Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/2c17cb-4742-44cf-891f-7bf8277d8a2f/1/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.mft
File: Ss-shkWjxvEAQtxKdNcA2dBq8Xo.mft (raw, json)
Hash identifier: l0KZs6M6e7pQNI1At7r5o5kAq4wxVTs3OIuJChrLKxc=
Subject key identifier: 72:5E:D9:61:03:74:F9:86:AA:A6:E8:A6:59:36:57:E2:7D:6F:CA:8E
Authority key identifier: 4A:CF:AC:86:45:A3:C6:F1:00:42:DC:4A:74:D7:00:D9:D0:6A:F1:7A
Certificate issuer: /CN=4acfac8645a3c6f10042dc4a74d700d9d06af17a
Certificate serial: 0194BCA9EB27DCA3F5C2278E6A94C46C02A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/2c17cb-4742-44cf-891f-7bf8277d8a2f/1/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.mft
Manifest number: 10E2
Signing time: Fri 31 Jan 2025 14:00:39 +0000
Manifest this update: Fri 31 Jan 2025 14:00:39 +0000
Manifest next update: Sat 01 Feb 2025 14:00:39 +0000
Files and hashes: 1: M9VOPO1QfWRnU4hQ9QVXASg96jA.roa (hash: irJVQjaxHBdQQuBZR03utwnIZQAJVfzNYFhhJleKRbg=)
2: MZ_QBnViUEyC8ZRFkedX8Rv5Crs.roa (hash: XyD021GY+KiQ98JM0NY1iLl+QMVF+YOoCbUCeu964IY=)
3: Ss-shkWjxvEAQtxKdNcA2dBq8Xo.crl (hash: FLigEu9IiBWgbvKWyG5+YwBbtz5gY0CUBMfkjL1HChc=)
4: inYhmF6eIH31cCbSimSwHmklnkM.roa (hash: Z7JVezrkgt/wUelYsw9uGal8TdsJiFhrzbB2ZBBaAzE=)
5: mALA8L4iJT5CSBNm8v2jM7QlNQk.roa (hash: LfkLTnIjxIpRQYovwUWnufcj8EatDY/L/sjorpiLMV4=)
6: og5qYEWen63bomOC6zKV2-iRJG8.roa (hash: PKfcuKBaAgdkTGnezARQJkmyOyp3oz6QpSYP3CmFp+c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:eb:27:dc:a3:f5:c2:27:8e:6a:94:c4:6c:02:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4acfac8645a3c6f10042dc4a74d700d9d06af17a
Validity
Not Before: Jan 31 14:00:39 2025 GMT
Not After : Feb 1 14:00:39 2025 GMT
Subject: CN=725ed9610374f986aaa6e8a6593657e27d6fca8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:d2:f7:26:58:f8:f3:cb:2f:af:e2:b4:2e:d2:
84:73:30:f1:a3:98:6d:44:7c:5b:58:31:4c:3f:5d:
55:9b:a2:96:28:e7:f7:83:0f:a6:d7:8e:4e:ea:73:
c2:d8:df:65:96:a8:a9:9b:b3:52:72:58:7d:45:3c:
c7:98:a7:6b:f7:6f:cd:fb:12:ab:ae:ab:dc:17:cf:
ce:41:b9:9c:fd:17:ed:72:b6:ad:e7:a6:4f:94:c0:
d7:d2:d6:fa:af:b8:87:72:09:5a:e2:ba:c9:37:55:
e8:ba:ce:6d:05:96:ca:27:78:88:eb:a1:fe:14:98:
fd:ee:eb:aa:02:3e:b9:76:56:b8:2f:ff:1b:83:0f:
8b:b9:2f:47:47:18:33:7a:48:37:70:7b:84:81:c0:
26:bf:ae:38:53:77:29:93:06:93:96:48:a1:cd:ce:
52:ea:c8:d9:26:2d:a1:8c:e6:a1:9f:34:32:07:c1:
41:2b:f2:c9:8a:89:1e:a6:c6:0d:f0:59:46:20:36:
5b:51:16:d4:19:b8:8d:41:a7:09:f4:6d:72:67:c6:
79:46:be:62:41:60:f0:a1:1a:33:2b:34:1a:d8:ca:
c2:8a:cf:36:24:52:aa:5e:31:34:36:c4:1e:6b:ca:
fa:24:9b:78:3e:54:a5:eb:7e:68:3b:ca:53:b1:73:
7c:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:5E:D9:61:03:74:F9:86:AA:A6:E8:A6:59:36:57:E2:7D:6F:CA:8E
X509v3 Authority Key Identifier:
keyid:4A:CF:AC:86:45:A3:C6:F1:00:42:DC:4A:74:D7:00:D9:D0:6A:F1:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/2c17cb-4742-44cf-891f-7bf8277d8a2f/1/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/2c17cb-4742-44cf-891f-7bf8277d8a2f/1/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:26:db:9d:d5:6a:05:c5:da:21:f2:df:ce:8f:82:17:5b:02:
c8:91:93:66:84:33:b8:43:d1:b3:73:e1:c0:b1:ec:27:a5:78:
fe:fb:1e:7c:0c:68:45:3d:2e:3d:a5:88:31:ef:80:46:c3:6f:
5a:a2:e9:01:02:9b:78:0c:b5:89:48:25:38:0f:80:3c:b0:39:
75:5c:16:c3:4e:ff:ef:6b:98:01:23:74:63:25:cb:13:2c:24:
36:02:04:49:06:aa:d7:71:7a:5b:0a:67:9b:06:26:60:dc:98:
cd:0f:e6:53:56:33:18:7b:57:2a:6f:c5:cc:66:44:ec:a0:8e:
e5:3f:7f:7c:5d:a2:e0:f9:c8:7c:a4:4b:c0:e8:8c:ff:9b:e0:
ec:38:f1:d4:d3:6a:f6:78:51:8b:9a:00:56:2d:48:11:27:49:
50:d0:ae:ec:b6:c3:cb:1d:78:5b:bc:e6:5e:b6:85:30:5c:54:
f2:b4:c5:cd:9a:d0:20:ad:ad:8c:51:1f:9c:51:24:c6:d1:00:
ca:7e:c4:b1:e8:c5:7a:8a:1f:a9:c0:e0:4c:03:0e:1d:32:5b:
ab:37:b3:4c:9b:60:b6:e6:22:18:4b:4c:1a:47:d0:24:5c:0c:
c4:21:d1:39:af:d6:0c:b1:3a:4f:bc:4d:55:26:05:05:17:28:
61:ca:5f:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:13 2025 by rpki-client