
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.mft
File: sK_Qy5d1_0ePGF-PmA1bHZLUvk8.mft (raw, json)
Hash identifier: IyJF/b4s93u1xFbglTMI+bF9oRQ5X1YWgyDjSFPMzh4=
Subject key identifier: 74:7A:0D:DD:62:86:31:D5:2B:E4:49:17:42:4A:C3:1E:D2:43:E2:C4
Authority key identifier: B0:AF:D0:CB:97:75:FF:47:8F:18:5F:8F:98:0D:5B:1D:92:D4:BE:4F
Certificate issuer: /CN=b0afd0cb9775ff478f185f8f980d5b1d92d4be4f
Certificate serial: 0194BC04D94F0FE6AD25B5B6883DA7AE55BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 11:00:21 +0000
Manifest this update: Fri 31 Jan 2025 11:00:21 +0000
Manifest next update: Sat 01 Feb 2025 11:00:21 +0000
Files and hashes: 1: 3y9VMN9BUcZB2fmchyviGBmGtxw.roa (hash: WvArAvEQlUAHpEjB63U5q0z8PqLe+6GgRYCWBvbd2yM=)
2: sK_Qy5d1_0ePGF-PmA1bHZLUvk8.crl (hash: KpEd8v+ZHzbke/rhpVTLElf3DHQ9Pk3fghMaC6M+9Cg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:d9:4f:0f:e6:ad:25:b5:b6:88:3d:a7:ae:55:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0afd0cb9775ff478f185f8f980d5b1d92d4be4f
Validity
Not Before: Jan 31 11:00:21 2025 GMT
Not After : Feb 1 11:00:21 2025 GMT
Subject: CN=747a0ddd628631d52be44917424ac31ed243e2c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:cf:b7:32:7a:e1:77:e6:a1:dd:94:fe:c0:03:
74:ab:4d:dc:b8:d4:8b:3f:98:6c:f3:25:85:89:78:
df:07:ac:06:b5:ab:e9:f0:13:62:72:d7:65:4d:85:
e5:05:c8:a5:60:a5:ae:ef:6c:55:bb:32:d6:46:ad:
86:c4:40:20:6c:a5:1d:f4:3c:de:b4:69:e3:9e:2a:
4c:4b:b4:ea:f6:71:84:50:3f:17:5f:c8:5c:2d:31:
2b:de:08:8b:90:2c:28:4f:2a:bd:dd:3d:54:9c:47:
10:fe:47:29:e4:8f:a3:a3:6b:8d:45:1d:fa:18:3e:
6b:f7:52:5e:de:f2:ed:b9:ca:f1:65:31:c5:a6:12:
e7:e7:51:88:2b:72:e9:05:12:e8:e1:e8:fc:aa:bd:
e1:80:9d:f6:42:a8:54:c2:28:ae:2b:93:f2:8e:33:
4a:a3:95:cd:8c:ef:02:fa:eb:17:50:88:84:9b:ba:
0c:32:46:0e:bc:7a:2b:f4:0e:b5:ec:f0:bb:31:2f:
c6:86:66:09:98:8a:3a:62:c1:0c:3a:23:69:29:90:
b5:63:e5:09:6f:5c:f5:15:c2:51:ee:a6:8e:59:f5:
71:5d:60:11:f1:10:f1:6f:e1:8a:ff:d8:59:c3:bd:
a5:9f:c1:98:bf:59:ee:b1:02:d8:c8:df:46:54:85:
53:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:7A:0D:DD:62:86:31:D5:2B:E4:49:17:42:4A:C3:1E:D2:43:E2:C4
X509v3 Authority Key Identifier:
keyid:B0:AF:D0:CB:97:75:FF:47:8F:18:5F:8F:98:0D:5B:1D:92:D4:BE:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:9f:a9:7c:8b:83:22:2c:c9:fc:d1:a5:70:99:06:ae:c3:03:
eb:90:ae:40:00:53:91:85:1e:74:29:84:51:8e:43:72:d3:ad:
ac:7c:0d:0d:f0:19:0a:27:1e:e4:2e:8b:a2:e8:2c:c3:d1:b0:
f0:fe:e8:de:c5:69:27:2d:66:a7:68:3f:a8:26:db:31:d1:8f:
91:d1:5b:58:54:ca:06:cc:97:fb:eb:46:2f:df:a9:6b:fd:62:
a9:89:39:7d:7c:4a:ed:e6:a0:db:91:a6:ce:d9:3c:e7:6c:ec:
39:fc:de:81:19:b0:f3:46:38:7c:19:b5:ae:3f:78:8f:0e:ec:
93:dd:ad:9b:93:e5:a6:07:41:60:0a:e3:6e:d0:7e:40:8e:ba:
74:fa:4f:6c:85:fc:74:de:42:af:04:d1:d3:bb:cf:d3:48:53:
b2:1f:30:fd:72:1b:91:fa:2a:01:6b:48:31:f0:a9:8c:5c:08:
ca:56:37:81:35:67:94:42:06:fc:aa:2a:66:aa:93:57:ec:bc:
c1:6f:06:9c:25:03:4e:cd:48:94:d4:44:68:4b:82:f3:00:aa:
09:c3:14:9a:03:d7:4e:2b:f1:cc:8c:06:a8:8a:a3:67:af:94:
cd:0e:2b:5f:08:cd:df:b4:53:0f:c7:cb:04:9c:26:de:fd:c5:
b4:c7:de:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:35:12 2025 by rpki-client