Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/8a59db-5ad8-4f3f-97c2-f38bcbd93390/1/SrfcA3ifWGIbJejdDZJdyRtKWqI.mft
File: SrfcA3ifWGIbJejdDZJdyRtKWqI.mft (raw, json)
Hash identifier: wJ+8bhf5ooni4GNT+qAxrg9DZDKfbf/ud6RdKwQccPY=
Subject key identifier: BD:9E:A7:53:06:41:56:98:84:6D:05:08:B2:25:2A:85:20:D1:63:2E
Authority key identifier: 4A:B7:DC:03:78:9F:58:62:1B:25:E8:DD:0D:92:5D:C9:1B:4A:5A:A2
Certificate issuer: /CN=4ab7dc03789f58621b25e8dd0d925dc91b4a5aa2
Certificate serial: 0194BC72817EC350087003134B825699FDA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SrfcA3ifWGIbJejdDZJdyRtKWqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/8a59db-5ad8-4f3f-97c2-f38bcbd93390/1/SrfcA3ifWGIbJejdDZJdyRtKWqI.mft
Manifest number: 08CF
Signing time: Fri 31 Jan 2025 13:00:08 +0000
Manifest this update: Fri 31 Jan 2025 13:00:08 +0000
Manifest next update: Sat 01 Feb 2025 13:00:08 +0000
Files and hashes: 1: EmdE4lFlfaABPtiZtlnbFIKNWhE.roa (hash: xZDQuK6O09neLie5Q456W4oztNFuHLsLoArEyWHRJSU=)
2: SrfcA3ifWGIbJejdDZJdyRtKWqI.crl (hash: 6FtJi4f8h2Tkhb7si8gfl61nsmZapNRDS/+5uTVp/aA=)
3: lCpE9-_9vA0HzQAwKrWQ7gX2Gi8.roa (hash: YkwTTveNH0IQGCLC0ZIMEDB0zjPdx3yFhcYm5gkoPpw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:81:7e:c3:50:08:70:03:13:4b:82:56:99:fd:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ab7dc03789f58621b25e8dd0d925dc91b4a5aa2
Validity
Not Before: Jan 31 13:00:08 2025 GMT
Not After : Feb 1 13:00:08 2025 GMT
Subject: CN=bd9ea75306415698846d0508b2252a8520d1632e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:ff:4a:c4:7b:db:aa:b3:33:b1:99:c0:32:7d:
5e:0e:de:69:19:51:c7:0b:02:2f:3e:df:0a:88:f9:
86:22:17:d5:82:ed:33:fd:74:c8:b3:40:d9:8d:85:
f5:e6:8d:66:cf:07:11:7b:69:fb:92:35:7e:53:f8:
a6:c1:0e:da:aa:ba:47:ef:db:bc:f6:05:5e:9c:04:
04:6f:07:24:67:77:67:ee:16:8c:c6:b7:92:d0:47:
7a:de:47:fb:81:56:bc:c6:a5:48:08:ac:cc:38:67:
8d:5c:24:22:b5:6d:d6:d3:38:a9:7e:ac:1d:9f:48:
52:f4:fd:48:f7:b2:0d:87:88:73:8e:8f:6d:27:57:
14:78:37:c3:b2:97:f9:41:e5:ee:c4:ef:46:ac:61:
ec:bf:71:9c:bf:eb:a0:c5:da:59:78:28:f1:e4:1e:
6c:89:68:0b:4b:ae:45:94:ec:67:64:ea:c0:c8:fd:
f1:19:bf:fa:6e:1b:1a:98:1a:5f:ea:92:d5:b2:38:
74:92:b7:50:d0:a3:2f:79:bb:fa:0e:c8:3a:66:7c:
ca:13:de:8b:08:a4:1e:21:fa:c6:3c:2b:19:75:45:
53:e1:2c:cd:48:c5:d8:c4:7a:7b:1e:41:e9:4e:3f:
7c:27:91:b4:4e:67:8b:ea:ae:96:be:8d:f2:f8:4d:
03:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:9E:A7:53:06:41:56:98:84:6D:05:08:B2:25:2A:85:20:D1:63:2E
X509v3 Authority Key Identifier:
keyid:4A:B7:DC:03:78:9F:58:62:1B:25:E8:DD:0D:92:5D:C9:1B:4A:5A:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SrfcA3ifWGIbJejdDZJdyRtKWqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8a59db-5ad8-4f3f-97c2-f38bcbd93390/1/SrfcA3ifWGIbJejdDZJdyRtKWqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8a59db-5ad8-4f3f-97c2-f38bcbd93390/1/SrfcA3ifWGIbJejdDZJdyRtKWqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:1d:b2:f3:73:13:6b:09:61:77:eb:49:bf:e5:81:57:04:f0:
5f:a5:99:a5:ec:54:a5:46:9a:07:39:88:de:44:5b:a9:43:60:
1b:4b:52:ba:13:c8:f2:f5:da:0f:82:4f:65:57:9f:c8:b0:2c:
ee:a4:0d:5c:e7:46:d2:2a:53:d5:b4:32:aa:5a:c6:75:7b:3f:
fc:1a:83:1d:89:bf:32:5e:80:84:2c:37:51:ba:f0:1a:8b:51:
d8:fb:c4:5b:22:0f:61:9b:d8:b5:1e:e5:50:5b:49:17:2f:af:
b7:b6:5d:7f:a9:5d:bd:4b:ec:10:9d:39:5e:b9:83:a2:ed:ef:
2a:ed:ad:57:11:19:3c:24:b3:e4:e8:17:5e:45:8f:a1:6d:0a:
2d:47:c4:e7:d6:8c:7b:85:78:40:dd:82:cc:dd:53:bd:d7:06:
d3:a0:69:5b:54:75:39:b5:f9:88:9f:97:29:24:79:5e:d2:f0:
07:a5:f4:c5:93:d9:65:d7:4c:63:1e:c3:29:1c:f0:ea:8a:db:
34:3c:b4:2a:82:db:c0:fb:6f:83:76:89:04:33:bf:2b:a7:2b:
4c:d2:b5:d6:96:d9:e3:3b:98:2c:78:60:01:96:da:0a:3e:15:
27:d0:ff:9a:ac:10:dc:21:e9:1c:0d:a0:d0:4c:e9:73:0d:a8:
5e:e5:34:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:34:10 2025 by rpki-client