Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/bc9888-bf0a-4bfd-9496-9d082117d8c1/1/sl2FaYjGKmAgc-wpOFgd1KWG-48.mft
File: sl2FaYjGKmAgc-wpOFgd1KWG-48.mft (raw, json)
Hash identifier: 1Z1txLjoCbF0gSt8fX8zWX2fuKZKib4EOo6W5OzF2PU=
Subject key identifier: D2:D7:C4:46:94:0C:FE:D8:F4:57:32:05:F0:DF:E1:C7:29:05:E0:91
Authority key identifier: B2:5D:85:69:88:C6:2A:60:20:73:EC:29:38:58:1D:D4:A5:86:FB:8F
Certificate issuer: /CN=b25d856988c62a602073ec2938581dd4a586fb8f
Certificate serial: 0194BC0526C05EC2BD91615CFCAED745BF0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sl2FaYjGKmAgc-wpOFgd1KWG-48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/bc9888-bf0a-4bfd-9496-9d082117d8c1/1/sl2FaYjGKmAgc-wpOFgd1KWG-48.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 11:00:41 +0000
Manifest this update: Fri 31 Jan 2025 11:00:41 +0000
Manifest next update: Sat 01 Feb 2025 11:00:41 +0000
Files and hashes: 1: 7ywY44F6W0hS7hjw1JX0UehS46M.roa (hash: EOy9avDsf7nOFq98ToM6bXsJvV8/Sd2CzZitSl4gKrE=)
2: sl2FaYjGKmAgc-wpOFgd1KWG-48.crl (hash: el4X6n66St0Iqwcc10HJqhJQSSP/2BgLc9Qr6HIMuv8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:26:c0:5e:c2:bd:91:61:5c:fc:ae:d7:45:bf:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b25d856988c62a602073ec2938581dd4a586fb8f
Validity
Not Before: Jan 31 11:00:41 2025 GMT
Not After : Feb 1 11:00:41 2025 GMT
Subject: CN=d2d7c446940cfed8f4573205f0dfe1c72905e091
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:aa:dc:9d:fe:e9:49:0f:bb:4f:0d:2e:b8:f7:
06:94:2f:21:4e:fe:5f:95:63:d5:33:e2:0d:61:d0:
62:93:08:f7:8e:3a:23:70:84:bc:92:99:44:19:4b:
57:38:7d:eb:b8:65:fe:db:72:10:9a:b9:65:ea:56:
20:66:2b:ca:9f:50:58:d8:f5:c2:1c:95:4f:bb:4a:
bf:08:3c:45:fd:d6:9e:d5:59:94:a9:53:2a:38:8d:
59:a3:64:ba:e2:6e:31:87:09:d8:73:33:9c:79:ef:
29:42:d5:68:78:df:c9:3a:00:85:a3:5c:9f:e6:b2:
4d:da:6e:2d:e9:ec:d2:24:20:da:d2:5d:7f:88:b4:
ef:8b:6a:f8:04:be:5f:b9:20:14:d7:69:fd:ee:66:
48:15:93:0a:98:2b:bd:5f:aa:58:f2:94:fb:cc:29:
54:cd:2d:c0:53:80:cc:31:d5:bc:a5:d3:3b:2e:70:
50:f1:89:93:05:df:9e:5d:74:be:65:1b:1d:02:71:
96:ff:17:1f:63:85:d9:d2:f8:33:c9:ff:fe:d1:a4:
5d:96:be:98:7c:e8:73:30:0d:82:98:59:9b:6e:25:
b6:b8:92:78:15:c4:e4:48:b1:5b:83:2c:35:9d:64:
f5:a2:36:56:8d:66:01:35:15:8b:89:20:5d:a3:4f:
5e:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:D7:C4:46:94:0C:FE:D8:F4:57:32:05:F0:DF:E1:C7:29:05:E0:91
X509v3 Authority Key Identifier:
keyid:B2:5D:85:69:88:C6:2A:60:20:73:EC:29:38:58:1D:D4:A5:86:FB:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sl2FaYjGKmAgc-wpOFgd1KWG-48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/bc9888-bf0a-4bfd-9496-9d082117d8c1/1/sl2FaYjGKmAgc-wpOFgd1KWG-48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/bc9888-bf0a-4bfd-9496-9d082117d8c1/1/sl2FaYjGKmAgc-wpOFgd1KWG-48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:bf:b0:c1:df:0f:9c:60:25:7a:6c:cb:45:7d:33:9e:88:3a:
06:a8:bc:1b:56:9f:8b:d6:8f:97:ea:38:98:c0:f6:84:47:30:
b0:f3:2b:b7:b9:b6:c3:d6:01:b5:98:4c:5b:d4:b8:b7:76:1e:
80:ea:00:97:33:2d:85:cc:05:6f:dd:44:a3:5d:82:b8:41:61:
4c:bb:f2:8f:fb:7f:9f:cb:36:2d:89:c8:3a:75:82:45:ed:67:
e7:68:e2:96:0e:e0:97:25:3c:e6:2d:f7:20:1c:09:ea:58:c6:
f7:0b:cf:02:18:ca:3e:6e:03:90:9e:bc:e7:93:fb:b7:2b:4c:
f8:1f:3a:28:44:7a:84:75:b5:fc:23:d8:72:03:eb:82:e9:fe:
17:5d:21:90:f0:3a:09:e2:01:12:c7:51:96:74:9a:d7:1f:ec:
43:42:eb:5b:58:ce:49:56:ad:44:7a:56:1a:c1:92:65:68:21:
02:db:3b:27:9d:1b:4f:59:c2:46:05:c9:b0:57:fb:3b:fe:18:
2e:33:a3:c1:8c:db:97:3e:a5:a9:51:f9:93:de:b6:4e:61:41:
ed:1c:90:89:93:aa:f6:eb:5c:6d:04:fb:79:5e:f7:a5:40:f7:
80:c0:9d:29:cf:f9:00:51:94:79:3e:6e:74:ed:2e:99:d7:00:
97:79:53:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:55:20 2025 by rpki-client