Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/ac8fdc-9d55-45db-a243-f16697d72a71/1/snSbyc0s-N_88v_teIT7wTyz5F0.mft
File: snSbyc0s-N_88v_teIT7wTyz5F0.mft (raw, json)
Hash identifier: j3xo8vPQg0BFOBKSmePtH34tLVWGK2dN56WFWuQWKnE=
Subject key identifier: 0C:20:5D:46:B5:5A:BF:AA:6B:50:6C:32:92:84:54:4E:24:FB:3B:C5
Authority key identifier: B2:74:9B:C9:CD:2C:F8:DF:FC:F2:FF:ED:78:84:FB:C1:3C:B3:E4:5D
Certificate issuer: /CN=b2749bc9cd2cf8dffcf2ffed7884fbc13cb3e45d
Certificate serial: 0194BC73268609B7127B01B2D2C3963D7EC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/snSbyc0s-N_88v_teIT7wTyz5F0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/ac8fdc-9d55-45db-a243-f16697d72a71/1/snSbyc0s-N_88v_teIT7wTyz5F0.mft
Manifest number: 1060
Signing time: Fri 31 Jan 2025 13:00:50 +0000
Manifest this update: Fri 31 Jan 2025 13:00:50 +0000
Manifest next update: Sat 01 Feb 2025 13:00:50 +0000
Files and hashes: 1: OaynJV0qbIIk7EsSxRIucNannDI.roa (hash: rLhfi7PeZU4mZH9NTsaCKUtzejxWWyeiOXooqE3dPpU=)
2: ZsJ1p0f-2YgNmBDafzu2GWckT34.roa (hash: kKQedLsISeBKSivLfM6tlDNDN9VJMt9n4EQssMfjNOQ=)
3: snSbyc0s-N_88v_teIT7wTyz5F0.crl (hash: EmLt7AE3SEClSh9Vi9//K7RWmwXJ10KuTFMghNwc+gA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:26:86:09:b7:12:7b:01:b2:d2:c3:96:3d:7e:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2749bc9cd2cf8dffcf2ffed7884fbc13cb3e45d
Validity
Not Before: Jan 31 13:00:50 2025 GMT
Not After : Feb 1 13:00:50 2025 GMT
Subject: CN=0c205d46b55abfaa6b506c329284544e24fb3bc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:49:1d:56:3c:67:2f:79:a8:1a:08:9c:3e:5c:
e1:46:64:ff:ff:b5:93:99:c7:75:20:2b:35:69:81:
38:49:08:e9:58:55:40:78:39:70:6f:0d:a2:5d:84:
48:35:d7:84:bb:ab:af:8c:c0:73:53:54:40:eb:fe:
7f:5f:e0:2c:4a:93:7b:0c:f5:1f:49:76:02:0f:80:
ae:5e:43:29:b4:3a:3a:9f:95:c1:2a:f7:0d:2b:84:
ba:00:67:1a:13:34:17:c0:51:c3:3d:68:04:c5:50:
91:69:4f:30:b2:06:ef:b8:35:de:ad:37:d0:c2:34:
69:b9:12:82:7d:eb:76:a7:24:de:56:68:0b:8c:f9:
ad:bf:e6:44:bb:fd:1a:25:80:fd:a7:88:ab:cb:8f:
ce:32:f7:c9:db:ed:dc:c5:28:82:60:ae:5e:2f:6e:
78:13:20:df:02:77:87:ee:b0:3b:83:ae:f4:7b:76:
6f:e6:99:f0:85:7b:ed:e7:8a:d0:0e:2c:96:e0:6e:
f7:02:a6:46:99:21:0a:04:18:f7:70:87:87:7f:39:
ae:ce:3c:93:78:97:b0:d7:98:50:c6:1a:65:41:ed:
1b:06:f7:df:9c:3b:03:06:27:34:26:12:a8:61:cc:
b9:f1:00:77:65:47:77:62:77:4b:97:53:45:48:db:
57:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:20:5D:46:B5:5A:BF:AA:6B:50:6C:32:92:84:54:4E:24:FB:3B:C5
X509v3 Authority Key Identifier:
keyid:B2:74:9B:C9:CD:2C:F8:DF:FC:F2:FF:ED:78:84:FB:C1:3C:B3:E4:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/snSbyc0s-N_88v_teIT7wTyz5F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ac8fdc-9d55-45db-a243-f16697d72a71/1/snSbyc0s-N_88v_teIT7wTyz5F0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ac8fdc-9d55-45db-a243-f16697d72a71/1/snSbyc0s-N_88v_teIT7wTyz5F0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:dd:83:69:7a:54:d0:16:a1:ed:02:2d:3f:b2:e7:33:07:57:
c5:4e:d3:6c:c4:a5:10:85:13:69:5d:4d:3a:a8:5c:01:a3:bb:
c7:80:cc:7e:66:da:e9:33:55:dd:39:5e:92:71:be:22:7e:19:
41:36:65:87:01:93:79:70:77:c5:b6:f1:e2:6e:ba:81:f4:49:
4a:92:ee:00:41:d7:ce:0f:a2:7e:08:56:f9:43:cb:f3:69:3a:
97:24:75:50:ce:26:cf:b7:bc:ad:46:e5:c8:5d:49:38:77:e1:
37:36:c6:b8:c4:9b:7a:6b:5f:dc:cb:60:b0:ee:a9:04:3a:c1:
8f:27:e4:30:1c:2d:d1:8d:fe:de:85:1f:e2:e1:18:77:5b:d9:
c9:e0:65:0c:f5:18:9e:26:bb:0d:6d:d4:2e:3c:27:d9:8e:8a:
45:bb:8d:c1:d2:1d:4d:31:71:32:12:e5:7a:09:bd:7e:ae:6b:
d0:fe:b1:90:a8:a0:db:75:35:27:5d:40:ae:62:2b:d2:bb:f2:
a3:a0:81:09:03:57:6a:71:0a:1e:5c:52:6e:a2:b6:bb:96:31:
e0:ca:e6:87:88:11:ac:4a:31:16:c8:c0:a6:fb:a9:8d:19:65:
27:18:25:21:c8:54:a2:61:cd:5f:7c:1f:8a:23:01:c8:1b:3f:
83:e8:ac:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:18:49 2025 by rpki-client