Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/7d20a2-b881-461c-bbf5-2b6809339702/1/S9H1DfJj_lCfxd6cWkc6KOOBJjk.mft
File: S9H1DfJj_lCfxd6cWkc6KOOBJjk.mft (raw, json)
Hash identifier: Peu4pB6cl3bUPudGftvZDkOwZkCJeI3j0qmlKB59NaA=
Subject key identifier: D5:05:D9:07:6A:D5:A1:6F:82:30:6D:D4:12:90:A1:2F:66:B4:42:AA
Authority key identifier: 4B:D1:F5:0D:F2:63:FE:50:9F:C5:DE:9C:5A:47:3A:28:E3:81:26:39
Certificate issuer: /CN=4bd1f50df263fe509fc5de9c5a473a28e3812639
Certificate serial: 0194BBCEEF245E01BEC87BCF4C2C68C37A44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S9H1DfJj_lCfxd6cWkc6KOOBJjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/7d20a2-b881-461c-bbf5-2b6809339702/1/S9H1DfJj_lCfxd6cWkc6KOOBJjk.mft
Manifest number: 0F99
Signing time: Fri 31 Jan 2025 10:01:28 +0000
Manifest this update: Fri 31 Jan 2025 10:01:28 +0000
Manifest next update: Sat 01 Feb 2025 10:01:28 +0000
Files and hashes: 1: S9H1DfJj_lCfxd6cWkc6KOOBJjk.crl (hash: kWiqI2HJ5Z5WN7+Gz94bat6V/4+j3uzKNWbOSve5XKQ=)
2: ejjlASXkUcRdnr6-VdCF2Mgcm40.roa (hash: vzr2w6+iif68HBa0Udg4Ex8g0igxmMWxnsZRKLXilEk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:ef:24:5e:01:be:c8:7b:cf:4c:2c:68:c3:7a:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bd1f50df263fe509fc5de9c5a473a28e3812639
Validity
Not Before: Jan 31 10:01:28 2025 GMT
Not After : Feb 1 10:01:28 2025 GMT
Subject: CN=d505d9076ad5a16f82306dd41290a12f66b442aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:af:0c:7d:f0:b7:42:49:36:82:0b:6c:31:06:
5d:5b:e2:35:92:1b:14:49:4a:41:0f:39:15:94:07:
54:cf:bb:2b:5c:74:32:59:9f:30:ed:69:15:a0:fe:
86:89:c8:61:bc:45:b4:fd:8e:64:1f:b4:4f:80:f8:
79:89:af:f1:67:9e:02:5a:d7:4f:ac:c7:63:91:85:
42:ee:3b:89:cf:c6:6c:b7:9d:59:bc:bc:c0:b6:29:
ed:18:12:ca:fd:78:80:aa:6d:b1:05:6f:69:26:47:
43:fe:3c:41:be:8b:3e:7c:7d:23:b9:34:d3:b1:57:
7a:47:46:40:7e:76:02:6d:b7:59:4b:73:26:89:27:
54:bd:15:8c:2a:0b:27:ac:f6:37:f5:fd:db:07:f5:
a2:60:3a:4d:42:89:5f:a9:2e:8a:d0:20:a9:36:dd:
99:b4:0a:0f:4f:db:e3:6e:a2:41:a4:ae:ce:cf:86:
7a:68:4c:27:95:f0:83:1f:56:2b:c8:8c:9b:05:a1:
97:79:4c:db:82:da:6a:02:d6:ea:63:93:74:44:ca:
0c:6d:33:6e:fd:97:4c:41:da:b3:7f:3e:4f:38:9d:
c1:a3:96:d5:62:fa:c5:a8:b9:b3:67:e2:1b:df:d1:
7c:22:fa:d4:e9:7b:8d:6f:ff:91:91:9e:16:b6:9d:
f0:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:05:D9:07:6A:D5:A1:6F:82:30:6D:D4:12:90:A1:2F:66:B4:42:AA
X509v3 Authority Key Identifier:
keyid:4B:D1:F5:0D:F2:63:FE:50:9F:C5:DE:9C:5A:47:3A:28:E3:81:26:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S9H1DfJj_lCfxd6cWkc6KOOBJjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/7d20a2-b881-461c-bbf5-2b6809339702/1/S9H1DfJj_lCfxd6cWkc6KOOBJjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/7d20a2-b881-461c-bbf5-2b6809339702/1/S9H1DfJj_lCfxd6cWkc6KOOBJjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:b3:1c:31:9b:6b:99:b4:8d:46:e7:b5:65:e8:9f:1d:4b:bd:
29:b2:53:fd:cc:ff:95:c9:24:02:dc:42:54:1d:7c:b1:20:93:
26:e1:3e:3b:36:9d:e8:c1:72:17:47:a6:dc:6f:82:f8:7a:d6:
99:44:da:05:0f:5e:4d:12:f9:c4:47:c6:5c:71:52:d7:a7:b4:
92:4b:d3:a8:af:c1:12:aa:8b:bb:bf:97:c5:fa:33:b0:79:30:
8d:72:15:78:70:22:d8:b1:14:47:48:b2:0a:1b:c8:0e:14:13:
55:4c:b3:ba:09:da:a0:78:2d:0e:67:29:e6:65:e5:76:f2:3c:
2d:8a:19:0e:a1:37:51:c2:6c:ea:fb:8b:f6:8b:3a:ff:94:86:
e1:f2:27:07:fe:e1:01:56:86:2d:15:6d:37:98:8f:17:f1:f6:
74:b1:df:5f:da:84:9e:fe:1a:a9:2e:b5:00:c7:bd:54:2f:f3:
96:6b:63:b0:ec:4b:17:c0:61:52:b7:30:68:c7:56:84:b8:24:
bc:21:2c:ef:e3:b9:29:d2:3b:f7:9e:da:b6:3a:b1:4c:c1:d8:
51:24:df:fa:38:06:7e:c4:ae:84:96:2b:33:9c:d6:14:c8:f2:
45:35:0b:47:ef:b2:df:2c:d6:4c:20:ae:71:84:8c:5a:07:f8:
71:30:d6:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:51:49 2025 by rpki-client