Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/e005c2-affa-458f-aaf8-8af56e733600/1/S1dyWwpgXU3cxGS3Dcs6FipfBVs.mft
File: S1dyWwpgXU3cxGS3Dcs6FipfBVs.mft (raw, json)
Hash identifier: yiLpF8Yg7wWtUCz09Yc4cUn/FRVogFsqbYhqckJYpiQ=
Subject key identifier: EA:39:0F:68:F3:28:11:6D:0D:66:17:89:B9:73:B9:12:85:07:F0:F4
Authority key identifier: 4B:57:72:5B:0A:60:5D:4D:DC:C4:64:B7:0D:CB:3A:16:2A:5F:05:5B
Certificate issuer: /CN=4b57725b0a605d4ddcc464b70dcb3a162a5f055b
Certificate serial: 0194BC3C71B49748FF49B108EADE29AB9962
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S1dyWwpgXU3cxGS3Dcs6FipfBVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/e005c2-affa-458f-aaf8-8af56e733600/1/S1dyWwpgXU3cxGS3Dcs6FipfBVs.mft
Manifest number: 1436
Signing time: Fri 31 Jan 2025 12:01:05 +0000
Manifest this update: Fri 31 Jan 2025 12:01:05 +0000
Manifest next update: Sat 01 Feb 2025 12:01:05 +0000
Files and hashes: 1: IMyen03Z3kYW501dGBJKRvVCnYU.roa (hash: iucT9aE10m3DuQgfsaO8fZMDF0JO/83+1ytDh6dNspg=)
2: S1dyWwpgXU3cxGS3Dcs6FipfBVs.crl (hash: FKyVNhbYi+IdzQFSYcbFJyrYlbLL7rsUwmb9qGAwj5k=)
3: _70B8nLCrCvW6ACV30Y-ItPOrFA.roa (hash: cBDWH8z972r2xnPCEsRs0ukVbID+nL6L8yt1uckQ37s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:71:b4:97:48:ff:49:b1:08:ea:de:29:ab:99:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b57725b0a605d4ddcc464b70dcb3a162a5f055b
Validity
Not Before: Jan 31 12:01:05 2025 GMT
Not After : Feb 1 12:01:05 2025 GMT
Subject: CN=ea390f68f328116d0d661789b973b9128507f0f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c4:7b:63:88:e1:4f:ef:a6:3d:90:c5:4c:26:
ca:ff:67:8b:02:b1:72:e9:b6:a2:c2:a9:41:56:c8:
de:fe:d2:01:94:52:66:13:6f:2d:81:95:ef:0f:72:
ad:cc:44:59:d0:cb:da:09:a7:ab:c1:23:9e:58:9e:
c4:a8:e0:dc:d4:19:91:44:d6:59:4a:aa:23:1e:26:
a4:1e:59:0c:32:d6:13:be:50:0b:4f:ab:4c:b0:e2:
b2:79:49:5b:a0:de:02:8f:85:74:82:bc:6e:2a:5e:
38:e4:74:f2:d4:20:9f:30:0e:99:9b:0f:ef:ac:59:
fb:9f:7a:4a:1e:7e:e3:09:c2:35:b2:87:25:0b:4c:
46:05:f5:cd:48:16:5c:9d:58:5f:7f:99:10:36:5a:
6a:b9:96:6a:c6:cc:e0:12:b9:bd:f5:6c:11:14:11:
cc:d5:ae:39:68:46:4a:b8:8d:f2:0c:96:d1:5e:47:
fd:72:52:f3:a4:e8:9b:a4:f7:15:38:d1:1c:40:12:
1c:f2:c5:72:e1:6e:c6:95:f6:75:15:39:21:9d:9a:
d7:5c:aa:44:f7:0a:ed:26:89:f3:85:b3:a8:49:fd:
9f:34:20:e4:b6:0e:f0:68:36:fa:9d:a4:a8:d4:49:
69:9b:94:73:18:81:c2:85:91:4a:21:cf:73:3c:12:
0f:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:39:0F:68:F3:28:11:6D:0D:66:17:89:B9:73:B9:12:85:07:F0:F4
X509v3 Authority Key Identifier:
keyid:4B:57:72:5B:0A:60:5D:4D:DC:C4:64:B7:0D:CB:3A:16:2A:5F:05:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S1dyWwpgXU3cxGS3Dcs6FipfBVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/e005c2-affa-458f-aaf8-8af56e733600/1/S1dyWwpgXU3cxGS3Dcs6FipfBVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/e005c2-affa-458f-aaf8-8af56e733600/1/S1dyWwpgXU3cxGS3Dcs6FipfBVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:24:75:18:d5:86:89:5b:a7:45:74:1e:b0:38:d4:ba:66:2f:
1e:5e:5c:f6:eb:36:25:a2:e4:b9:6b:e6:d7:64:c3:4c:6f:7e:
af:4c:3a:76:b0:ad:24:b8:c7:89:3c:17:15:d9:09:c9:d5:e9:
09:8b:ee:3f:73:bf:6f:90:de:4c:35:91:da:4f:1a:e8:e7:50:
95:de:06:da:89:3e:1c:6d:92:7d:23:79:d7:f6:3e:ba:74:8a:
40:0f:55:35:7f:38:6f:64:39:0c:f0:2c:7f:9e:11:81:fb:36:
32:bf:1c:9c:61:a0:ba:a9:00:d5:bf:ea:73:ec:bb:35:07:99:
34:d2:a1:63:28:51:2f:a7:47:c7:b4:ee:09:d5:42:9c:cb:9d:
34:a7:e1:fa:6f:9d:33:86:98:27:59:fc:5a:94:07:cc:de:f3:
ef:14:8c:c1:75:a9:e2:52:91:87:15:5c:73:d1:e7:74:c0:f0:
d4:07:4d:a1:f7:fa:a3:74:3c:3f:de:11:b7:76:00:ff:3c:7d:
62:3a:be:13:9f:e4:b5:b8:63:ac:95:49:44:70:21:17:dc:1d:
25:67:cf:83:8d:bb:f7:9b:54:5e:94:56:b2:01:db:21:65:f8:
89:24:68:33:98:7d:64:85:0d:ee:18:87:82:16:5b:96:d6:74:
c1:13:35:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:14 2025 by rpki-client