Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/9a72e0-fb9c-4e72-af34-dc48cecd1545/1/s6RxSmlcY88unErephcYJ9hm4pg.mft
File: s6RxSmlcY88unErephcYJ9hm4pg.mft (raw, json)
Hash identifier: TPk69LYp0ICNL/nw4JEFR/9EDUIQOoYhwMTkWERUi/0=
Subject key identifier: 89:AC:01:60:AF:89:86:7A:28:8A:9C:8E:BA:28:62:C7:A0:88:8D:BF
Authority key identifier: B3:A4:71:4A:69:5C:63:CF:2E:9C:4A:DE:A6:17:18:27:D8:66:E2:98
Certificate issuer: /CN=b3a4714a695c63cf2e9c4adea6171827d866e298
Certificate serial: 0194BD179490376848EC555FC0CA8E8AB3A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s6RxSmlcY88unErephcYJ9hm4pg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/9a72e0-fb9c-4e72-af34-dc48cecd1545/1/s6RxSmlcY88unErephcYJ9hm4pg.mft
Manifest number: 1196
Signing time: Fri 31 Jan 2025 16:00:26 +0000
Manifest this update: Fri 31 Jan 2025 16:00:26 +0000
Manifest next update: Sat 01 Feb 2025 16:00:26 +0000
Files and hashes: 1: UIgf9ajrQrDmAPpLPV90kRuj32I.roa (hash: AlX36a6BnwjhKrdVjNHSqwcRq3yixFLnOubI+UNJ9cQ=)
2: cBeaN8r92MWoqfdvhQH_ewA_rkk.roa (hash: yNYMjmHLoWXkkp0dQFYuWRyyRjSNzH1ulJxUwxp290s=)
3: s6RxSmlcY88unErephcYJ9hm4pg.crl (hash: 3ZPGBQ5OCGokrzGnPDouHNY+2zzGb5mNmmd7FZ6ZDpw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:94:90:37:68:48:ec:55:5f:c0:ca:8e:8a:b3:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3a4714a695c63cf2e9c4adea6171827d866e298
Validity
Not Before: Jan 31 16:00:26 2025 GMT
Not After : Feb 1 16:00:26 2025 GMT
Subject: CN=89ac0160af89867a288a9c8eba2862c7a0888dbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:4e:2f:11:01:97:b7:6b:01:35:8c:52:ba:60:
71:4b:93:8d:a6:3c:04:b2:9a:c8:c7:fa:77:e9:6c:
35:cf:83:02:e4:62:07:cf:97:91:01:5b:4a:37:12:
f9:c2:46:e5:f8:6d:ef:d2:de:d0:dd:2d:d6:0b:17:
2f:a3:5d:7c:d9:97:47:b9:87:9b:b2:92:5d:fa:1d:
76:d0:bd:3d:d8:83:bb:d4:81:32:97:b2:02:4f:19:
50:16:dd:18:04:fa:84:f7:c7:3a:49:e4:47:db:89:
16:80:75:04:b7:d1:83:9a:fa:cc:4c:e5:cd:50:17:
25:92:44:de:60:3d:94:7a:2f:60:2e:3a:33:d3:61:
18:a7:d9:71:d2:f0:14:5c:53:fd:e9:b2:dd:14:0c:
02:79:25:27:83:6c:50:bd:71:d7:45:29:60:5d:0d:
61:3b:71:7c:16:21:58:c3:56:5c:d3:15:53:1f:91:
b5:9c:ac:00:bd:54:23:5b:84:8d:75:55:f5:35:13:
02:d3:a0:2c:81:fc:25:e1:81:91:43:ad:c5:02:6e:
cc:5d:f2:05:f5:ec:51:81:2b:a8:85:b5:58:9f:51:
19:6a:cc:fa:da:f9:7d:bd:75:14:03:ad:d8:c8:e2:
f8:cc:31:40:1d:b6:49:aa:a0:30:fb:43:f6:df:4b:
a9:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:AC:01:60:AF:89:86:7A:28:8A:9C:8E:BA:28:62:C7:A0:88:8D:BF
X509v3 Authority Key Identifier:
keyid:B3:A4:71:4A:69:5C:63:CF:2E:9C:4A:DE:A6:17:18:27:D8:66:E2:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s6RxSmlcY88unErephcYJ9hm4pg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9a72e0-fb9c-4e72-af34-dc48cecd1545/1/s6RxSmlcY88unErephcYJ9hm4pg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9a72e0-fb9c-4e72-af34-dc48cecd1545/1/s6RxSmlcY88unErephcYJ9hm4pg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:f3:c8:0e:49:e6:39:d2:b4:3b:e6:e1:38:ba:66:55:0d:e2:
6b:24:bd:21:7a:4c:ef:61:f6:52:a4:9f:48:75:50:3d:a2:3d:
f7:6c:04:56:52:3f:a5:de:27:a8:1f:4f:67:b7:89:c5:a4:c7:
1d:52:1d:df:1a:54:a8:3f:f6:00:c7:76:28:76:0e:a9:d4:b1:
a6:e0:22:8a:b9:7e:1c:c6:1f:f4:49:fa:49:d7:3f:a2:ba:51:
9e:ac:17:b5:7b:2e:fc:32:81:3c:48:22:24:ac:5c:5d:b3:e7:
e8:f3:de:b8:f0:f0:8d:69:8a:97:61:f0:71:be:1b:c7:75:54:
0b:0f:93:f4:e5:1e:eb:08:0e:7f:da:0b:d2:e6:a8:ec:75:95:
df:52:29:09:0d:19:7e:d3:34:4c:2c:94:6f:17:0e:35:14:5a:
6c:e4:2d:65:dc:8b:69:64:ac:ee:1c:90:ee:30:ba:cf:5e:50:
2e:c9:cf:f2:46:09:e0:c4:4f:0e:0f:b9:4a:f5:e3:92:29:69:
98:fd:84:1d:36:76:f3:38:c5:d8:28:97:35:a6:8d:0d:7d:9a:
b1:84:3f:99:8f:80:73:0a:1a:e2:ce:7d:db:71:9d:41:b9:70:
9a:19:0e:84:33:65:98:e9:ab:8d:2f:41:e5:41:29:44:77:72:
7c:13:94:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:27 2025 by rpki-client