Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/29aa96-123f-40ea-95d5-d25b7ca3db89/1/sIWATbFT63JMWFV8eTWcRAggVVA.mft
File: sIWATbFT63JMWFV8eTWcRAggVVA.mft (raw, json)
Hash identifier: jOJAuV/SIV4XsaboJ26Y+OFXv3fSOuyZVCo4PDXOn1w=
Subject key identifier: A4:D5:EF:02:46:6A:A9:50:34:99:F9:97:8C:2E:46:55:FE:63:44:1F
Authority key identifier: B0:85:80:4D:B1:53:EB:72:4C:58:55:7C:79:35:9C:44:08:20:55:50
Certificate issuer: /CN=b085804db153eb724c58557c79359c4408205550
Certificate serial: 0194BCE0AFC58F26BF22FEF6952F72AB9F20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sIWATbFT63JMWFV8eTWcRAggVVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/29aa96-123f-40ea-95d5-d25b7ca3db89/1/sIWATbFT63JMWFV8eTWcRAggVVA.mft
Manifest number: 0306
Signing time: Fri 31 Jan 2025 15:00:29 +0000
Manifest this update: Fri 31 Jan 2025 15:00:29 +0000
Manifest next update: Sat 01 Feb 2025 15:00:29 +0000
Files and hashes: 1: 18TNS4gBaAj1nBKZLGQyvBGXDAA.roa (hash: yG6kNp39rMwW08RfUJ3Cw47Eb4R/ZRHq/FbYcN4tnj0=)
2: sIWATbFT63JMWFV8eTWcRAggVVA.crl (hash: VxMheA5brD0+vErP/2mY4IftRGF07NOLKTIysDQC/8E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:af:c5:8f:26:bf:22:fe:f6:95:2f:72:ab:9f:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b085804db153eb724c58557c79359c4408205550
Validity
Not Before: Jan 31 15:00:29 2025 GMT
Not After : Feb 1 15:00:29 2025 GMT
Subject: CN=a4d5ef02466aa9503499f9978c2e4655fe63441f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:7f:d6:cf:d4:ff:dc:8f:ff:ea:7a:8e:3b:32:
4e:53:b4:46:94:61:b1:d4:05:27:b9:59:2b:2f:89:
b3:d5:25:8f:79:6e:9e:1b:4c:8d:a2:f2:4b:19:c9:
09:45:f0:bf:1d:be:4b:dd:a2:82:27:5a:60:9c:38:
89:05:eb:0a:e4:23:4d:09:0e:eb:27:69:76:3c:77:
2b:75:46:01:d7:f9:48:21:a3:5a:fc:65:15:df:36:
a8:ea:58:3a:b2:51:cb:45:9c:d9:cc:de:16:10:80:
13:78:18:75:a1:23:c6:ae:39:4a:cf:39:d0:ca:d0:
6c:de:e7:78:68:bc:48:89:99:a4:cd:98:8a:40:15:
b5:1f:ce:df:f1:d1:24:65:46:51:a4:b9:61:cb:70:
72:75:01:0e:09:a7:7d:a1:19:a1:97:63:ed:e4:31:
fa:27:90:04:04:7e:10:f4:64:c9:3c:19:7d:69:ca:
a9:73:89:1c:fa:eb:47:7d:9f:db:1a:fe:e6:c4:00:
f5:39:1a:81:55:c7:1d:50:7c:d2:ce:fc:4c:d9:15:
30:bd:3b:c5:57:26:72:9e:9e:bd:66:da:f2:76:ee:
f5:0a:85:d2:be:65:da:57:c1:7a:b0:03:c7:27:ed:
0b:50:1c:eb:74:45:0d:84:68:f1:f5:ad:4a:c1:fa:
22:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:D5:EF:02:46:6A:A9:50:34:99:F9:97:8C:2E:46:55:FE:63:44:1F
X509v3 Authority Key Identifier:
keyid:B0:85:80:4D:B1:53:EB:72:4C:58:55:7C:79:35:9C:44:08:20:55:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sIWATbFT63JMWFV8eTWcRAggVVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/29aa96-123f-40ea-95d5-d25b7ca3db89/1/sIWATbFT63JMWFV8eTWcRAggVVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/29aa96-123f-40ea-95d5-d25b7ca3db89/1/sIWATbFT63JMWFV8eTWcRAggVVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:67:ce:99:09:a2:8a:a7:67:e9:d3:68:11:a3:f4:f6:ad:1e:
f0:a2:cb:3a:e9:76:e2:a2:d4:07:a6:d0:f8:0b:30:1e:ff:28:
a3:5a:63:d9:38:14:35:2e:94:c2:71:c9:5d:d1:19:d7:26:b0:
9f:6f:0c:1b:53:bb:d9:e2:a6:43:1c:cb:da:1f:0b:52:dd:b2:
ad:7b:57:81:c1:08:d6:35:25:6a:bb:6f:c0:e7:f4:a9:c7:0b:
4a:f2:b6:1e:8f:dd:3d:ea:36:e7:b6:24:c3:e0:8b:08:b4:d4:
a7:7a:02:69:25:07:ff:0b:3e:d1:48:df:20:cd:17:eb:69:1c:
13:02:5a:89:0d:92:7b:1a:18:2d:96:40:2c:4d:b2:73:fb:c2:
62:42:c5:37:0a:69:48:6e:a9:d4:71:db:41:9f:8a:83:f7:2d:
30:3f:7f:be:d7:fa:66:bb:6d:68:c1:d3:e1:6f:27:78:32:ae:
08:76:f1:71:e8:5a:ab:3a:e9:2d:0e:4d:b6:13:90:24:25:6f:
00:05:cd:b5:3e:a3:b8:37:02:3c:5e:ff:b4:c8:b7:20:2e:ed:
80:35:b6:37:ff:0c:05:53:cc:ed:66:6b:34:01:89:3a:b1:dd:
09:92:26:b2:bc:b6:a5:24:da:03:d3:33:3a:67:dd:fd:4a:ce:
be:59:9d:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:28 2025 by rpki-client