
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/a565fb-50bd-4bb6-875c-0e2bbd4337aa/1/scIIojstTYe-k_idUyvG9EkIgZs.mft
File: scIIojstTYe-k_idUyvG9EkIgZs.mft (raw, json)
Hash identifier: KV3ynzYO35dLeSEo7dJEZvy5Cx7xxvL6rq8U0bfFkyw=
Subject key identifier: 21:40:6F:AD:CA:B8:E0:8D:4D:0B:EB:4D:7F:C3:5A:CA:7A:FC:01:7C
Authority key identifier: B1:C2:08:A2:3B:2D:4D:87:BE:93:F8:9D:53:2B:C6:F4:49:08:81:9B
Certificate issuer: /CN=b1c208a23b2d4d87be93f89d532bc6f44908819b
Certificate serial: 0194BCE078161817525BC0AE1A92BC5D52EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/scIIojstTYe-k_idUyvG9EkIgZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/a565fb-50bd-4bb6-875c-0e2bbd4337aa/1/scIIojstTYe-k_idUyvG9EkIgZs.mft
Manifest number: 088E
Signing time: Fri 31 Jan 2025 15:00:14 +0000
Manifest this update: Fri 31 Jan 2025 15:00:14 +0000
Manifest next update: Sat 01 Feb 2025 15:00:14 +0000
Files and hashes: 1: St1eW7huW5NWmrTlCcZNOVav4YY.roa (hash: L1r59p9it1NHOb7n3iknNAhhpFyt7umgYxP2fwKVRnQ=)
2: scIIojstTYe-k_idUyvG9EkIgZs.crl (hash: t1aDLzXZaVjoB5E7zh2IQU9O4KgJGr/zbFlUv20CRI0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:78:16:18:17:52:5b:c0:ae:1a:92:bc:5d:52:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1c208a23b2d4d87be93f89d532bc6f44908819b
Validity
Not Before: Jan 31 15:00:14 2025 GMT
Not After : Feb 1 15:00:14 2025 GMT
Subject: CN=21406fadcab8e08d4d0beb4d7fc35aca7afc017c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:25:4c:2c:ae:62:75:09:eb:33:bc:84:da:3b:
29:a0:e7:a7:a6:64:9b:3c:21:ca:d2:05:97:d7:f0:
7d:49:ae:52:1a:0a:e3:23:ad:43:73:26:7a:3e:05:
d1:eb:c9:5a:eb:03:53:87:8d:61:ff:b2:45:e2:21:
d8:71:20:27:38:7f:32:80:a8:c4:29:df:c6:36:ea:
e5:16:d6:49:7b:34:c4:7b:8e:0f:9a:87:b0:5b:33:
74:c8:dd:64:43:43:a6:8f:95:d7:33:a5:6f:b7:dd:
90:0c:c6:60:14:59:a9:b6:5f:31:67:69:9e:4c:46:
3f:8b:6c:02:2a:19:3e:29:7f:16:ce:f5:01:bd:f3:
f8:8b:72:e8:21:99:5e:6d:11:71:2f:43:a7:97:3d:
06:7e:02:2f:2d:75:5f:38:a6:77:97:00:55:9e:ae:
30:f5:f5:6d:01:3f:54:d2:57:01:0f:a6:5c:8f:98:
be:92:b9:c3:9e:6c:b1:a1:ac:e8:ea:b7:3f:81:6f:
ce:d8:1e:2c:61:bf:9f:85:a6:f4:1c:a9:0d:ad:69:
6a:01:c3:6c:08:5b:5b:71:dc:26:40:2f:c4:f6:73:
4b:3f:8a:f4:8a:de:9f:89:0d:8f:2d:94:3d:79:1b:
65:d9:46:f1:17:6f:44:ff:ef:8e:09:89:59:d9:36:
75:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:40:6F:AD:CA:B8:E0:8D:4D:0B:EB:4D:7F:C3:5A:CA:7A:FC:01:7C
X509v3 Authority Key Identifier:
keyid:B1:C2:08:A2:3B:2D:4D:87:BE:93:F8:9D:53:2B:C6:F4:49:08:81:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/scIIojstTYe-k_idUyvG9EkIgZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/a565fb-50bd-4bb6-875c-0e2bbd4337aa/1/scIIojstTYe-k_idUyvG9EkIgZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/a565fb-50bd-4bb6-875c-0e2bbd4337aa/1/scIIojstTYe-k_idUyvG9EkIgZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:1c:2b:89:ed:c7:7d:88:6f:19:33:74:f2:2e:03:60:f9:36:
18:a6:a5:0b:0d:67:ad:a9:f7:75:4d:29:ce:ff:57:53:9e:1c:
be:24:3a:6f:16:65:f8:7b:e8:ff:a5:b7:f9:61:46:0c:bf:04:
6b:9c:43:00:37:f7:8e:9c:86:f0:10:09:c3:57:94:49:26:95:
1c:2d:44:e5:8c:5a:9f:c7:03:d7:97:15:56:b4:4f:23:02:fa:
ad:28:28:5c:a9:16:bb:39:1b:65:76:de:c0:d5:c9:75:d2:31:
02:99:4b:97:4a:39:c3:68:0a:3a:55:eb:79:6a:30:ae:8a:c2:
4f:4d:b0:df:95:25:35:fe:16:c1:57:e4:7c:8e:5a:2e:f6:f8:
30:07:34:0e:b1:b7:ce:94:3e:6c:04:0a:1c:8a:3d:e4:23:fc:
4a:98:82:a4:55:bb:7b:a0:fa:10:d9:67:f8:26:52:95:db:ff:
92:9b:d1:01:74:64:ef:33:ac:d6:3a:fe:a4:f2:8c:fc:95:f7:
65:a5:e9:e4:df:82:65:0b:f0:54:49:64:c8:76:70:06:f1:6e:
f6:4d:b2:ca:ad:82:20:61:b6:64:97:f7:55:00:92:41:3d:2f:
6f:ce:c9:db:9b:eb:2a:3a:5d:ec:92:00:c0:05:68:2d:a4:0c:
fb:72:02:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:23 2025 by rpki-client