Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/c1e3b4-2d61-44cc-9081-0f9d43d864bb/1/SoCVkn7lfM7iVqpDnxY2hrWMVww.mft
File: SoCVkn7lfM7iVqpDnxY2hrWMVww.mft (raw, json)
Hash identifier: nxlQiv05EH94sjDmW3QvnvucKtf7n8CKIdNCN4Qr4f4=
Subject key identifier: 99:62:B2:C3:F9:F5:20:9A:15:E0:9D:70:E6:8E:AA:A4:26:72:B8:F3
Authority key identifier: 4A:80:95:92:7E:E5:7C:CE:E2:56:AA:43:9F:16:36:86:B5:8C:57:0C
Certificate issuer: /CN=4a8095927ee57ccee256aa439f163686b58c570c
Certificate serial: 0194BC3CA119020CB3DECFF81E6BFC7E95E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SoCVkn7lfM7iVqpDnxY2hrWMVww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/c1e3b4-2d61-44cc-9081-0f9d43d864bb/1/SoCVkn7lfM7iVqpDnxY2hrWMVww.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 12:01:17 +0000
Manifest this update: Fri 31 Jan 2025 12:01:17 +0000
Manifest next update: Sat 01 Feb 2025 12:01:17 +0000
Files and hashes: 1: C-CN_JaiRgSKbzPlXi0Jj-g5PhY.roa (hash: ZM7c9sV798W9KVJ3kQt3+KcxqmeF+wXg6yCfeTfvBKg=)
2: CXC2XsvDIqaanTmqd2a1qzMnjWs.roa (hash: QAIN6LBn+W+vlGLr5cVirBbL9u+a95dTjOFvgbUMGX4=)
3: SoCVkn7lfM7iVqpDnxY2hrWMVww.crl (hash: R7fRPxmi7PIucZRs1FDafvU5evIvtneDFf638YQDWso=)
4: hWRqGYVmCWMq0Y1sle0EKmWSB94.roa (hash: obdTuMexMzDiPJAN90w8Hcb2NiK0kbzvsWZeLWPpsqE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:a1:19:02:0c:b3:de:cf:f8:1e:6b:fc:7e:95:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a8095927ee57ccee256aa439f163686b58c570c
Validity
Not Before: Jan 31 12:01:17 2025 GMT
Not After : Feb 1 12:01:17 2025 GMT
Subject: CN=9962b2c3f9f5209a15e09d70e68eaaa42672b8f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:80:76:de:b0:de:da:cd:27:59:cb:60:26:d4:
5a:ff:0f:1b:9c:95:a9:7a:99:99:64:0b:fd:6a:cb:
4f:8b:b8:16:95:05:9e:aa:5d:d2:eb:7a:d1:c9:22:
df:05:31:a9:62:a2:77:3d:e7:0a:ee:02:04:2a:a7:
a9:2a:49:ac:e3:dc:94:c6:f1:15:b1:da:6d:c9:cc:
b4:d5:3a:44:4b:4e:dd:5f:81:3e:a5:0e:45:26:ae:
9d:3a:f8:48:a2:f4:e3:bc:b2:20:5a:83:63:50:93:
2f:83:2b:6b:ef:19:20:fd:ad:d1:50:e2:9c:61:5a:
3e:09:b9:85:47:9f:9a:a5:4f:32:a7:46:d3:0a:3f:
8c:27:3f:79:a3:61:60:3e:de:f4:1c:a5:e7:b9:e9:
d7:fe:da:20:2e:b1:e1:7a:8c:03:f1:20:18:3c:7c:
fe:90:c7:aa:df:2e:5c:6b:7e:48:5f:22:19:f9:1e:
4b:af:13:1f:85:9f:10:46:cb:fd:36:d0:24:a1:16:
c1:64:1f:29:c6:ff:d8:db:f2:ee:39:2d:27:b0:c0:
b3:ca:49:71:85:7a:8d:60:56:92:fc:54:d5:9f:2e:
3a:ac:39:d2:4a:74:ff:8f:49:ce:23:01:9b:e9:85:
9a:d9:15:e6:fb:86:15:12:5e:fd:b7:25:bb:a0:ce:
99:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:62:B2:C3:F9:F5:20:9A:15:E0:9D:70:E6:8E:AA:A4:26:72:B8:F3
X509v3 Authority Key Identifier:
keyid:4A:80:95:92:7E:E5:7C:CE:E2:56:AA:43:9F:16:36:86:B5:8C:57:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SoCVkn7lfM7iVqpDnxY2hrWMVww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c1e3b4-2d61-44cc-9081-0f9d43d864bb/1/SoCVkn7lfM7iVqpDnxY2hrWMVww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c1e3b4-2d61-44cc-9081-0f9d43d864bb/1/SoCVkn7lfM7iVqpDnxY2hrWMVww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:7b:d2:59:81:e9:c6:65:aa:f8:d8:f2:24:08:75:45:8c:92:
c6:73:3b:3d:46:9e:54:13:cb:8d:0d:d8:c9:31:a8:6b:38:f0:
b5:ad:f0:b2:84:ff:77:9a:3c:9f:94:1f:0c:82:6e:17:21:47:
93:d2:14:08:66:c4:05:25:fe:b0:28:ed:87:1d:16:a5:5b:90:
de:4a:4f:2c:1e:6c:1e:1c:72:c8:3c:e2:84:41:f2:6f:47:1a:
64:7d:43:65:a5:da:45:7a:5b:69:e4:6b:6d:68:aa:92:31:e5:
94:3c:1b:56:4f:38:0a:f7:6c:2f:b8:6d:7d:38:4a:4a:ab:1f:
e9:9b:e6:2a:96:ba:63:dc:bf:5f:58:e1:51:1f:9f:ec:27:4b:
c8:bd:e1:6f:f8:06:66:fb:9e:4e:8b:8f:0b:f8:c2:2d:b9:e0:
25:7f:51:6c:4b:8c:49:b3:65:65:32:7d:51:e1:11:3d:1a:a6:
95:d8:13:9d:c7:1a:e7:96:22:2f:4d:56:e6:bd:fd:fb:fb:aa:
ef:a8:db:58:e1:f9:ea:8a:9e:af:4e:ca:b6:11:fb:54:36:e2:
c8:d8:20:0a:5f:b6:6c:7a:69:38:a2:7f:2a:5f:d3:79:17:a9:
80:2c:77:b2:74:7c:62:6c:4d:e8:b5:41:86:66:1c:9d:1d:cc:
c4:8c:b1:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:33:17 2025 by rpki-client