Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/ef6f1a-6dfc-494e-b85d-d18773e7bc47/1/sgZjWDqBicvqrIjUOHZ5l7ESVUk.mft
File: sgZjWDqBicvqrIjUOHZ5l7ESVUk.mft (raw, json)
Hash identifier: nM2MouAMAHTjyGZCs5Ko9/TC8UYOjzd+NR8SsRhzRcw=
Subject key identifier: B1:AD:F2:30:95:CC:89:80:1F:3D:BD:18:BF:D4:BA:E7:25:2E:79:57
Authority key identifier: B2:06:63:58:3A:81:89:CB:EA:AC:88:D4:38:76:79:97:B1:12:55:49
Certificate issuer: /CN=b20663583a8189cbeaac88d438767997b1125549
Certificate serial: 0194BD17A8A38D32D20DCF74D8B88AA5324E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sgZjWDqBicvqrIjUOHZ5l7ESVUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/ef6f1a-6dfc-494e-b85d-d18773e7bc47/1/sgZjWDqBicvqrIjUOHZ5l7ESVUk.mft
Manifest number: 1388
Signing time: Fri 31 Jan 2025 16:00:31 +0000
Manifest this update: Fri 31 Jan 2025 16:00:31 +0000
Manifest next update: Sat 01 Feb 2025 16:00:31 +0000
Files and hashes: 1: fW2b4Mi4-jlU6WyOHwej57Bj7xc.roa (hash: gkYhGIaUuP9pIbVaUa+O+pFYYvku1Vu69Icl89ypkjo=)
2: sgZjWDqBicvqrIjUOHZ5l7ESVUk.crl (hash: wBViP78sssQqB0DeXI70bN/gLDKVtpDCEVzMMtEzQWM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:a8:a3:8d:32:d2:0d:cf:74:d8:b8:8a:a5:32:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b20663583a8189cbeaac88d438767997b1125549
Validity
Not Before: Jan 31 16:00:31 2025 GMT
Not After : Feb 1 16:00:31 2025 GMT
Subject: CN=b1adf23095cc89801f3dbd18bfd4bae7252e7957
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d6:b5:31:48:31:c5:12:5b:5d:9d:81:ab:3b:
f8:e6:cc:cf:27:cc:f9:43:76:15:79:02:55:fb:35:
86:dc:98:a5:07:37:83:7d:74:48:af:a2:ad:4e:81:
d6:58:84:3c:9c:60:21:6d:60:83:08:6e:68:dc:ce:
98:a8:37:08:7a:d2:d7:97:fb:bb:8a:d6:95:46:44:
73:bc:b6:88:40:3d:73:a1:0a:f5:9a:76:19:59:a2:
ad:6c:61:4a:d8:b2:3c:fe:ab:03:70:4a:5c:58:80:
5b:cf:56:ae:35:36:7d:fa:3a:00:24:60:4d:f6:9a:
85:3a:d8:d1:3d:a9:74:8b:97:21:a0:53:fb:7d:4d:
10:db:33:f1:e7:d8:32:7d:5f:03:f2:3e:e3:62:c1:
1b:d0:16:f7:c5:28:b5:e3:d2:17:83:25:b5:9b:2b:
c4:76:bb:62:6f:5f:a7:e0:ba:18:a1:6a:a9:81:dd:
73:00:c7:d3:66:64:b6:fa:17:28:34:2b:05:2f:b1:
30:62:49:79:c5:d3:56:f8:e9:7c:de:0c:35:25:d6:
1b:01:5b:9b:35:0b:56:ae:c0:ce:ed:e8:20:4d:cd:
5b:50:5b:a9:85:ed:e1:28:e0:dc:23:a3:1d:ff:02:
c7:5c:c2:16:a3:d8:e0:92:fb:67:5d:0e:41:b4:48:
b9:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:AD:F2:30:95:CC:89:80:1F:3D:BD:18:BF:D4:BA:E7:25:2E:79:57
X509v3 Authority Key Identifier:
keyid:B2:06:63:58:3A:81:89:CB:EA:AC:88:D4:38:76:79:97:B1:12:55:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sgZjWDqBicvqrIjUOHZ5l7ESVUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ef6f1a-6dfc-494e-b85d-d18773e7bc47/1/sgZjWDqBicvqrIjUOHZ5l7ESVUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ef6f1a-6dfc-494e-b85d-d18773e7bc47/1/sgZjWDqBicvqrIjUOHZ5l7ESVUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:d6:f3:bb:6b:10:cf:8a:43:ac:f1:d8:4f:c2:27:c2:64:d8:
1f:f8:8a:05:59:90:13:de:af:31:46:a5:eb:63:79:90:b3:a3:
b2:1d:d5:ee:14:c0:59:03:81:8e:5a:ad:4d:fc:ae:9a:68:4d:
c7:70:4b:15:02:18:a9:91:62:80:83:22:56:ef:da:79:6f:65:
a9:d3:a6:cf:47:81:49:09:ef:d8:ee:6f:1d:b1:f0:62:88:47:
37:b6:e8:f5:55:76:0c:e4:f0:f4:a8:88:54:12:c2:32:38:17:
b3:9a:36:8f:30:eb:8a:8e:f0:a8:30:0e:24:78:b6:a4:04:4c:
ee:cb:0f:00:96:2c:88:e7:7e:5e:ce:b2:a9:58:a7:41:bb:d0:
3f:a7:6b:93:b2:4a:e2:70:76:a3:45:9e:c2:54:4b:d7:fa:2e:
83:55:b4:30:85:86:1d:c7:b7:47:6c:bf:18:6b:b7:f3:03:f2:
f5:08:38:f0:bc:25:75:53:d9:90:9b:94:60:e9:f9:ca:e9:1a:
e8:6a:25:ab:f8:59:8e:3d:bb:61:d3:40:14:35:f6:f0:07:aa:
29:2e:39:b4:6e:9c:02:ae:12:f6:2d:b1:76:0c:bf:dc:bb:13:
34:cc:b4:bc:c6:b5:34:01:66:ee:55:71:35:6d:88:49:d2:8a:
f4:3b:b7:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:07:48 2025 by rpki-client