Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/178ffd-a99c-4333-8e9b-ca35469553cf/1/sIRyULOncSfffDx7je-MnZGdxLk.mft
File: sIRyULOncSfffDx7je-MnZGdxLk.mft (raw, json)
Hash identifier: QRAvSgVu5eOdHrXnevzkcJrCCuwUNIy+b4fcE079cGU=
Subject key identifier: FE:52:8D:9E:2B:AE:B2:87:68:56:AD:C5:C7:D5:17:1E:15:D4:A3:A5
Authority key identifier: B0:84:72:50:B3:A7:71:27:DF:7C:3C:7B:8D:EF:8C:9D:91:9D:C4:B9
Certificate issuer: /CN=b0847250b3a77127df7c3c7b8def8c9d919dc4b9
Certificate serial: 0194BCE0A1BF1A2272E4DA674C58898B1FCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sIRyULOncSfffDx7je-MnZGdxLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/178ffd-a99c-4333-8e9b-ca35469553cf/1/sIRyULOncSfffDx7je-MnZGdxLk.mft
Manifest number: 068E
Signing time: Fri 31 Jan 2025 15:00:25 +0000
Manifest this update: Fri 31 Jan 2025 15:00:25 +0000
Manifest next update: Sat 01 Feb 2025 15:00:25 +0000
Files and hashes: 1: BEVOt5Hu7SlSOUV5TBn_pg8-Bq4.roa (hash: nEzdIf15rxzhFQC8rcsKrtOrx8pALRaykpAEEi2uLpo=)
2: sIRyULOncSfffDx7je-MnZGdxLk.crl (hash: FBv72Nj8SDv+l5+u6VabvAp9eTFz5SscoBxmSyLrZGk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:a1:bf:1a:22:72:e4:da:67:4c:58:89:8b:1f:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0847250b3a77127df7c3c7b8def8c9d919dc4b9
Validity
Not Before: Jan 31 15:00:25 2025 GMT
Not After : Feb 1 15:00:25 2025 GMT
Subject: CN=fe528d9e2baeb2876856adc5c7d5171e15d4a3a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:28:f0:c4:75:e5:95:94:60:47:f7:e0:18:5a:
d2:b8:90:5b:57:ad:70:e4:ec:66:0e:3e:90:5e:b4:
6a:dc:73:15:37:5d:da:c8:91:d6:c3:38:a9:a4:40:
00:36:f5:d4:27:84:5c:b0:1b:1a:39:8c:98:e6:0c:
ee:1f:ec:59:fb:8f:c7:f6:70:f0:41:01:c8:01:33:
b7:72:10:bf:f0:cf:6f:8b:1e:fa:37:20:8c:41:16:
32:26:d2:69:3f:d5:56:73:ef:2c:f8:22:2a:7c:d6:
3d:11:f3:21:9a:a7:90:83:9d:7c:cf:4c:71:2f:2e:
10:47:33:54:90:10:48:17:5c:64:a2:f4:6c:26:a2:
1e:ee:a4:01:19:b1:b6:29:e9:e2:24:36:22:34:ac:
85:9f:d5:46:84:a3:45:fd:56:fe:03:11:a1:d0:6c:
5e:98:a0:0d:05:dd:18:14:a5:f1:0e:4a:cc:b3:b6:
8a:f8:01:bd:22:9e:6f:7e:41:ea:7b:fa:7f:1c:09:
16:ed:b0:8d:8e:57:87:c4:b7:98:7e:a0:79:08:c8:
fb:aa:02:1d:db:e4:c3:20:01:77:10:d3:83:35:1e:
a3:2a:55:fb:6a:de:04:47:07:bc:30:66:d2:6d:5d:
5f:de:17:bb:75:2a:0b:1a:10:93:0f:4a:40:f1:73:
ba:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:52:8D:9E:2B:AE:B2:87:68:56:AD:C5:C7:D5:17:1E:15:D4:A3:A5
X509v3 Authority Key Identifier:
keyid:B0:84:72:50:B3:A7:71:27:DF:7C:3C:7B:8D:EF:8C:9D:91:9D:C4:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sIRyULOncSfffDx7je-MnZGdxLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/178ffd-a99c-4333-8e9b-ca35469553cf/1/sIRyULOncSfffDx7je-MnZGdxLk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/178ffd-a99c-4333-8e9b-ca35469553cf/1/sIRyULOncSfffDx7je-MnZGdxLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:79:2d:39:c2:c5:8e:ac:14:e7:97:07:93:e7:9b:11:5a:6f:
5c:55:ca:ff:63:92:fe:e6:cc:c0:0f:4f:c6:b5:39:48:25:62:
07:55:45:7d:9f:22:d3:20:15:d7:ca:78:af:da:a3:b6:9b:5b:
68:6d:e7:1c:72:de:bd:f0:dc:65:62:20:9f:03:08:3f:c7:07:
8a:dd:87:87:da:2e:88:1c:99:f5:ed:cf:da:e5:c0:c7:b9:e3:
9a:11:1f:fc:a5:7b:73:47:f3:d9:a2:62:61:ae:1c:a4:de:70:
87:08:0d:14:4a:a8:3b:63:07:b2:c3:d8:46:86:7e:0c:0a:df:
4b:95:4c:b4:c9:59:f8:49:28:b0:e4:53:f0:00:bd:f5:36:a3:
bc:18:e5:25:9d:79:7e:0d:90:b3:2e:c6:ee:cb:e2:a9:40:55:
d0:ec:9d:93:c3:fc:af:48:f7:b5:6d:51:cd:b2:8d:06:8f:a8:
45:2a:39:db:c1:c4:66:87:32:f6:bf:86:51:36:ab:39:1b:03:
46:d6:af:d2:bc:2a:00:2d:0e:ec:2a:1e:87:2c:bf:13:84:6a:
4c:cf:f2:d2:c5:b8:13:63:51:da:6e:27:91:82:13:d9:70:e9:
d7:ca:89:8d:20:32:1d:87:20:65:2e:12:88:c1:26:6a:3a:c2:
b4:7b:15:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:56:43 2025 by rpki-client