Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/a0e8e3-a4e7-4a9e-b798-04e1fa808426/1/sBpZ0KYaphdEOJiMyDWY2_6lqZg.mft
File: sBpZ0KYaphdEOJiMyDWY2_6lqZg.mft (raw, json)
Hash identifier: /pFLog7ZJhw29Z28GYU8mIhbRzl4pwC+NCoGWuJ+q/w=
Subject key identifier: 06:D0:C3:CB:D0:33:C1:2F:5A:37:CF:88:F2:E2:66:71:C2:3E:27:F4
Authority key identifier: B0:1A:59:D0:A6:1A:A6:17:44:38:98:8C:C8:35:98:DB:FE:A5:A9:98
Certificate issuer: /CN=b01a59d0a61aa6174438988cc83598dbfea5a998
Certificate serial: 0194BCA9B7771D5A01B8B68FB1DD56C285E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sBpZ0KYaphdEOJiMyDWY2_6lqZg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/a0e8e3-a4e7-4a9e-b798-04e1fa808426/1/sBpZ0KYaphdEOJiMyDWY2_6lqZg.mft
Manifest number: 0F9C
Signing time: Fri 31 Jan 2025 14:00:26 +0000
Manifest this update: Fri 31 Jan 2025 14:00:26 +0000
Manifest next update: Sat 01 Feb 2025 14:00:26 +0000
Files and hashes: 1: HSNefFgXaRWCGcIv1fjoOpFklrI.roa (hash: cKpMHes+RehvKJ31+pA2N64A397k3fGtWACpN0dogjA=)
2: sBpZ0KYaphdEOJiMyDWY2_6lqZg.crl (hash: /Q6nIjLfSxslr0QOeWxsqzzs+xKjvlx/r1rxAcdIfgY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:b7:77:1d:5a:01:b8:b6:8f:b1:dd:56:c2:85:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b01a59d0a61aa6174438988cc83598dbfea5a998
Validity
Not Before: Jan 31 14:00:26 2025 GMT
Not After : Feb 1 14:00:26 2025 GMT
Subject: CN=06d0c3cbd033c12f5a37cf88f2e26671c23e27f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c9:d8:fe:72:fd:52:a8:30:6d:17:c3:73:16:
ca:ef:0c:37:d7:f1:8c:69:8c:7e:0a:99:e3:0a:28:
ac:f6:de:a9:0b:92:a1:ee:60:81:c7:ea:e5:b4:46:
e4:77:21:ca:be:cd:77:ae:85:01:04:26:f9:d2:1e:
bf:68:5b:4d:ad:f3:40:b8:64:03:df:19:68:c9:ad:
87:6b:78:24:0c:39:cd:27:f6:c6:13:fc:59:18:2d:
d8:4e:b1:77:a1:07:91:e0:04:74:b3:32:f3:fb:39:
2d:68:18:d0:34:95:09:11:fd:23:21:91:6a:df:26:
6c:2d:59:15:fa:7e:80:eb:53:41:f6:e9:45:d8:e6:
bc:1c:04:16:95:e0:f3:ec:bc:9b:02:cf:4e:b4:49:
d6:f1:40:2f:9b:5c:de:e6:58:ff:b7:8c:4b:b7:48:
df:50:3e:c2:e1:60:f1:74:f6:81:a8:b6:b4:51:95:
83:0c:82:c9:b5:46:79:dc:9e:e6:d5:0e:57:08:96:
c4:a1:7f:cd:0c:f5:fb:0c:fa:48:a3:14:d1:b3:b5:
0a:05:98:7b:5e:b3:10:da:a4:ad:3a:b1:0c:3a:02:
e6:96:de:d7:7b:3b:55:30:16:db:1a:58:cc:e7:5d:
d1:e4:1d:c8:57:a4:ec:dc:fa:59:ed:41:7d:ba:42:
fc:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:D0:C3:CB:D0:33:C1:2F:5A:37:CF:88:F2:E2:66:71:C2:3E:27:F4
X509v3 Authority Key Identifier:
keyid:B0:1A:59:D0:A6:1A:A6:17:44:38:98:8C:C8:35:98:DB:FE:A5:A9:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sBpZ0KYaphdEOJiMyDWY2_6lqZg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a0e8e3-a4e7-4a9e-b798-04e1fa808426/1/sBpZ0KYaphdEOJiMyDWY2_6lqZg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a0e8e3-a4e7-4a9e-b798-04e1fa808426/1/sBpZ0KYaphdEOJiMyDWY2_6lqZg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:7a:1e:43:ef:23:3a:35:14:4f:c7:f0:70:5b:e6:3e:aa:9a:
8e:39:c1:cd:4a:f0:f6:3e:a3:b5:aa:61:3d:26:ac:2b:eb:16:
df:c2:82:9f:25:2b:4c:41:4c:87:99:17:62:b5:48:90:a7:b8:
d3:97:5d:7f:a3:8a:9c:68:93:36:e1:9c:83:11:f2:6e:a9:1a:
27:63:5f:d5:d5:0b:12:f6:0c:25:49:f4:79:82:c7:43:ee:2f:
27:5e:2e:04:34:77:04:be:ee:24:07:da:2f:02:32:23:62:ec:
10:53:66:96:03:50:36:9a:4e:de:57:eb:51:c2:6e:d2:b3:8b:
48:bc:58:11:99:aa:52:92:0b:c1:77:cd:99:c4:2e:d2:a2:a3:
cb:b9:a5:e8:96:36:40:69:f5:14:c3:8c:cc:ac:f5:08:8f:97:
f9:85:7a:e2:b1:d4:d5:47:8d:ae:6a:a5:cf:8d:50:b6:00:0d:
ba:d1:92:f7:81:5d:7d:c4:c5:5b:37:3b:f9:7e:f9:85:ef:38:
9e:cd:2a:73:bd:3e:5e:41:e5:db:ec:16:cf:39:43:b7:a3:42:
15:22:ea:85:99:39:be:56:37:a9:79:dc:0b:63:3e:dd:39:8c:
0b:bb:26:40:8f:50:08:60:93:2a:e5:95:1c:47:d4:26:e1:d5:
25:99:bd:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:40:05 2025 by rpki-client