Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/1153f8-1994-4b2d-9645-f28b4d640a49/1/SOowwPKOAiacV2W_SgRWd8onlKU.mft
File: SOowwPKOAiacV2W_SgRWd8onlKU.mft (raw, json)
Hash identifier: a6d4f1dMOf2FZVTKgX11KsePRrHaVAToRzyvb21HGkY=
Subject key identifier: 68:17:CC:39:D3:43:B0:6C:68:92:CE:2E:68:DF:3C:A6:A1:DA:20:93
Authority key identifier: 48:EA:30:C0:F2:8E:02:26:9C:57:65:BF:4A:04:56:77:CA:27:94:A5
Certificate issuer: /CN=48ea30c0f28e02269c5765bf4a045677ca2794a5
Certificate serial: 0194BCA9C1DEE18636A48104353A79EF63F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SOowwPKOAiacV2W_SgRWd8onlKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/1153f8-1994-4b2d-9645-f28b4d640a49/1/SOowwPKOAiacV2W_SgRWd8onlKU.mft
Manifest number: 1032
Signing time: Fri 31 Jan 2025 14:00:29 +0000
Manifest this update: Fri 31 Jan 2025 14:00:29 +0000
Manifest next update: Sat 01 Feb 2025 14:00:29 +0000
Files and hashes: 1: SOowwPKOAiacV2W_SgRWd8onlKU.crl (hash: B6uLWOPhZbzjgTwUg5xHFlRLY+5u6aGQPEbsQnHxwPw=)
2: ZyzamFxx31MI8DWtNOW9NjiSAdw.roa (hash: k0oTub67+XpNNg/oLxWWVGf2ml63S+4IV7J2xSqjNvQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:c1:de:e1:86:36:a4:81:04:35:3a:79:ef:63:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48ea30c0f28e02269c5765bf4a045677ca2794a5
Validity
Not Before: Jan 31 14:00:29 2025 GMT
Not After : Feb 1 14:00:29 2025 GMT
Subject: CN=6817cc39d343b06c6892ce2e68df3ca6a1da2093
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:df:f1:7d:63:64:ec:e7:4b:f5:b2:69:69:83:
15:5b:fa:6a:d4:ae:4e:05:c5:7d:10:4c:b2:77:80:
91:fd:4d:1e:6f:6c:dc:f2:71:6c:6a:37:a8:e9:43:
1e:90:dd:e3:dd:96:e3:2d:fd:3e:93:03:4f:86:6f:
f9:e0:b8:32:27:34:4d:c6:fc:e7:68:a7:c3:a1:7e:
28:cd:f8:15:1f:49:89:fe:0f:34:53:4b:37:49:d2:
3a:3f:17:dd:f9:da:da:a7:11:88:d4:f4:6c:da:70:
0a:e3:15:b5:88:28:56:df:a6:0c:cd:cc:e7:83:af:
cb:8b:ff:e4:a2:2a:98:9f:ea:31:85:1a:ef:5f:4f:
e1:6b:01:24:87:2b:b2:11:89:09:1c:a9:18:49:68:
73:39:05:d1:96:8a:44:59:1c:af:2a:63:38:95:99:
35:d7:48:d5:15:06:81:e4:1e:d0:cb:11:c8:43:2f:
66:71:79:a9:61:d3:83:65:e3:06:37:aa:35:8b:09:
36:b0:e4:fb:ce:99:77:ef:d8:8c:49:2c:53:cf:9a:
86:9d:53:32:cc:ee:df:19:1e:d7:b2:17:9d:55:ca:
7f:88:c8:a1:25:6d:db:4d:03:ca:75:dd:6c:31:e9:
71:95:3f:7d:69:fa:43:a1:6e:19:99:8c:f2:50:06:
b6:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:17:CC:39:D3:43:B0:6C:68:92:CE:2E:68:DF:3C:A6:A1:DA:20:93
X509v3 Authority Key Identifier:
keyid:48:EA:30:C0:F2:8E:02:26:9C:57:65:BF:4A:04:56:77:CA:27:94:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SOowwPKOAiacV2W_SgRWd8onlKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/1153f8-1994-4b2d-9645-f28b4d640a49/1/SOowwPKOAiacV2W_SgRWd8onlKU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/1153f8-1994-4b2d-9645-f28b4d640a49/1/SOowwPKOAiacV2W_SgRWd8onlKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:76:c5:b3:ce:58:a1:a3:6e:79:18:ee:19:a5:47:a7:90:8f:
4c:02:da:e7:d6:54:2e:2a:37:55:15:ec:bc:f0:34:80:b9:f2:
ce:03:ed:29:11:02:aa:c6:f0:1a:c5:e8:da:d3:7f:1e:42:a4:
c2:be:07:ad:b4:06:3f:9c:9b:7d:40:b0:19:04:a2:aa:bb:0c:
6c:13:cc:cd:45:12:19:71:8a:31:96:dd:3e:4d:1a:ee:d7:bb:
f4:26:48:ee:19:36:4f:f6:71:15:ff:cf:09:ee:b7:19:75:ca:
e1:89:40:29:ce:c2:9a:e8:1b:82:55:8a:1c:58:aa:ae:9e:3d:
37:26:ad:90:50:43:49:9f:dc:22:58:d3:93:f9:f9:cc:04:f0:
8a:38:9b:4e:88:a4:a9:a0:73:bf:36:cf:af:c1:4a:79:a0:26:
09:8e:84:14:c9:0d:68:d0:c4:50:ab:e4:08:2e:67:be:a4:03:
32:dd:c4:1c:d5:63:b7:ac:15:34:8b:e0:41:7a:f2:7d:63:c1:
35:6f:51:35:05:4c:9f:cb:e3:a5:4e:a6:e0:9d:77:1e:c3:05:
a1:4a:e7:f1:b0:31:9e:62:6b:1e:a7:59:21:fb:50:e9:a2:72:
47:55:23:50:33:b6:70:5b:00:a6:36:83:2e:58:fa:5c:4d:8a:
32:19:b8:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:38 2025 by rpki-client