Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/a5d00d-6266-46ea-bc8c-4182bedb98a1/1/SdhmPTuWngJTom1UJb7hxdRDs2E.mft
File: SdhmPTuWngJTom1UJb7hxdRDs2E.mft (raw, json)
Hash identifier: qg7oKHi7bqAjezT8LeUKvCFsrRvV4uymZlnTxY+MyNY=
Subject key identifier: 72:BF:26:89:89:69:A3:21:A6:85:81:34:95:45:55:DA:DA:2A:DE:C3
Authority key identifier: 49:D8:66:3D:3B:96:9E:02:53:A2:6D:54:25:BE:E1:C5:D4:43:B3:61
Certificate issuer: /CN=49d8663d3b969e0253a26d5425bee1c5d443b361
Certificate serial: 0194BD85ABF4AAA32743A9BB3E588D1E92D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SdhmPTuWngJTom1UJb7hxdRDs2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/a5d00d-6266-46ea-bc8c-4182bedb98a1/1/SdhmPTuWngJTom1UJb7hxdRDs2E.mft
Manifest number: 0589
Signing time: Fri 31 Jan 2025 18:00:41 +0000
Manifest this update: Fri 31 Jan 2025 18:00:41 +0000
Manifest next update: Sat 01 Feb 2025 18:00:41 +0000
Files and hashes: 1: 1-Sq9N9tDpqPpCxfnJu3FOlWH6ZA.roa (hash: Tpyvvdu3VZJ5oo8JL4qWFUonGAY9eL3r/UHvnFRq5cY=)
2: SdhmPTuWngJTom1UJb7hxdRDs2E.crl (hash: kI5RAdL6LP//xjmxQ4GFfHomuS0okl5yFtBtBFsDoZ8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:ab:f4:aa:a3:27:43:a9:bb:3e:58:8d:1e:92:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49d8663d3b969e0253a26d5425bee1c5d443b361
Validity
Not Before: Jan 31 18:00:41 2025 GMT
Not After : Feb 1 18:00:41 2025 GMT
Subject: CN=72bf26898969a321a6858134954555dada2adec3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:50:1a:bc:24:92:16:27:e3:cb:04:9a:39:a1:
40:17:9e:7f:22:c7:35:f7:4d:01:dc:5d:5c:aa:78:
f6:a1:74:1c:c3:0e:3b:5c:bb:05:97:2b:ec:b5:74:
13:bd:3f:dd:96:e7:21:26:ee:d4:bf:2d:b3:63:d2:
c5:88:4f:69:9c:7d:c9:9e:ba:31:52:6f:ec:fa:f3:
ad:59:c1:96:67:2e:14:3f:21:74:2d:d9:9e:30:5e:
06:ed:54:12:9a:1d:a3:a4:62:00:82:eb:bd:36:b0:
5f:5c:35:7a:c3:01:aa:de:85:4d:71:55:37:a0:ce:
4d:b7:ae:d3:b1:78:93:a6:ec:7b:8b:f0:c0:7c:34:
82:e5:6d:a9:5f:4b:68:b8:bc:64:3e:f5:c9:b7:15:
49:7a:2e:26:2d:5d:ec:e2:04:4f:0a:98:9c:62:62:
b2:ff:5c:c0:65:c2:2b:bb:1a:3e:d4:88:39:c2:f5:
fd:cb:a8:38:86:9c:42:ea:2e:39:c0:91:ac:af:31:
f5:f6:ea:78:c3:02:f1:ff:b8:15:2d:df:74:1f:66:
84:4a:bb:fd:9d:db:29:12:06:3e:2f:cb:5d:00:8b:
31:c7:55:ef:72:bc:56:4b:e4:76:09:cf:38:a6:60:
54:4e:80:56:b9:40:e8:3c:99:af:50:eb:d4:1d:19:
a1:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:BF:26:89:89:69:A3:21:A6:85:81:34:95:45:55:DA:DA:2A:DE:C3
X509v3 Authority Key Identifier:
keyid:49:D8:66:3D:3B:96:9E:02:53:A2:6D:54:25:BE:E1:C5:D4:43:B3:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SdhmPTuWngJTom1UJb7hxdRDs2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a5d00d-6266-46ea-bc8c-4182bedb98a1/1/SdhmPTuWngJTom1UJb7hxdRDs2E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a5d00d-6266-46ea-bc8c-4182bedb98a1/1/SdhmPTuWngJTom1UJb7hxdRDs2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:b4:7e:89:dc:e7:29:0b:83:9c:f1:cf:17:68:74:74:b8:71:
f3:0a:48:21:bd:8b:b4:7d:01:f3:8d:e2:2f:f5:56:a4:d8:fa:
39:00:70:60:7b:d8:77:5d:e5:91:2f:ea:ff:ec:e3:8f:d7:6f:
b3:5f:cf:ac:cf:b8:9b:eb:5b:23:33:f6:44:12:c8:65:a9:de:
64:7d:24:a0:a5:04:6a:cb:3b:fe:7b:c7:09:de:8e:80:97:a2:
a9:a9:c1:0b:0a:ce:2c:7a:19:e7:45:59:1b:fc:94:03:48:04:
0d:81:2c:e1:5e:73:f7:25:f5:10:7f:3f:59:9a:6b:a9:01:a8:
25:a5:33:ad:81:51:73:cc:80:ab:e8:b0:64:47:66:6a:e1:e5:
b8:be:3b:bc:03:39:56:9d:77:d1:d9:5e:63:36:f7:a9:56:a0:
f7:30:7d:4f:02:6c:41:a1:71:b5:44:a8:69:5a:76:e8:09:22:
5e:50:9f:0a:13:38:3e:78:b3:50:15:1e:96:a7:02:1b:ab:24:
91:1b:b4:60:01:f0:b3:c3:d9:14:d8:c6:c7:40:2b:61:60:72:
ee:7c:5c:6b:7b:fd:5c:53:db:e0:dd:e6:e6:fe:2d:8f:27:f2:
28:e9:c1:df:4e:db:a6:ee:1a:a5:e3:3f:f1:bc:03:11:25:45:
78:d4:3a:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:42 2025 by rpki-client