Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/SOBqNRpRibzcRIQJSNv7QKv1i-U.mft
File: SOBqNRpRibzcRIQJSNv7QKv1i-U.mft (raw, json)
Hash identifier: 0JnMtgla3mznEqjqYAyOrr7/1cONdcUcd1RRZXJBkig=
Subject key identifier: 2B:FB:32:85:7C:10:0A:74:DE:3E:24:28:F7:F5:BB:A2:88:FC:68:79
Authority key identifier: 48:E0:6A:35:1A:51:89:BC:DC:44:84:09:48:DB:FB:40:AB:F5:8B:E5
Certificate issuer: /CN=48e06a351a5189bcdc44840948dbfb40abf58be5
Certificate serial: 0194BBCED6A93CD0388E012EAAC862AAFAC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SOBqNRpRibzcRIQJSNv7QKv1i-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/SOBqNRpRibzcRIQJSNv7QKv1i-U.mft
Manifest number: 143B
Signing time: Fri 31 Jan 2025 10:01:22 +0000
Manifest this update: Fri 31 Jan 2025 10:01:22 +0000
Manifest next update: Sat 01 Feb 2025 10:01:22 +0000
Files and hashes: 1: BrQq7YEFajNSVsBn6S_XP8bHPLY.roa (hash: egGSnJVF4ZpifdFK3Q0Rkj8+zW1UTdDs4D8hficQgOQ=)
2: SOBqNRpRibzcRIQJSNv7QKv1i-U.crl (hash: Ghyl9aUa0jexI32rJGuRFBStNm65Zuw4PLlp0O2hLgc=)
3: _hamS7rzw0J6OXKNXdVH7OeaT4Q.roa (hash: ppVJlVMuhJ5jDD41r02lsschJxrv6DpfcMAAlxrf2Hc=)
4: _lfG9ESLsxXEgAvqTalwUEnKxms.roa (hash: noFmrTMo46tY2ivGlOMckm0NR1JVH9RLR85L6zlyDyA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:d6:a9:3c:d0:38:8e:01:2e:aa:c8:62:aa:fa:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48e06a351a5189bcdc44840948dbfb40abf58be5
Validity
Not Before: Jan 31 10:01:22 2025 GMT
Not After : Feb 1 10:01:22 2025 GMT
Subject: CN=2bfb32857c100a74de3e2428f7f5bba288fc6879
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:9c:d5:ec:e7:2c:a3:f4:0b:b4:47:9c:89:5e:
f5:11:77:3c:5a:db:a1:99:91:a8:99:95:08:f0:6a:
c2:5f:a6:a5:78:8d:16:f6:57:e2:b1:f8:90:1e:70:
1a:c1:1c:ab:14:ab:14:f8:48:a0:c7:de:f8:0f:24:
62:bf:8b:01:3a:73:10:5f:e1:8f:98:a1:31:43:0a:
b6:9c:c9:f5:a5:92:58:b0:3a:7f:6e:82:71:08:40:
04:b6:42:24:8e:87:92:ff:66:e3:56:ec:6d:cd:d2:
eb:0d:c0:7a:d1:95:11:2f:7d:37:da:d6:f0:0b:d8:
f8:8d:06:13:e1:9b:86:c3:33:c6:82:ab:55:1c:61:
ee:eb:e4:78:21:3e:ec:71:9f:2f:c8:ff:eb:dc:68:
78:1d:eb:55:0c:c2:bb:02:83:0a:01:cc:3f:61:54:
dd:26:43:c0:c6:82:2d:de:aa:56:e5:cb:8b:e7:f2:
c8:c0:08:c4:ad:28:b2:d7:39:65:c5:fc:d3:30:67:
8a:70:42:ba:ed:09:ad:3d:1a:55:98:d1:84:35:7f:
bb:89:b7:e6:41:40:e6:93:2e:bb:4c:49:46:96:2d:
be:80:88:f1:a5:60:48:0f:c9:ba:01:d1:3e:1e:3b:
bd:d1:78:fa:44:64:8a:29:c5:61:58:34:a4:13:1d:
9e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:FB:32:85:7C:10:0A:74:DE:3E:24:28:F7:F5:BB:A2:88:FC:68:79
X509v3 Authority Key Identifier:
keyid:48:E0:6A:35:1A:51:89:BC:DC:44:84:09:48:DB:FB:40:AB:F5:8B:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SOBqNRpRibzcRIQJSNv7QKv1i-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/SOBqNRpRibzcRIQJSNv7QKv1i-U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/SOBqNRpRibzcRIQJSNv7QKv1i-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:0c:e9:d8:7e:6a:af:8a:d0:b2:b1:97:ae:7d:00:4b:dc:6a:
f8:63:db:8d:c9:b3:24:bf:2c:0c:50:f7:f1:b4:43:1f:c5:7b:
9e:d2:b9:b6:51:c2:3e:aa:fb:c1:5b:6f:02:73:4b:01:44:30:
8e:37:44:be:f8:79:f1:49:c8:af:87:c3:55:a2:b2:c7:80:36:
d3:8e:b1:2f:79:b5:d9:e3:c7:42:eb:9c:bd:59:d6:98:c5:19:
f3:b7:ca:05:a4:74:ea:d9:e1:47:c4:bd:ab:40:b8:7f:56:61:
cc:40:26:4d:17:2d:7c:15:08:f1:4e:bc:0c:56:cc:df:fe:fd:
98:00:95:79:fd:80:b6:5e:4a:6e:1d:a7:18:b4:fa:ed:f3:a3:
5d:17:5e:6c:5a:d9:ec:01:25:94:e4:6d:92:3f:45:de:ca:0c:
43:37:8b:d4:ec:31:41:cf:e2:e4:9b:dd:e0:9a:2b:d9:85:97:
84:60:c1:47:ae:c3:2c:b3:d3:d3:d9:53:3e:4a:66:23:92:63:
5a:d5:60:d9:a0:09:61:78:e6:cf:ce:52:2a:ef:b5:d3:9b:f7:
f4:ce:fd:bd:b4:db:55:b9:ed:94:da:82:f9:6c:58:4f:74:6b:
f5:c7:5d:0d:97:c2:82:1e:56:0b:8c:0a:cf:40:a3:e5:ca:0f:
3b:94:67:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:24 2025 by rpki-client