Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/288628-2039-4085-a006-060cd9c92f26/1/_s8oKCHaV19okXZHzz4YmPnQpio.mft
File: _s8oKCHaV19okXZHzz4YmPnQpio.mft (raw, json)
Hash identifier: zN2uiYJmtgXeXUE6lpKTjjlUXqJPxx8vakM8Lo3lMUY=
Subject key identifier: 58:D7:F0:0D:76:8E:B4:C9:51:6C:44:C7:64:FF:F2:2E:D0:CA:81:1B
Authority key identifier: FE:CF:28:28:21:DA:57:5F:68:91:76:47:CF:3E:18:98:F9:D0:A6:2A
Certificate issuer: /CN=fecf282821da575f68917647cf3e1898f9d0a62a
Certificate serial: 0194BC04F035C71DF81CC9CFBDFB3A24880E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_s8oKCHaV19okXZHzz4YmPnQpio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/288628-2039-4085-a006-060cd9c92f26/1/_s8oKCHaV19okXZHzz4YmPnQpio.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 11:00:27 +0000
Manifest this update: Fri 31 Jan 2025 11:00:27 +0000
Manifest next update: Sat 01 Feb 2025 11:00:27 +0000
Files and hashes: 1: 2OXGBjO85npyAkFnRouh_UBk1Hs.roa (hash: HbPy+YRVvuPyiRQMlka5FfjRj4FCj/zQuaXQr9znzdU=)
2: _s8oKCHaV19okXZHzz4YmPnQpio.crl (hash: v2IJ3pdIPzrdSOgQhWyvTURj2yuIa3tFIYrLVwuYVlo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:f0:35:c7:1d:f8:1c:c9:cf:bd:fb:3a:24:88:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fecf282821da575f68917647cf3e1898f9d0a62a
Validity
Not Before: Jan 31 11:00:27 2025 GMT
Not After : Feb 1 11:00:27 2025 GMT
Subject: CN=58d7f00d768eb4c9516c44c764fff22ed0ca811b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:88:2f:e2:5d:0d:b9:00:9a:6b:a4:9a:80:da:
36:7f:58:c2:1a:e3:10:28:44:a2:08:c1:a7:51:88:
22:cd:ef:20:c2:48:8f:26:88:72:5b:cd:78:e7:a6:
ab:15:e0:97:a6:87:66:4b:15:f6:c3:03:f7:a9:0c:
c1:3d:d1:24:1a:2d:82:a7:d7:d5:57:60:83:3c:05:
6f:e4:c6:a9:f2:92:d3:c1:bc:32:67:22:1f:cd:e3:
f5:97:d4:36:46:79:2a:58:a3:36:e2:24:d4:29:da:
a9:f6:9b:fe:c4:a9:9f:7b:2e:f9:ed:e3:65:91:e3:
71:0c:11:f7:10:8d:fa:77:fb:53:3b:0d:81:c7:3c:
30:5c:8c:0b:ee:30:e1:1b:02:ff:2e:38:29:30:77:
aa:54:32:df:b8:78:35:c3:52:5b:12:8b:d2:33:3b:
ba:d4:3c:8f:3b:37:8a:d7:c4:29:5b:db:b0:93:ac:
fd:7f:6e:b2:b6:06:01:41:82:da:3f:29:35:50:79:
4b:63:1b:d7:be:d7:87:18:aa:4d:49:cf:a1:d8:f8:
a2:f8:05:4b:67:9b:4a:03:f7:77:e3:e6:e9:15:bc:
d2:a4:b9:72:c9:5e:10:f2:47:8d:ba:7b:31:b7:96:
87:f6:75:e4:7a:6b:94:66:99:bb:25:97:6c:b0:5b:
7b:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:D7:F0:0D:76:8E:B4:C9:51:6C:44:C7:64:FF:F2:2E:D0:CA:81:1B
X509v3 Authority Key Identifier:
keyid:FE:CF:28:28:21:DA:57:5F:68:91:76:47:CF:3E:18:98:F9:D0:A6:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_s8oKCHaV19okXZHzz4YmPnQpio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/288628-2039-4085-a006-060cd9c92f26/1/_s8oKCHaV19okXZHzz4YmPnQpio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/288628-2039-4085-a006-060cd9c92f26/1/_s8oKCHaV19okXZHzz4YmPnQpio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:e4:08:50:7d:14:09:c7:de:95:1d:99:86:86:79:e8:dd:3c:
f6:b4:5f:31:be:8d:ce:14:c2:12:ec:cb:43:94:48:ad:83:78:
a4:eb:3f:6d:a2:07:5b:62:48:e3:c3:22:e1:8e:a0:ab:d7:ed:
a7:7e:5f:bc:d3:7f:5d:83:1c:fe:e0:5f:f3:71:b3:51:f5:41:
c4:4a:7e:fc:f6:00:ef:46:bb:07:ee:86:8a:a1:64:a5:28:18:
30:b8:8c:f3:1b:de:ca:61:ab:c5:a5:5b:fa:ff:22:fc:95:2e:
d8:4d:8a:20:1a:3d:bf:88:ed:09:fc:a0:b6:6b:25:38:6b:8b:
c7:6c:3b:71:14:cf:68:df:2d:80:3f:b2:6f:fe:e7:c2:34:77:
a6:81:0d:a7:2a:b0:9c:9e:c5:33:ff:e8:a5:75:6c:bb:1c:9b:
b7:8e:ba:56:de:2f:a2:b2:36:b7:25:03:e9:ba:84:c3:7e:03:
fa:42:ef:cc:e6:41:dc:12:b5:a5:4d:ae:59:29:a5:7f:2a:c3:
14:41:44:c4:52:9d:d1:71:ac:a6:3c:a9:97:58:03:da:fc:80:
bf:c2:ba:86:e1:91:b7:9a:6b:f1:67:b6:52:b8:47:2c:b0:b2:
60:89:5f:61:fd:a9:73:10:f1:63:64:43:c8:88:d8:88:80:a4:
cf:d5:41:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:18 2025 by rpki-client