Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/5af699-b1a9-49dc-bdc9-1d4dfb4f4800/1/ISaWdazvu_hJex4hynN2SvSqjHs.mft
File: ISaWdazvu_hJex4hynN2SvSqjHs.mft (raw, json)
Hash identifier: IGZ5JrmpKCGI9bgQBiy919P55tY5zikV/NFrLDrSPNk=
Subject key identifier: 8A:9F:22:84:40:AA:7D:46:75:76:0F:6F:D5:B7:40:EC:78:C6:82:7A
Authority key identifier: 21:26:96:75:AC:EF:BB:F8:49:7B:1E:21:CA:73:76:4A:F4:AA:8C:7B
Certificate issuer: /CN=21269675acefbbf8497b1e21ca73764af4aa8c7b
Certificate serial: 0194BD85AD4C189C2901F2CB0953A785BA02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ISaWdazvu_hJex4hynN2SvSqjHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/5af699-b1a9-49dc-bdc9-1d4dfb4f4800/1/ISaWdazvu_hJex4hynN2SvSqjHs.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 18:00:41 +0000
Manifest this update: Fri 31 Jan 2025 18:00:41 +0000
Manifest next update: Sat 01 Feb 2025 18:00:41 +0000
Files and hashes: 1: 9C6x-AKKWqFQOmPoDrEfsQ86Plo.roa (hash: y8yBYrZmk+rE4RIfdIqZnZ3JFWI95gG2qC5oXNpQHjI=)
2: ISaWdazvu_hJex4hynN2SvSqjHs.crl (hash: GwvWFlag4HUObzV/NwT5OQYvDzhZBUq+suNMP5h9k9M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:ad:4c:18:9c:29:01:f2:cb:09:53:a7:85:ba:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21269675acefbbf8497b1e21ca73764af4aa8c7b
Validity
Not Before: Jan 31 18:00:41 2025 GMT
Not After : Feb 1 18:00:41 2025 GMT
Subject: CN=8a9f228440aa7d4675760f6fd5b740ec78c6827a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:87:fe:f4:f7:05:2e:e9:d6:52:0c:3b:76:90:
ea:94:74:56:b1:72:45:69:23:45:54:e2:f6:03:b5:
96:ee:80:fb:95:c2:45:8f:df:ad:c2:c1:cc:05:8b:
0f:34:68:e9:75:ab:cf:87:88:23:ba:a2:81:95:8d:
3d:e6:64:ba:44:1c:d2:ad:b9:13:e0:5b:2b:3e:3f:
63:41:31:06:9b:7b:72:8a:04:87:0e:f2:ac:45:38:
2f:31:7d:d9:f1:65:82:d2:ba:5a:4e:a1:41:df:57:
77:32:d7:40:95:03:7b:3a:79:b6:59:88:09:8f:30:
eb:0c:ea:71:3a:b8:43:5b:79:b2:39:73:53:d8:4d:
9f:41:ab:be:a5:dc:54:38:ff:fe:4c:5a:5b:25:3c:
08:d3:a4:29:6f:08:59:ae:1d:34:2e:59:6f:bb:4a:
12:ad:a4:8e:b6:0e:63:b0:53:70:aa:f8:36:5e:e9:
5d:bd:45:24:48:73:c1:9e:a2:08:b0:ce:8d:f4:f8:
07:f2:43:a5:30:61:6d:73:4f:d5:18:49:bd:f1:e9:
c8:10:af:c5:47:49:ae:d0:5d:38:14:3e:f7:5d:36:
70:e8:e8:29:bd:e2:a9:0e:4b:a6:44:ae:48:11:f8:
32:b7:19:72:58:0b:4f:15:81:42:d6:ea:56:5e:41:
54:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:9F:22:84:40:AA:7D:46:75:76:0F:6F:D5:B7:40:EC:78:C6:82:7A
X509v3 Authority Key Identifier:
keyid:21:26:96:75:AC:EF:BB:F8:49:7B:1E:21:CA:73:76:4A:F4:AA:8C:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ISaWdazvu_hJex4hynN2SvSqjHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/5af699-b1a9-49dc-bdc9-1d4dfb4f4800/1/ISaWdazvu_hJex4hynN2SvSqjHs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/5af699-b1a9-49dc-bdc9-1d4dfb4f4800/1/ISaWdazvu_hJex4hynN2SvSqjHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:7f:98:9e:46:22:ee:2f:03:05:57:35:ff:7e:c3:cb:08:03:
de:7b:3f:10:5e:a1:9b:14:e7:df:07:cd:44:b0:88:9c:8a:c9:
da:ac:e6:c2:32:b6:b3:b8:cb:0c:2a:5c:13:31:7d:ce:b4:8d:
32:c2:7a:c6:f6:60:ea:85:83:7c:6d:0f:d3:96:74:57:66:f3:
b6:d1:2d:3e:0a:e7:38:0e:74:f1:b8:8c:76:f6:d7:b2:58:05:
cb:86:0b:ae:5d:c1:7d:e9:e6:ed:f7:e3:ac:92:f8:a3:8e:00:
9d:53:be:96:1b:d0:57:8b:c2:38:4b:a6:d7:ed:b6:5b:ed:b5:
fd:3e:71:24:af:db:f5:8c:35:cd:c0:b7:39:7d:01:11:25:4b:
20:f9:98:8d:7d:4b:5e:4b:8c:58:77:4d:52:46:99:d4:38:f3:
c8:78:53:8d:20:10:44:7a:10:96:0f:e3:f7:c6:38:d8:e7:27:
3b:41:c4:31:3e:c0:27:94:28:01:d7:d5:ad:18:08:78:3c:fa:
c1:4a:98:38:d7:09:19:bf:90:ff:96:3d:98:97:95:a9:9d:8a:
46:a1:f6:24:69:f8:a9:c9:79:ac:f6:18:ad:9b:53:69:7d:48:
60:64:c0:fa:92:ab:a4:59:24:83:28:0c:78:99:c5:4f:cc:f8:
3b:a9:2e:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:23:33 2025 by rpki-client