Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/d8f145-1e0d-471d-8536-ae6b84c28195/1/SYKxcZtP7HCLpmsper4NsI-tDh4.mft
File: SYKxcZtP7HCLpmsper4NsI-tDh4.mft (raw, json)
Hash identifier: CMggigFqaLiTEs8n/bvlZcahHoICUqDiV5200S0Uyqs=
Subject key identifier: 1F:57:7F:DD:DE:AF:63:A9:19:F1:93:1A:82:B4:13:56:DE:FD:6D:65
Authority key identifier: 49:82:B1:71:9B:4F:EC:70:8B:A6:6B:29:7A:BE:0D:B0:8F:AD:0E:1E
Certificate issuer: /CN=4982b1719b4fec708ba66b297abe0db08fad0e1e
Certificate serial: 0194BC0523B940614F834ED30D89F65A30F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SYKxcZtP7HCLpmsper4NsI-tDh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/d8f145-1e0d-471d-8536-ae6b84c28195/1/SYKxcZtP7HCLpmsper4NsI-tDh4.mft
Manifest number: 11FB
Signing time: Fri 31 Jan 2025 11:00:40 +0000
Manifest this update: Fri 31 Jan 2025 11:00:40 +0000
Manifest next update: Sat 01 Feb 2025 11:00:40 +0000
Files and hashes: 1: Kw1AzsNWjphqCxFEI8zvxxKk-4E.roa (hash: 02mwLZVS9V2HuLFBIdWLYALyxWsEeq02GbwMCR2pv1g=)
2: SYKxcZtP7HCLpmsper4NsI-tDh4.crl (hash: 671JwbKW42LRXWt9XV6XYVSyTaApPGim6LiJvvJqFZQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:23:b9:40:61:4f:83:4e:d3:0d:89:f6:5a:30:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4982b1719b4fec708ba66b297abe0db08fad0e1e
Validity
Not Before: Jan 31 11:00:40 2025 GMT
Not After : Feb 1 11:00:40 2025 GMT
Subject: CN=1f577fdddeaf63a919f1931a82b41356defd6d65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:8e:80:8c:10:6f:83:98:50:1c:58:de:6f:8c:
75:70:25:22:18:02:f6:a1:c4:43:fb:bd:ff:db:e5:
6a:fb:5e:86:92:50:00:6b:19:e5:d1:fe:91:14:fe:
d9:63:81:0b:12:d2:87:f3:d9:d8:77:0e:3b:15:ba:
f2:9b:28:c2:7b:6f:9a:2c:23:32:bb:c9:f4:76:ae:
96:aa:db:2f:df:cf:c2:30:00:54:b5:1f:d2:ef:04:
b9:35:38:77:9e:c4:39:40:08:d1:13:85:9e:22:70:
1c:aa:90:a3:e2:29:28:5f:38:be:44:e3:fe:08:ca:
eb:83:fd:1e:e0:07:79:d1:3f:54:48:64:aa:0e:e1:
aa:c1:f2:ee:59:06:a8:91:f7:49:af:96:a6:25:7f:
cc:19:7e:aa:25:b2:ff:84:8c:5b:2e:33:44:f9:b9:
33:be:5b:eb:43:63:2c:98:ee:96:0d:84:0a:c4:12:
2c:95:9e:14:09:b1:a0:c6:c3:1b:45:ae:66:f4:18:
9a:a7:28:fc:f7:81:0c:49:42:2a:89:c2:3f:d9:f1:
a9:66:26:c0:8e:49:41:c8:d7:fd:a2:3a:20:4d:a5:
91:f8:5a:92:e8:90:96:91:d2:d5:19:02:1f:17:6b:
3d:4c:98:41:e3:d4:c8:5d:1b:8c:8a:f8:4b:1a:da:
6a:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:57:7F:DD:DE:AF:63:A9:19:F1:93:1A:82:B4:13:56:DE:FD:6D:65
X509v3 Authority Key Identifier:
keyid:49:82:B1:71:9B:4F:EC:70:8B:A6:6B:29:7A:BE:0D:B0:8F:AD:0E:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYKxcZtP7HCLpmsper4NsI-tDh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/d8f145-1e0d-471d-8536-ae6b84c28195/1/SYKxcZtP7HCLpmsper4NsI-tDh4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/d8f145-1e0d-471d-8536-ae6b84c28195/1/SYKxcZtP7HCLpmsper4NsI-tDh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:69:d8:e4:27:d0:da:e0:29:6e:28:2e:fc:de:2f:e2:4d:b8:
eb:64:d8:f6:80:fd:ab:28:6a:71:c1:ff:95:f4:8d:34:65:34:
36:cd:fc:8d:c0:be:8c:a1:7b:5b:a0:2f:1a:1a:24:94:f9:e1:
c3:9a:f5:94:17:09:2e:a7:10:4d:0a:be:1d:df:ac:ab:db:ad:
36:cc:b0:1a:f9:a6:2a:30:7f:98:89:61:b3:59:65:a2:93:ff:
cf:cf:87:62:4e:e6:a7:ff:f8:ef:6e:fa:19:01:f6:31:2a:63:
41:e8:cb:ea:ba:c9:52:8f:f9:ab:47:a2:0b:23:bb:cb:92:65:
46:16:63:4f:9b:95:dd:25:4f:55:33:f4:5a:66:4a:2a:94:65:
b6:3b:23:7e:06:79:46:6e:09:8f:69:9a:39:3d:52:9b:6d:c3:
30:1c:e4:4e:7c:f2:69:2b:03:ca:43:b0:27:0d:ec:22:dd:da:
47:87:6a:7b:30:7e:2d:cd:4f:12:de:68:bc:95:a4:43:9f:c8:
13:f9:59:6f:de:80:5d:a8:41:87:2c:9e:ef:37:c8:e6:0a:4c:
d0:6e:72:52:39:28:c8:6b:8d:90:f5:d3:a5:a3:42:0c:1e:f6:
6c:1e:d1:9a:ac:e3:5e:50:e1:fe:2f:a6:2d:cb:70:d7:4d:f2:
1b:dc:5b:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:40 2025 by rpki-client