
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/8d7c02-b38d-4d65-af35-837d0031b3d1/1/SiIu0bilM4WPRljF0lOfr1Kr2qc.mft
File: SiIu0bilM4WPRljF0lOfr1Kr2qc.mft (raw, json)
Hash identifier: Nm+ftIHXKU8AOhTLhDFS5JAOm4LC+MiubFckomCRPq8=
Subject key identifier: BA:2D:DA:15:E2:63:AF:9D:27:A0:2F:6B:2E:C5:67:0D:A0:09:E7:B6
Authority key identifier: 4A:22:2E:D1:B8:A5:33:85:8F:46:58:C5:D2:53:9F:AF:52:AB:DA:A7
Certificate issuer: /CN=4a222ed1b8a533858f4658c5d2539faf52abdaa7
Certificate serial: 0194BC728B4B4B463A33EC8F870D92EDAD2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SiIu0bilM4WPRljF0lOfr1Kr2qc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/8d7c02-b38d-4d65-af35-837d0031b3d1/1/SiIu0bilM4WPRljF0lOfr1Kr2qc.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 13:00:10 +0000
Manifest this update: Fri 31 Jan 2025 13:00:10 +0000
Manifest next update: Sat 01 Feb 2025 13:00:10 +0000
Files and hashes: 1: SiIu0bilM4WPRljF0lOfr1Kr2qc.crl (hash: G4EXhrmK/Pjxn5OYluDelySC9cnGm0GOgb/2BCsfRtY=)
2: bpYsiF18QRf5QtGXZ_iQjax9NTk.roa (hash: sxWNeli2Kw0W0CpyWRBKMIXDOOMhbuvbRuOafrwk3qg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:8b:4b:4b:46:3a:33:ec:8f:87:0d:92:ed:ad:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a222ed1b8a533858f4658c5d2539faf52abdaa7
Validity
Not Before: Jan 31 13:00:10 2025 GMT
Not After : Feb 1 13:00:10 2025 GMT
Subject: CN=ba2dda15e263af9d27a02f6b2ec5670da009e7b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f0:ec:fc:6d:83:b2:e9:f9:d4:8c:fb:9e:26:
5d:24:87:ba:45:32:a8:1e:e5:51:55:41:d7:80:ce:
a1:44:df:40:a0:05:2a:92:f2:82:25:1c:4c:57:d5:
b8:cd:7a:74:6b:d4:5f:bf:2a:32:85:a1:b0:eb:36:
ca:ea:06:d6:4e:ca:83:83:6f:a0:56:44:ce:1a:e4:
bf:c0:0a:7c:4e:2a:e3:2c:35:90:28:4b:6a:90:e2:
02:f8:6c:cf:ef:fe:f6:63:93:38:59:6f:22:85:2e:
2b:3c:14:eb:05:89:1e:3c:81:61:31:08:a3:a5:c6:
10:10:33:bc:ef:b8:d8:ff:bc:32:53:d9:0e:d3:9c:
78:d0:6e:91:0a:2d:ad:92:80:73:97:5d:2d:a0:7e:
9e:f4:2f:e9:e8:5a:99:d8:d1:5b:ac:e9:16:5b:43:
62:7f:dd:f3:dd:6a:6f:e9:f4:0e:30:ac:d8:2d:24:
d3:1e:28:55:b6:45:d5:f1:3c:60:3f:4d:51:9a:5d:
1f:59:8e:b5:60:e1:01:47:38:24:6c:15:c7:d2:8e:
97:22:29:37:40:c1:1d:5d:95:ec:65:1c:6c:33:3b:
26:b7:64:fd:b5:5c:51:2c:23:5d:f3:74:94:f5:ed:
a3:40:c6:a9:61:27:a1:6b:cb:ad:28:98:12:49:d4:
26:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:2D:DA:15:E2:63:AF:9D:27:A0:2F:6B:2E:C5:67:0D:A0:09:E7:B6
X509v3 Authority Key Identifier:
keyid:4A:22:2E:D1:B8:A5:33:85:8F:46:58:C5:D2:53:9F:AF:52:AB:DA:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SiIu0bilM4WPRljF0lOfr1Kr2qc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/8d7c02-b38d-4d65-af35-837d0031b3d1/1/SiIu0bilM4WPRljF0lOfr1Kr2qc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/8d7c02-b38d-4d65-af35-837d0031b3d1/1/SiIu0bilM4WPRljF0lOfr1Kr2qc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:15:b6:fc:53:9f:06:79:7d:61:c9:c7:c2:32:40:6b:10:48:
2b:65:a6:90:1e:e9:cf:e5:aa:c0:25:a0:2c:f3:10:ec:5a:72:
04:4b:84:d7:90:6e:b7:4b:9d:8b:d5:90:6c:df:b7:cb:03:4d:
96:10:53:ea:a3:42:bf:f4:31:e9:6a:73:12:9a:5c:53:60:7a:
ff:3b:2f:d6:e4:fc:49:da:04:40:dd:e0:23:33:91:4f:a4:2b:
ce:44:54:8d:71:94:8f:67:09:05:4f:0a:ef:61:64:c6:1e:c2:
3a:20:64:8e:16:7f:d3:3f:0c:9d:d2:27:55:ba:fc:7f:5f:e3:
20:42:e9:71:d9:d0:e6:e2:ee:9d:2f:21:d2:dc:41:06:b7:25:
05:7b:13:fc:52:03:64:fa:6f:25:91:22:75:c7:5b:00:0c:f2:
fa:03:b1:54:63:6c:82:1c:47:62:e3:b3:21:49:b8:a5:29:c5:
04:74:6d:73:82:1f:eb:48:81:bc:52:5d:20:6c:2f:02:ba:e8:
b9:e3:1f:af:47:ae:79:1e:77:a4:1b:0c:cb:9a:fa:7d:fa:1a:
c3:43:fe:9f:76:e1:35:29:ee:21:7b:d3:b5:57:6c:e3:52:ac:
15:47:78:2b:ad:9f:ca:aa:b3:f3:6f:be:e0:99:d3:71:9c:e7:
a9:b8:52:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:53 2025 by rpki-client