:
a1:2e:21:64:40:c5:e5:ee:86:63:5b:11:54:83:2f:62:a5:be:
04:70:37:8f:c7:04:eb:c9:e0:08:e5:1e:45:87:33:cc:57:fe:
1b:ae:a7:f8:5e:3e:a8:d8:9d:2a:39:f3:d6:ec:ca:93:d2:95:
79:c4:04:f9:22:d7:21:2b:19:2a:b8:13:73:22:6a:ff:e1:9f:
33:53:cf:1f:2c:a7:9c:ed:81:4f:fb:01:e8:3a:f9:21:c1:cb:
1c:59:68:1e:7d:55:f0:1e:a8:90:f2:d5:82:34:31:07:ce:9e:
f4:95:08:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:49:41 2025 by rpki-client