Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/95f479-b507-4edb-92f3-e2b58f5e4abb/1/S3tzzZvRdD99P17GvVChk170gB4.mft
File: S3tzzZvRdD99P17GvVChk170gB4.mft (raw, json)
Hash identifier: x6oEpFMU+rTLr9T8zP0eIXQ/CByVJuFo7FXS0Qz1+LI=
Subject key identifier: FB:2A:6A:8E:52:9F:B1:89:9F:79:B9:AF:B1:36:0E:6D:35:DF:D6:A1
Authority key identifier: 4B:7B:73:CD:9B:D1:74:3F:7D:3F:5E:C6:BD:50:A1:93:5E:F4:80:1E
Certificate issuer: /CN=4b7b73cd9bd1743f7d3f5ec6bd50a1935ef4801e
Certificate serial: 0194BD1754A7D213EF2CFDA47404D695792F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S3tzzZvRdD99P17GvVChk170gB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/95f479-b507-4edb-92f3-e2b58f5e4abb/1/S3tzzZvRdD99P17GvVChk170gB4.mft
Manifest number: 13BA
Signing time: Fri 31 Jan 2025 16:00:10 +0000
Manifest this update: Fri 31 Jan 2025 16:00:10 +0000
Manifest next update: Sat 01 Feb 2025 16:00:10 +0000
Files and hashes: 1: M2oh_KntEbzSd5x9NMZSq_CLZnQ.roa (hash: x3vhRRKg/BRlfpWUDclKnemjloDpJmmJOqeSSdSoUa4=)
2: S3tzzZvRdD99P17GvVChk170gB4.crl (hash: pcetBxTGnDKjU2V2RtVTkp0Ek96Wmy1eiDDYMWLXbCg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:54:a7:d2:13:ef:2c:fd:a4:74:04:d6:95:79:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b7b73cd9bd1743f7d3f5ec6bd50a1935ef4801e
Validity
Not Before: Jan 31 16:00:10 2025 GMT
Not After : Feb 1 16:00:10 2025 GMT
Subject: CN=fb2a6a8e529fb1899f79b9afb1360e6d35dfd6a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:35:15:0e:a1:e0:83:84:ef:e6:75:07:32:2f:
56:d6:16:a4:ba:62:3a:98:a1:e6:70:67:ec:8e:83:
a8:0e:a7:bd:09:a5:07:03:9e:a6:64:fa:70:78:34:
ff:1d:34:e8:0b:45:4d:05:a0:fd:d0:57:49:16:44:
ca:8d:e1:6c:ff:0e:ad:68:85:5e:e3:30:ba:8d:68:
ec:d1:69:e2:9a:85:7f:70:00:0c:c5:23:2c:6c:f2:
d4:fd:c5:34:75:62:53:d2:9b:fa:26:b1:82:da:87:
ef:ba:18:a2:d5:c7:64:a4:ae:63:d1:6d:9e:ba:bf:
31:fd:a1:bf:33:f7:b9:20:7f:a8:8d:e9:bc:e8:53:
a0:26:2f:89:35:7a:be:6b:3f:4e:49:9c:29:a4:12:
dc:fb:24:e7:fc:49:6a:db:81:df:a2:d8:d3:6d:f9:
0d:8e:8a:cd:eb:fe:d4:1f:9f:80:ef:a2:d7:a1:7c:
fe:1d:7f:84:4a:b8:ab:c9:36:39:5e:2a:a2:4d:ec:
9a:3b:0f:0b:6d:b7:ea:1e:d1:3a:17:ee:0a:30:e8:
e5:03:6d:44:d4:ba:50:af:44:5e:f4:06:85:bc:1c:
a9:0d:ed:e3:d2:0e:a3:33:93:01:2c:25:52:bd:50:
d3:6e:6d:27:b3:6f:86:f5:6f:db:c2:e7:1a:ad:7a:
7a:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:2A:6A:8E:52:9F:B1:89:9F:79:B9:AF:B1:36:0E:6D:35:DF:D6:A1
X509v3 Authority Key Identifier:
keyid:4B:7B:73:CD:9B:D1:74:3F:7D:3F:5E:C6:BD:50:A1:93:5E:F4:80:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S3tzzZvRdD99P17GvVChk170gB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/95f479-b507-4edb-92f3-e2b58f5e4abb/1/S3tzzZvRdD99P17GvVChk170gB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/95f479-b507-4edb-92f3-e2b58f5e4abb/1/S3tzzZvRdD99P17GvVChk170gB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:03:6d:ce:29:6d:a3:c1:5e:42:95:bb:47:3e:7c:c9:61:8a:
50:22:88:e7:74:be:90:f2:19:86:a9:d7:de:dd:f4:49:49:71:
49:33:de:c0:4b:fa:8e:9e:28:a7:6a:66:ec:0b:d2:d8:c9:59:
8c:49:1b:98:e1:0d:0b:33:3a:8c:42:cc:3c:d2:41:a1:da:dc:
ba:60:1b:c4:a9:a9:22:0d:d0:9b:b4:ac:9d:c1:b9:4f:d0:94:
7c:80:4a:eb:9a:31:58:07:13:6c:c3:c3:49:0e:00:84:b3:7a:
7b:64:b6:0a:41:9b:98:ba:05:5f:cb:fd:cc:dd:79:b4:60:a0:
30:eb:64:f0:d3:b2:d7:e5:a1:8a:36:0c:c6:13:99:eb:71:52:
47:03:14:6d:74:fa:a1:93:ac:27:47:b8:5f:be:5b:68:b1:d4:
57:46:11:f5:f5:ba:36:fa:e5:f8:ae:da:20:f8:38:21:4f:ed:
93:a4:fd:d9:0d:2f:08:32:d7:7b:7b:09:41:26:c3:03:50:58:
05:fa:14:cd:1e:11:80:3f:4f:86:3b:6a:41:03:e6:79:0d:29:
31:45:f5:53:98:5f:b4:42:03:3f:f9:f6:1c:45:66:d1:2c:e0:
3e:da:63:f2:9d:1c:81:5d:c6:bc:01:7e:14:1f:df:31:ec:fc:
d3:d6:e5:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:28:56 2025 by rpki-client