Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/d6d263-29f9-4613-bb7d-4938b8d0c3de/1/sH-v24bTjze_DCbT8nMf3vaxTko.mft
File: sH-v24bTjze_DCbT8nMf3vaxTko.mft (raw, json)
Hash identifier: Jp5vSWmnaDEcv8uBROvn/idSKZCsRw7AGBuZLIm24rM=
Subject key identifier: BC:A4:55:43:8B:C5:D9:F6:34:7D:91:04:CD:2D:0A:BA:64:B1:A1:F9
Authority key identifier: B0:7F:AF:DB:86:D3:8F:37:BF:0C:26:D3:F2:73:1F:DE:F6:B1:4E:4A
Certificate issuer: /CN=b07fafdb86d38f37bf0c26d3f2731fdef6b14e4a
Certificate serial: 0194BC72EA97416A4305168369862B14841D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sH-v24bTjze_DCbT8nMf3vaxTko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/d6d263-29f9-4613-bb7d-4938b8d0c3de/1/sH-v24bTjze_DCbT8nMf3vaxTko.mft
Manifest number: 0587
Signing time: Fri 31 Jan 2025 13:00:35 +0000
Manifest this update: Fri 31 Jan 2025 13:00:35 +0000
Manifest next update: Sat 01 Feb 2025 13:00:35 +0000
Files and hashes: 1: 6JrlKE6-D36PVGMwp7ew7z1aOA4.roa (hash: T1fYyT20nJ5YneHKV99StH98ng47eu4G5rhmxnPt+y8=)
2: sH-v24bTjze_DCbT8nMf3vaxTko.crl (hash: 6/y9LyrNxzP2k7Yz1xrvkHnE0sLk7hDgeUruuFV2BPo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:ea:97:41:6a:43:05:16:83:69:86:2b:14:84:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b07fafdb86d38f37bf0c26d3f2731fdef6b14e4a
Validity
Not Before: Jan 31 13:00:35 2025 GMT
Not After : Feb 1 13:00:35 2025 GMT
Subject: CN=bca455438bc5d9f6347d9104cd2d0aba64b1a1f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:72:82:ab:26:26:a4:b1:ec:ab:19:62:3e:d2:
85:95:08:19:a9:3e:85:d3:d8:08:b2:d4:07:3f:ce:
91:c2:2c:30:51:de:62:92:9a:0b:fd:68:08:e3:21:
3f:17:d9:fe:aa:7e:d5:7e:22:bf:00:32:01:71:8b:
1e:d3:22:eb:3b:25:86:ea:62:ed:1e:17:ce:a0:5f:
ac:35:b2:6b:be:78:50:31:ae:9e:ed:29:89:40:8a:
7c:0f:51:fe:4d:7a:ff:72:d4:5c:c6:0c:9b:ad:b2:
c8:d7:5b:d9:ee:ca:0c:49:9a:43:c5:03:2e:40:56:
3c:dd:22:3e:22:a7:52:51:cf:6c:fc:e5:57:49:c7:
e5:dc:c1:f8:56:5e:ee:66:15:90:be:19:39:13:76:
81:2c:50:7f:3b:90:14:85:ef:68:7a:05:86:5f:3f:
43:3c:e7:6f:38:ec:2f:a5:08:93:47:f2:a1:94:ca:
42:dd:4c:b2:80:00:8c:9b:4d:d5:bd:2e:9a:32:86:
c1:db:74:2e:5b:70:d7:97:f4:76:b8:f5:d9:ce:08:
0f:6e:f2:2c:dd:53:85:92:49:52:5b:9a:bc:36:96:
e2:1a:a1:de:9d:64:9c:b0:03:3b:17:18:cd:ea:20:
02:f9:9d:4f:91:24:cb:93:c0:97:bb:84:9b:04:bf:
67:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:A4:55:43:8B:C5:D9:F6:34:7D:91:04:CD:2D:0A:BA:64:B1:A1:F9
X509v3 Authority Key Identifier:
keyid:B0:7F:AF:DB:86:D3:8F:37:BF:0C:26:D3:F2:73:1F:DE:F6:B1:4E:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sH-v24bTjze_DCbT8nMf3vaxTko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d6d263-29f9-4613-bb7d-4938b8d0c3de/1/sH-v24bTjze_DCbT8nMf3vaxTko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d6d263-29f9-4613-bb7d-4938b8d0c3de/1/sH-v24bTjze_DCbT8nMf3vaxTko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:17:e2:0f:3a:94:9d:70:69:71:50:72:67:ed:85:fb:2f:08:
5c:6e:bf:f7:40:9e:1a:46:28:36:09:59:30:fb:6c:67:18:b3:
86:23:00:8f:4f:98:c7:df:d6:2d:97:be:0b:b5:cf:f5:3a:bb:
a6:7f:d6:69:94:e7:15:0a:13:cc:99:ae:5d:38:d6:17:fa:8d:
c6:d6:37:2c:16:a4:18:22:86:65:a7:b0:23:8c:31:fe:05:87:
d0:b1:ee:42:7b:32:e0:f4:0d:3f:0d:86:56:dc:31:38:27:2c:
e8:a6:bd:45:ad:d5:15:39:88:eb:80:54:05:43:ae:54:05:c2:
17:ad:d5:8b:80:e1:12:22:4b:10:36:9f:d3:d4:36:25:c0:24:
b5:9f:89:ee:a2:94:c4:64:07:77:8c:01:40:02:b3:e8:56:d5:
31:df:0a:df:e7:c8:8f:fc:2c:06:32:ad:e0:07:00:5a:f7:b6:
7e:1b:ca:49:fd:a9:fb:30:76:40:53:8a:41:0c:fc:7f:25:5f:
28:00:b7:cb:da:d3:56:a5:17:72:29:6c:67:c3:f9:5d:6d:27:
71:57:74:3f:72:92:79:ae:f1:b6:49:86:06:e9:12:49:52:92:
a7:8f:1d:d8:ae:78:2d:aa:96:31:21:0c:06:64:af:7f:9d:b6:
29:21:e4:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:40 2025 by rpki-client