Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/367748-885c-4621-b44c-1195fe050de1/1/S-kZqE4aIp94nZOdGqpxKk08OZ0.mft
File: S-kZqE4aIp94nZOdGqpxKk08OZ0.mft (raw, json)
Hash identifier: RiTvGZdEmi2iIVUGObfq83fCO0ng992BoY/7ZjTy5g0=
Subject key identifier: 80:CA:63:72:B2:5C:19:1F:AC:2A:B1:25:85:C1:8F:68:AE:65:67:E3
Authority key identifier: 4B:E9:19:A8:4E:1A:22:9F:78:9D:93:9D:1A:AA:71:2A:4D:3C:39:9D
Certificate issuer: /CN=4be919a84e1a229f789d939d1aaa712a4d3c399d
Certificate serial: 0194BD857DFAD0C7D721B1C3ACB8EA93499F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S-kZqE4aIp94nZOdGqpxKk08OZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/367748-885c-4621-b44c-1195fe050de1/1/S-kZqE4aIp94nZOdGqpxKk08OZ0.mft
Manifest number: 0289
Signing time: Fri 31 Jan 2025 18:00:29 +0000
Manifest this update: Fri 31 Jan 2025 18:00:29 +0000
Manifest next update: Sat 01 Feb 2025 18:00:29 +0000
Files and hashes: 1: FE9TisHKbwT-TG7WXc-HdjPStqc.roa (hash: pRwsqMoq8wG5C6fvp0aFlXXk9XmPop41EHqaLEOgfSc=)
2: S-kZqE4aIp94nZOdGqpxKk08OZ0.crl (hash: fYiffDLq+0Y3GSaqY3i4fgwoHuY+2xLtCQOHO0G+gJE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:7d:fa:d0:c7:d7:21:b1:c3:ac:b8:ea:93:49:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4be919a84e1a229f789d939d1aaa712a4d3c399d
Validity
Not Before: Jan 31 18:00:29 2025 GMT
Not After : Feb 1 18:00:29 2025 GMT
Subject: CN=80ca6372b25c191fac2ab12585c18f68ae6567e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:9a:3b:42:40:a4:3c:d3:c0:dc:de:67:7a:91:
c7:39:21:00:35:12:ff:ea:9b:49:3f:d0:4d:99:14:
40:bd:91:97:b6:bf:b7:26:e2:43:a8:7e:06:d6:00:
27:72:87:fe:a9:d7:71:26:a3:ff:3f:08:93:39:7f:
91:42:3d:cd:1f:dd:de:1c:05:03:88:a0:c4:ca:2d:
70:64:5e:f2:e1:1f:1d:a1:0d:3a:c4:bc:22:4e:5e:
80:99:7b:c6:19:7e:51:b4:31:33:09:0c:52:88:0a:
38:17:2f:1d:21:8f:5b:ce:55:e1:69:0d:c1:ff:f6:
76:ba:2b:12:1a:73:b2:e7:68:64:ae:bb:f0:a2:21:
f4:cd:b3:49:14:05:49:04:80:a6:4d:ef:92:e7:be:
12:af:a1:d5:25:0d:7c:a2:a9:d6:09:c6:d3:36:25:
d9:00:7c:9b:33:6b:49:3f:b8:f9:bb:9d:92:38:29:
79:ab:7b:e0:91:c1:bf:ea:e6:8f:8e:cf:fc:bd:e5:
c9:f9:41:a3:3e:f3:f9:00:17:e4:17:f8:81:7c:fb:
f7:7c:cd:18:dc:11:f6:a4:43:70:e1:0f:fb:26:f2:
04:d4:bf:12:dd:8d:a0:a5:c1:18:3b:1e:d5:0a:ef:
aa:6e:4d:2a:fa:30:bd:9b:26:21:de:ec:b3:1a:c1:
d0:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:CA:63:72:B2:5C:19:1F:AC:2A:B1:25:85:C1:8F:68:AE:65:67:E3
X509v3 Authority Key Identifier:
keyid:4B:E9:19:A8:4E:1A:22:9F:78:9D:93:9D:1A:AA:71:2A:4D:3C:39:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-kZqE4aIp94nZOdGqpxKk08OZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/367748-885c-4621-b44c-1195fe050de1/1/S-kZqE4aIp94nZOdGqpxKk08OZ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/367748-885c-4621-b44c-1195fe050de1/1/S-kZqE4aIp94nZOdGqpxKk08OZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:e2:47:60:51:7e:81:0e:ba:38:03:b9:2d:1a:d9:e5:aa:59:
a0:c1:58:c0:b5:a9:a4:e3:93:b0:e6:df:8b:b5:9b:9a:02:28:
df:25:88:e4:b3:fe:ed:54:46:b8:60:e4:e9:9c:49:84:f4:f9:
5a:58:54:e3:8b:dc:4f:f0:95:1d:d3:dc:16:ec:d2:47:bb:c1:
7f:f2:21:b0:02:7a:6a:3a:b6:43:38:80:e3:71:7e:62:8e:1b:
72:d8:51:4d:ef:90:c1:d9:00:27:4c:97:53:1e:25:7c:27:d8:
71:4a:25:5a:e4:fb:03:3f:1c:be:bc:31:76:a3:2e:0d:3f:2d:
06:4d:a2:5c:d1:86:86:1b:dd:db:07:f4:96:01:89:01:46:45:
f5:a8:6d:9b:1e:c6:8f:36:1a:a9:c7:8a:f4:3a:9d:ad:33:e7:
1e:1f:94:73:ed:f5:10:cd:b5:13:c2:4b:35:d0:98:74:7a:86:
28:f7:8e:8a:80:ca:56:6f:64:a0:41:54:cc:ad:15:35:7a:38:
8b:88:46:08:8b:4e:b5:02:3a:46:4a:fd:4e:ce:f1:8c:13:c7:
00:50:2b:3d:e7:90:a0:4c:41:6f:80:fb:92:a0:25:9e:18:52:
ca:55:71:2c:76:13:15:46:cc:bf:d5:83:91:02:98:d8:5e:71:
3d:3f:f5:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:35:25 2025 by rpki-client