Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/543221-f267-4731-a7ad-987173b9e987/1/siDZG06dcPA0-hahaoh9QlV5Kt4.mft
File: siDZG06dcPA0-hahaoh9QlV5Kt4.mft (raw, json)
Hash identifier: FFqvVSrn6agwv11OyQewtgdxwsYlz+v9w0CvJtBdhwY=
Subject key identifier: 04:98:BD:11:83:54:34:0A:E5:DD:B5:7D:BC:E4:2E:2F:07:9A:88:5C
Authority key identifier: B2:20:D9:1B:4E:9D:70:F0:34:FA:16:A1:6A:88:7D:42:55:79:2A:DE
Certificate issuer: /CN=b220d91b4e9d70f034fa16a16a887d4255792ade
Certificate serial: 0194BCE0A46B375E6AE9000DD383ADF3A1BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/siDZG06dcPA0-hahaoh9QlV5Kt4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/543221-f267-4731-a7ad-987173b9e987/1/siDZG06dcPA0-hahaoh9QlV5Kt4.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 15:00:26 +0000
Manifest this update: Fri 31 Jan 2025 15:00:26 +0000
Manifest next update: Sat 01 Feb 2025 15:00:26 +0000
Files and hashes: 1: mCm-KBIMQ6gtgsW9oEUxZqdGcRM.roa (hash: ItOlCehgUekOH/ud/IMp3e9dVCyKMOt54wV1YDUzoCg=)
2: siDZG06dcPA0-hahaoh9QlV5Kt4.crl (hash: HHYkLuS2OAOtlOKKf3DJiaT3xUqr0ArANPDab4CH1cI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:a4:6b:37:5e:6a:e9:00:0d:d3:83:ad:f3:a1:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b220d91b4e9d70f034fa16a16a887d4255792ade
Validity
Not Before: Jan 31 15:00:26 2025 GMT
Not After : Feb 1 15:00:26 2025 GMT
Subject: CN=0498bd118354340ae5ddb57dbce42e2f079a885c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ee:09:b6:4c:6f:a2:48:76:1b:9e:83:66:e5:
92:45:36:7d:22:6b:c4:ea:a5:6f:86:ad:0b:9c:39:
42:7b:13:cf:cd:53:e1:3f:cb:f4:f6:39:0d:5e:e5:
67:7b:33:d0:43:4d:ef:7b:2f:77:c2:0c:f7:f7:3b:
4d:73:fe:80:b3:94:3e:5f:15:52:e6:20:9a:64:d8:
9d:c2:9d:80:38:77:d7:c1:19:7d:41:15:22:a8:92:
27:7c:60:0f:30:51:4d:ae:6c:1e:28:68:57:0a:79:
d3:08:74:71:dd:fc:89:ae:a6:25:24:1f:db:0b:54:
57:55:19:ac:09:27:30:bf:63:df:16:07:62:a3:47:
85:76:39:ca:18:0d:9c:04:61:42:14:de:d8:e6:c9:
3d:57:99:53:c5:e7:b0:cc:02:08:3a:a5:cd:36:8b:
4b:2c:22:4a:fc:79:0d:25:6f:76:b9:1e:11:72:fd:
7d:17:06:17:71:5d:a4:ec:19:d7:cb:be:80:f7:ac:
ee:2a:dc:f7:b1:96:42:5f:ad:fb:11:be:ff:c9:3a:
1b:a4:72:90:28:09:83:25:dc:6a:d2:2b:04:0d:c1:
46:54:4d:ce:97:b3:04:12:38:15:62:bf:f3:b2:26:
1f:ec:06:e7:66:8a:2e:07:21:b6:8f:cb:bb:2b:41:
49:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:98:BD:11:83:54:34:0A:E5:DD:B5:7D:BC:E4:2E:2F:07:9A:88:5C
X509v3 Authority Key Identifier:
keyid:B2:20:D9:1B:4E:9D:70:F0:34:FA:16:A1:6A:88:7D:42:55:79:2A:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/siDZG06dcPA0-hahaoh9QlV5Kt4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/543221-f267-4731-a7ad-987173b9e987/1/siDZG06dcPA0-hahaoh9QlV5Kt4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/543221-f267-4731-a7ad-987173b9e987/1/siDZG06dcPA0-hahaoh9QlV5Kt4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:02:2a:f9:aa:37:7e:9a:c5:cd:52:ba:2e:ac:f8:e4:71:ce:
a0:da:41:3d:8d:36:75:db:36:63:80:8f:12:78:27:ac:e6:d4:
44:a3:70:89:36:e0:36:af:36:4b:f7:ff:a5:3a:e6:6d:5f:07:
41:ee:7e:6e:f2:49:77:5f:1f:c4:8d:99:3c:6b:48:d2:51:ac:
7e:df:c8:03:c7:3b:b7:2e:44:f8:8e:32:44:ad:b6:11:31:fb:
39:7d:fe:4f:f2:42:53:4f:6a:75:af:1f:e2:75:fb:5d:f2:31:
84:9c:76:07:66:c1:79:1d:bf:ee:b0:e7:de:b1:e4:7a:ea:e2:
e2:dc:79:35:91:dd:00:35:c8:42:ef:71:3e:44:91:ee:74:e2:
17:11:b2:5c:25:7b:e5:58:21:b0:18:4c:a5:4c:98:50:7f:9f:
c4:51:31:da:62:25:30:7e:c2:99:f9:60:f7:be:11:62:b1:2e:
67:b1:cd:c1:32:6f:5a:c2:28:01:aa:4d:4d:19:c6:e9:31:36:
8a:60:b4:fe:22:04:d3:bd:12:cb:64:0a:b1:e8:b3:f5:07:a2:
ba:c3:26:36:d1:2e:e1:ea:c0:14:14:bb:64:a2:16:15:76:b8:
0a:cd:34:c5:e8:1e:ef:d7:83:39:ff:29:63:03:c5:6a:28:a2:
7d:78:76:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:40 2025 by rpki-client