Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/d2e137-cebb-4794-9ace-1b5de5b76062/1/SsoEWGqF7RLpzag039-hGcGliXU.mft
File: SsoEWGqF7RLpzag039-hGcGliXU.mft (raw, json)
Hash identifier: UGJqGRcBQQ1FROG4pDZNAGvQH+y/bcIGSixOXz6A9WA=
Subject key identifier: AD:41:C5:F5:82:58:D4:BC:29:F1:A3:B0:42:4D:1C:6F:ED:CA:9B:A9
Authority key identifier: 4A:CA:04:58:6A:85:ED:12:E9:CD:A8:34:DF:DF:A1:19:C1:A5:89:75
Certificate issuer: /CN=4aca04586a85ed12e9cda834dfdfa119c1a58975
Certificate serial: 0194BBCDB8C40DB717158A63F3BEFB6FFA6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SsoEWGqF7RLpzag039-hGcGliXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/d2e137-cebb-4794-9ace-1b5de5b76062/1/SsoEWGqF7RLpzag039-hGcGliXU.mft
Manifest number: 07FA
Signing time: Fri 31 Jan 2025 10:00:09 +0000
Manifest this update: Fri 31 Jan 2025 10:00:09 +0000
Manifest next update: Sat 01 Feb 2025 10:00:09 +0000
Files and hashes: 1: SsoEWGqF7RLpzag039-hGcGliXU.crl (hash: OsTRcIqbFVM3VRONMNuLyp4w60+gokPQuA2NRVb18+Y=)
2: TdqltWNYsCkDJcg9oYqYHfFyayw.roa (hash: IHz6X9KAAba9wnzN//Chx4Lew1Pbb5Sq3pXLZ65RVVs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:b8:c4:0d:b7:17:15:8a:63:f3:be:fb:6f:fa:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4aca04586a85ed12e9cda834dfdfa119c1a58975
Validity
Not Before: Jan 31 10:00:09 2025 GMT
Not After : Feb 1 10:00:09 2025 GMT
Subject: CN=ad41c5f58258d4bc29f1a3b0424d1c6fedca9ba9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:f8:05:cd:f3:80:99:b5:cc:f8:e3:2b:f9:22:
4a:e2:5f:da:84:e6:fa:2a:bb:4c:68:10:bf:c0:b4:
08:4b:91:10:0b:74:20:58:af:78:2a:8b:8c:6e:e5:
8d:a8:02:dd:b6:cc:06:f6:7d:0d:23:fa:b0:72:df:
a5:61:6c:75:06:a3:a3:25:68:86:db:12:38:11:4b:
52:14:f1:4d:67:40:20:a4:53:29:a1:c1:b9:52:f8:
40:42:87:70:e4:b7:7a:b2:d1:4e:b6:15:0f:a2:2e:
19:3a:b8:a7:a6:b7:66:fe:ff:8b:41:74:60:5b:02:
1c:9a:61:7e:36:b0:9b:d6:ea:87:2d:06:9c:ce:80:
51:3d:8f:0b:40:dc:2d:2c:80:16:6a:9f:9e:e3:5d:
ef:cf:05:85:21:9d:69:12:94:ab:a2:02:e8:2b:60:
07:73:c7:6a:5d:c9:64:8a:8b:39:fc:ae:0d:18:1b:
71:ea:3b:0d:38:95:48:53:88:42:aa:3b:82:14:8c:
e9:55:67:49:b5:99:fc:c5:4d:8a:aa:71:38:0f:0e:
2e:c8:cd:ce:08:39:fa:fb:40:d7:d5:c7:07:53:66:
57:63:d1:85:05:b9:2a:c8:bb:f9:fe:e4:de:2b:8b:
95:93:b4:03:30:c7:f4:3c:ac:f8:7c:af:2d:28:7a:
e4:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:41:C5:F5:82:58:D4:BC:29:F1:A3:B0:42:4D:1C:6F:ED:CA:9B:A9
X509v3 Authority Key Identifier:
keyid:4A:CA:04:58:6A:85:ED:12:E9:CD:A8:34:DF:DF:A1:19:C1:A5:89:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SsoEWGqF7RLpzag039-hGcGliXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d2e137-cebb-4794-9ace-1b5de5b76062/1/SsoEWGqF7RLpzag039-hGcGliXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d2e137-cebb-4794-9ace-1b5de5b76062/1/SsoEWGqF7RLpzag039-hGcGliXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:f4:6f:99:39:24:83:bb:1c:03:67:57:7c:7b:82:80:8a:8b:
10:e6:bb:52:e9:31:c2:6e:10:1e:00:de:82:7f:dd:64:ae:21:
ea:db:54:9d:6e:2d:50:a7:99:61:8e:3a:37:ed:f6:12:7f:82:
6e:5d:5b:be:4b:d2:ab:e0:dc:53:b5:f8:32:1b:5b:98:70:0b:
96:3f:1e:87:6c:dc:0d:21:c6:4b:d9:81:f4:2b:42:c1:62:1c:
55:2f:89:1f:65:66:62:17:c2:9f:1c:3d:e3:90:fd:eb:f3:99:
7a:cb:c0:9f:7e:86:1c:12:ca:8c:c4:8f:05:75:70:93:bd:42:
30:c1:71:4d:a7:ea:cb:63:06:20:b6:95:1d:f1:ac:1d:2c:3a:
2b:b5:6e:b7:d9:ca:21:45:1c:22:74:34:e3:96:da:96:87:e5:
a8:5f:92:bf:58:b4:ae:d6:05:38:1c:ab:51:3e:5e:74:ef:ee:
24:01:f1:94:60:d3:94:89:d3:10:a3:7d:c2:aa:2c:e1:1e:99:
9c:93:6b:e4:57:b5:33:ca:2e:19:cd:37:db:4e:62:dd:3f:06:
e3:58:92:35:c5:1c:82:85:a6:13:2c:bc:7d:ba:22:d2:9c:18:
5a:a7:26:ca:db:4b:de:af:0a:56:b1:fe:81:87:87:63:f3:fb:
0e:fa:ab:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:50 2025 by rpki-client