Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/31a0ec-d9b8-49e4-b436-8b4215e58028/1/sA4l9V67rLBp8QOssIZnA4Nc_M0.mft
File: sA4l9V67rLBp8QOssIZnA4Nc_M0.mft (raw, json)
Hash identifier: xJodQkk/DAZEtIpvG+b25HX/w55RA1pUR58/txAVdss=
Subject key identifier: 55:72:9F:49:FD:3B:22:A9:C9:85:18:D0:FB:31:7C:0F:89:AF:66:BF
Authority key identifier: B0:0E:25:F5:5E:BB:AC:B0:69:F1:03:AC:B0:86:67:03:83:5C:FC:CD
Certificate issuer: /CN=b00e25f55ebbacb069f103acb0866703835cfccd
Certificate serial: 0194BC0515BC2B5C76CB5EBD2498F9C1C8D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sA4l9V67rLBp8QOssIZnA4Nc_M0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/31a0ec-d9b8-49e4-b436-8b4215e58028/1/sA4l9V67rLBp8QOssIZnA4Nc_M0.mft
Manifest number: 1036
Signing time: Fri 31 Jan 2025 11:00:37 +0000
Manifest this update: Fri 31 Jan 2025 11:00:37 +0000
Manifest next update: Sat 01 Feb 2025 11:00:37 +0000
Files and hashes: 1: IQVuYRD39w1eDGvQI5n6qd53zJ0.roa (hash: YMuLKblQhuUFH21p6Ke9CEB5Y7GrJ0BpmU+txXFqoC4=)
2: sA4l9V67rLBp8QOssIZnA4Nc_M0.crl (hash: bC3ShQV5ydekwJd4UaXxqSG1uyaGUeWHUQV7vY6GCzo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:15:bc:2b:5c:76:cb:5e:bd:24:98:f9:c1:c8:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b00e25f55ebbacb069f103acb0866703835cfccd
Validity
Not Before: Jan 31 11:00:37 2025 GMT
Not After : Feb 1 11:00:37 2025 GMT
Subject: CN=55729f49fd3b22a9c98518d0fb317c0f89af66bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8a:af:57:23:8c:f9:ad:e7:d3:97:dc:5b:c8:
b4:77:83:6d:d9:27:7a:6c:12:58:87:7d:5a:b4:2c:
58:ca:f3:c2:47:dc:61:92:5e:73:72:6c:7d:0b:4f:
9c:13:3f:1a:a5:e6:bb:35:29:2b:2e:b3:ed:e3:1b:
50:a1:cf:b0:01:13:5c:79:94:dc:79:0e:f4:84:9b:
e6:8f:1f:22:13:0c:36:1c:ea:d1:24:9f:06:0e:7f:
b6:25:b2:21:f2:9a:1a:e3:c1:b2:db:62:26:3e:10:
db:66:27:1a:8d:38:e6:58:fe:e4:35:b1:d5:db:f1:
83:1a:4e:34:fc:f4:a0:51:90:eb:dd:55:0f:76:bc:
a6:93:32:e6:b3:ac:31:62:ca:64:b9:ec:60:aa:6d:
c7:45:60:2f:fc:3c:06:ac:3a:b3:e2:b7:c3:92:81:
8e:9e:ee:4a:4a:81:86:20:ab:e8:26:6a:3b:6a:fa:
05:b2:7b:ea:09:7c:bf:3b:9f:7d:d9:49:b1:4e:5c:
5d:d3:89:89:a3:79:ba:45:10:b7:f5:02:f9:e5:24:
06:f3:cc:2e:ae:3c:88:ab:11:fc:f8:b6:3c:a8:36:
b3:47:87:08:14:89:b7:c3:8e:19:b8:d1:e3:48:db:
35:79:37:22:c3:2d:90:5d:a7:01:4b:2d:ca:9b:4a:
09:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:72:9F:49:FD:3B:22:A9:C9:85:18:D0:FB:31:7C:0F:89:AF:66:BF
X509v3 Authority Key Identifier:
keyid:B0:0E:25:F5:5E:BB:AC:B0:69:F1:03:AC:B0:86:67:03:83:5C:FC:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sA4l9V67rLBp8QOssIZnA4Nc_M0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/31a0ec-d9b8-49e4-b436-8b4215e58028/1/sA4l9V67rLBp8QOssIZnA4Nc_M0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/31a0ec-d9b8-49e4-b436-8b4215e58028/1/sA4l9V67rLBp8QOssIZnA4Nc_M0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:0a:28:64:78:0f:b2:36:d0:3a:f5:14:bf:4d:4d:c6:60:f5:
07:1a:c5:f2:16:15:0e:8b:22:8f:ef:fb:2f:85:4b:5f:07:34:
97:0a:94:1b:71:24:9f:e8:6c:96:56:f3:41:0a:68:61:e4:b3:
88:b3:18:b1:fa:4e:21:e9:c0:49:cb:78:b1:43:52:92:ee:13:
89:08:d7:da:5d:94:ff:2e:48:b2:75:40:2f:53:0a:19:ba:a9:
0a:fa:03:7c:17:c8:c1:2b:fd:27:f3:22:21:2c:a2:e5:f5:50:
c2:5a:cb:40:53:d3:8a:df:9d:3b:3e:6d:e4:ac:ca:8e:99:e3:
12:df:07:da:0f:99:33:3c:48:37:18:ef:54:3c:18:b7:a9:39:
ba:5a:9f:a8:be:5f:ce:8f:ef:1c:93:a5:59:d5:c9:59:52:47:
98:16:e8:7b:be:7a:3f:e6:52:c1:82:e8:16:03:cb:e4:a7:c3:
23:91:ce:9d:4c:a1:a1:79:6f:c7:9e:c3:59:35:03:27:e8:b6:
08:f6:8d:75:2a:d7:6e:02:7c:a9:00:5f:30:f2:3c:33:89:38:
eb:f2:52:db:73:e5:f9:70:d8:4c:81:5e:f9:ce:1e:df:05:bb:
6c:17:67:83:53:29:5a:83:c2:26:a5:1d:6a:3e:f8:2f:8c:0e:
c0:70:c9:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:44:36 2025 by rpki-client