Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/d2e826-5acb-47d6-92a4-43bb19f2e53b/1/s4WUFGIC4vbDRWsGlv8YVi8bn4E.mft
File: s4WUFGIC4vbDRWsGlv8YVi8bn4E.mft (raw, json)
Hash identifier: lOlgHOYkC4+BUeJkUPqeVWdVqmfgfFQeWXvLD7U2sgk=
Subject key identifier: 66:85:8E:F9:9B:2D:AA:0D:BC:C8:8C:B2:AA:33:B8:02:3E:78:EC:61
Authority key identifier: B3:85:94:14:62:02:E2:F6:C3:45:6B:06:96:FF:18:56:2F:1B:9F:81
Certificate issuer: /CN=b38594146202e2f6c3456b0696ff18562f1b9f81
Certificate serial: 0194BC04B69796D78B2054A986EE3DACE3DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s4WUFGIC4vbDRWsGlv8YVi8bn4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/d2e826-5acb-47d6-92a4-43bb19f2e53b/1/s4WUFGIC4vbDRWsGlv8YVi8bn4E.mft
Manifest number: 07B3
Signing time: Fri 31 Jan 2025 11:00:13 +0000
Manifest this update: Fri 31 Jan 2025 11:00:13 +0000
Manifest next update: Sat 01 Feb 2025 11:00:13 +0000
Files and hashes: 1: IcIyZXTtvGCVT7kmzm3an6XI4Ds.roa (hash: 9+rlboX5YqLY2xGwqsRBQUwcIF0ZyOqFrf8SvNh+rfQ=)
2: s4WUFGIC4vbDRWsGlv8YVi8bn4E.crl (hash: /QobXrlPdPUs5sPzcwDWpF0exO3RxNlYu88vcrxUoCQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:b6:97:96:d7:8b:20:54:a9:86:ee:3d:ac:e3:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b38594146202e2f6c3456b0696ff18562f1b9f81
Validity
Not Before: Jan 31 11:00:13 2025 GMT
Not After : Feb 1 11:00:13 2025 GMT
Subject: CN=66858ef99b2daa0dbcc88cb2aa33b8023e78ec61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:84:b3:5a:dd:9d:ec:43:05:cf:15:c7:6a:e7:
6b:ca:ab:e8:63:a0:42:7d:cb:6d:18:97:23:f9:fb:
18:b5:f2:84:e4:3c:11:d4:a8:83:6e:18:0f:16:f9:
81:83:87:cb:bd:77:a2:9d:29:15:c8:b9:b1:25:75:
32:f1:91:33:bd:d4:67:c8:76:fa:16:0a:b9:fe:6f:
d5:3c:47:ae:1f:16:9b:54:0f:f8:c5:0a:f0:6b:f3:
1c:af:c1:80:ff:12:e1:fc:74:84:86:e8:8f:93:61:
31:97:a2:ab:03:1c:57:e3:ca:96:86:40:13:6c:3e:
33:52:98:db:a6:8c:5b:b1:f3:8f:7b:46:51:b8:a6:
ed:1f:e6:0e:a7:36:a8:0a:28:c7:83:dc:74:4d:c6:
6e:46:bc:a5:1f:3b:4b:0a:f6:7b:2a:3f:b7:ef:cc:
cb:b0:2a:f7:6b:bb:76:99:be:8d:6c:35:7c:c0:0f:
1b:76:dd:a2:57:e0:ae:0e:d9:f5:b9:52:4e:77:d8:
e7:3f:19:39:65:d5:c5:f0:03:69:e1:fd:7f:63:99:
91:e3:65:ad:c3:62:04:3d:d0:28:48:73:8d:3d:14:
b9:26:b6:ff:d0:57:16:cb:ed:dc:27:75:16:e1:58:
e3:a4:71:5a:ce:0a:17:fa:b1:55:00:b3:20:b3:53:
ff:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:85:8E:F9:9B:2D:AA:0D:BC:C8:8C:B2:AA:33:B8:02:3E:78:EC:61
X509v3 Authority Key Identifier:
keyid:B3:85:94:14:62:02:E2:F6:C3:45:6B:06:96:FF:18:56:2F:1B:9F:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s4WUFGIC4vbDRWsGlv8YVi8bn4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/d2e826-5acb-47d6-92a4-43bb19f2e53b/1/s4WUFGIC4vbDRWsGlv8YVi8bn4E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/d2e826-5acb-47d6-92a4-43bb19f2e53b/1/s4WUFGIC4vbDRWsGlv8YVi8bn4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:5e:6b:34:d0:99:ca:19:e2:be:e9:b7:4a:b6:38:7b:0c:34:
9e:41:12:8d:10:3c:b3:fa:f5:ed:5f:be:20:b2:00:04:0e:41:
39:3d:85:30:e6:4b:69:d7:db:ac:36:f8:0c:1b:18:15:ee:17:
b9:57:2b:d9:43:94:ea:4c:2a:ad:3f:a0:ea:ef:82:6c:3c:95:
53:d6:b5:54:52:77:c5:e3:cf:4d:c7:a7:ed:e2:5d:d7:84:0b:
a1:22:4b:b1:76:6d:32:62:ad:2e:e5:aa:1b:4f:ab:21:07:f1:
ca:ff:aa:86:89:2c:4f:15:10:47:06:3e:5d:cf:ae:19:89:7e:
d3:51:c7:05:87:fa:2d:8e:bc:da:46:d2:b0:5e:5a:97:40:9f:
2e:2f:ef:23:fe:88:76:67:01:28:74:91:81:1e:ef:76:15:f8:
ef:ea:62:d3:15:44:fa:4a:87:b5:8e:de:6a:88:f4:a3:4c:8a:
c2:a5:48:e4:f2:6e:13:16:eb:2c:45:b2:3f:94:7d:b6:fd:85:
57:41:f5:b8:37:11:7b:e1:2e:28:37:66:79:f0:aa:9e:b7:c7:
63:be:8a:e4:d2:52:d3:2f:64:3f:d5:c2:4d:ea:d5:01:23:7f:
25:b5:31:b7:ad:ed:1e:d6:b4:9c:4c:05:29:c6:94:62:f8:d4:
02:92:84:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:26:04 2025 by rpki-client