Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/b4aa63-4259-44e6-ac29-4fa53bf0e155/1/sNYtFmbFxNGSGDUxWEr9cr7QhIU.mft
File: sNYtFmbFxNGSGDUxWEr9cr7QhIU.mft (raw, json)
Hash identifier: 9ifJMYqc4O7BZfaLs8w+ZvDMSjlCYpYJS03HYDZnoew=
Subject key identifier: 24:F9:D9:AF:F1:38:0D:F5:C9:56:C8:E3:57:8C:E8:F3:CB:C2:6E:57
Authority key identifier: B0:D6:2D:16:66:C5:C4:D1:92:18:35:31:58:4A:FD:72:BE:D0:84:85
Certificate issuer: /CN=b0d62d1666c5c4d192183531584afd72bed08485
Certificate serial: 0194BC3BF5BB55C8484AD0C6E237DE24A9E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sNYtFmbFxNGSGDUxWEr9cr7QhIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/b4aa63-4259-44e6-ac29-4fa53bf0e155/1/sNYtFmbFxNGSGDUxWEr9cr7QhIU.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 12:00:33 +0000
Manifest this update: Fri 31 Jan 2025 12:00:33 +0000
Manifest next update: Sat 01 Feb 2025 12:00:33 +0000
Files and hashes: 1: QXyQtT8qy7cZkdePrzNkoMkFsLI.roa (hash: p4NnT1oNWa0lNXGn9ql046BScEcNjINqPaeSDpvSus0=)
2: sNYtFmbFxNGSGDUxWEr9cr7QhIU.crl (hash: C1zgJ8H+wEBJcu3LwlH9OzQr9S6XwO1Ne7nNs5dY4rM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:f5:bb:55:c8:48:4a:d0:c6:e2:37:de:24:a9:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0d62d1666c5c4d192183531584afd72bed08485
Validity
Not Before: Jan 31 12:00:33 2025 GMT
Not After : Feb 1 12:00:33 2025 GMT
Subject: CN=24f9d9aff1380df5c956c8e3578ce8f3cbc26e57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:16:02:e9:48:bf:5f:c4:9c:86:3d:eb:0e:77:
be:20:92:a2:36:46:35:b5:37:3e:9a:1c:15:31:34:
25:1c:c0:17:4a:90:5a:a2:2e:1a:c0:2b:a7:45:cb:
a0:ce:51:2d:d2:ce:e6:61:31:d0:60:13:d8:46:7d:
81:85:20:9d:a4:55:2c:65:01:da:f4:93:19:b5:97:
ba:9a:d8:62:5d:22:f4:a2:16:25:ef:f2:34:ee:3a:
84:af:f7:fb:b6:13:40:3e:5b:cc:33:70:93:05:32:
0f:e7:a0:1c:a6:ea:af:5f:7a:43:b8:28:61:91:b5:
6a:fa:1d:b2:36:a2:94:40:33:00:93:3e:95:61:04:
54:36:a6:f7:a3:c3:f5:a0:11:50:6c:0b:d7:a6:f8:
68:a6:cd:ca:9a:1a:a3:7c:76:35:5d:51:3f:dd:b4:
62:f5:c5:62:ca:d6:29:6f:d3:15:19:22:f3:62:41:
6f:92:92:94:56:68:d5:aa:cf:37:32:49:35:98:0f:
20:31:e2:2d:56:c6:9b:07:56:32:1f:f4:fd:b4:04:
73:13:a7:80:1e:47:3d:ed:d0:96:7e:f3:62:fc:7e:
56:1e:de:de:d4:aa:7b:a1:36:9a:6f:12:da:fc:5a:
b2:f4:13:99:0a:a5:d0:f7:74:4b:32:d5:b0:c8:0f:
40:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:F9:D9:AF:F1:38:0D:F5:C9:56:C8:E3:57:8C:E8:F3:CB:C2:6E:57
X509v3 Authority Key Identifier:
keyid:B0:D6:2D:16:66:C5:C4:D1:92:18:35:31:58:4A:FD:72:BE:D0:84:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sNYtFmbFxNGSGDUxWEr9cr7QhIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b4aa63-4259-44e6-ac29-4fa53bf0e155/1/sNYtFmbFxNGSGDUxWEr9cr7QhIU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b4aa63-4259-44e6-ac29-4fa53bf0e155/1/sNYtFmbFxNGSGDUxWEr9cr7QhIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:2d:ff:9d:88:3c:30:e8:e9:50:28:e5:9c:e7:7e:26:3a:da:
4c:86:ba:5e:03:5b:23:cc:9b:20:3d:84:d8:61:97:38:12:20:
00:13:f5:90:f8:6c:ee:d3:dc:1c:38:aa:94:8f:8c:c3:c6:3e:
8b:f4:11:cb:8a:d1:61:d3:33:ef:3f:fe:d6:53:67:b3:62:72:
b9:2f:3f:0b:13:76:17:82:82:42:0e:b5:ff:cf:61:ab:1d:5d:
6f:21:fc:8f:7c:d1:44:f3:32:a8:8c:ad:a0:c1:83:a8:09:e6:
ce:6c:ad:d8:bd:62:f0:be:1c:01:d7:a0:12:29:e8:92:31:f1:
53:e6:c8:22:65:ea:fd:6d:be:4e:0f:07:27:8e:a2:dd:86:b0:
b3:49:ea:36:76:2b:74:38:84:e3:32:67:8c:10:37:bb:f4:4d:
bf:04:cf:06:3a:d6:6e:f9:67:a9:44:e9:b6:32:9c:eb:5a:71:
f9:26:ef:c9:9a:68:8d:21:a9:df:fc:d8:58:c9:a1:b0:a6:c6:
b1:bf:a9:0d:4e:63:09:9d:c5:81:4c:dd:17:bb:9a:68:d0:42:
6c:5a:c0:7b:8e:ec:14:35:53:5b:83:94:df:21:47:da:ea:d8:
ce:cc:6a:07:2f:21:58:02:4e:ac:f5:b8:d5:1d:ba:8b:e7:49:
fd:18:16:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:41:34 2025 by rpki-client