Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/20a767-7b41-463b-a6c9-5fc8e6327889/1/sUJ73NR8eEMfZioIWJAFrLULk0E.mft
File: sUJ73NR8eEMfZioIWJAFrLULk0E.mft (raw, json)
Hash identifier: 33EhcEhNX6TDniBflW+A8Q7s+ddBuScl8FNBa4O1FO4=
Subject key identifier: BF:55:B5:98:FE:AA:40:C0:FF:2C:03:03:88:CE:AD:EC:26:9A:58:8D
Authority key identifier: B1:42:7B:DC:D4:7C:78:43:1F:66:2A:08:58:90:05:AC:B5:0B:93:41
Certificate issuer: /CN=b1427bdcd47c78431f662a08589005acb50b9341
Certificate serial: 01948E87639E3BD60A31E74938999BF3293D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sUJ73NR8eEMfZioIWJAFrLULk0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/20a767-7b41-463b-a6c9-5fc8e6327889/1/sUJ73NR8eEMfZioIWJAFrLULk0E.mft
Manifest number: 09D9
Signing time: Wed 22 Jan 2025 15:00:25 +0000
Manifest this update: Wed 22 Jan 2025 15:00:25 +0000
Manifest next update: Thu 23 Jan 2025 15:00:25 +0000
Files and hashes: 1: iqbUC3RkeGwfkGzLdhu1vTKXGrY.roa (hash: RaEnfZTaOx7WzFEEDktbraYPhjg7MFND4IvOcK58KYI=)
2: sUJ73NR8eEMfZioIWJAFrLULk0E.crl (hash: x/f7IbB4n4z1Mjyi6mAhbSJUnjgcpVn4Ep8orYnaXv4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:8e:87:63:9e:3b:d6:0a:31:e7:49:38:99:9b:f3:29:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1427bdcd47c78431f662a08589005acb50b9341
Validity
Not Before: Jan 22 15:00:25 2025 GMT
Not After : Jan 23 15:00:25 2025 GMT
Subject: CN=bf55b598feaa40c0ff2c030388ceadec269a588d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:23:d8:f7:2a:90:4e:96:18:d5:3e:13:d3:c5:
4b:bc:06:7a:82:e4:20:ed:c8:f6:d5:d3:83:1d:1f:
52:52:26:62:97:0f:8d:0d:0a:0e:5d:3c:a6:5c:f9:
08:56:43:df:be:06:3f:4e:41:e3:d6:04:42:f2:ed:
86:b6:2f:2d:3b:6f:ec:9c:9d:ee:e7:ef:18:c2:e3:
87:08:e4:f5:07:5a:42:87:38:c7:7b:8b:a8:ba:ec:
3e:ad:69:3b:56:88:57:ac:99:a2:fa:49:15:41:d7:
70:2d:7b:ed:a7:cb:4e:c4:d3:8e:c7:45:cb:da:8a:
0f:00:59:84:20:e3:30:6e:20:ae:93:0c:ae:c4:72:
b3:68:e2:18:61:50:92:e4:49:c6:0e:81:21:e0:6b:
f6:8e:5e:39:11:d7:41:20:48:1d:d5:e3:b5:05:e6:
04:e1:d8:47:8b:0e:1e:21:55:41:eb:7f:02:27:5f:
e0:6c:d9:51:91:ac:22:78:3f:f7:67:91:06:87:80:
99:64:6c:b8:68:f8:80:6a:9b:a4:32:61:cb:74:46:
74:c9:4e:65:21:14:e0:33:7d:68:1a:ed:2f:c8:c9:
5c:a1:4f:e1:db:64:fd:8e:cc:6d:eb:a3:0c:91:10:
d9:36:02:b0:6b:98:b2:07:de:b7:be:8d:48:51:21:
ef:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:55:B5:98:FE:AA:40:C0:FF:2C:03:03:88:CE:AD:EC:26:9A:58:8D
X509v3 Authority Key Identifier:
keyid:B1:42:7B:DC:D4:7C:78:43:1F:66:2A:08:58:90:05:AC:B5:0B:93:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sUJ73NR8eEMfZioIWJAFrLULk0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/20a767-7b41-463b-a6c9-5fc8e6327889/1/sUJ73NR8eEMfZioIWJAFrLULk0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/20a767-7b41-463b-a6c9-5fc8e6327889/1/sUJ73NR8eEMfZioIWJAFrLULk0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:4a:2f:d6:3b:47:cd:af:28:7b:78:1d:f1:64:a3:a9:92:d5:
46:cf:56:28:99:41:39:c2:30:53:35:37:c9:4b:a4:08:fb:55:
38:24:38:e7:35:71:02:2e:d1:58:2e:19:0e:b6:44:89:be:33:
0d:f3:d5:c9:a7:91:68:87:e3:39:57:2b:fc:6f:e5:f8:ea:b8:
f0:13:7e:98:5e:62:7d:a3:e5:dd:e1:be:1e:a9:f4:3a:69:d7:
70:b5:d4:44:d7:99:20:7a:2c:30:08:6b:48:9b:c1:95:4e:28:
31:9e:24:97:b2:d9:1c:9d:8c:bd:47:ac:38:5b:59:de:65:64:
be:5d:68:2d:70:9c:f6:c8:43:31:6c:d7:a3:c0:d1:fe:ea:b9:
c5:2b:f8:13:80:4c:59:ba:43:1e:1c:69:f6:00:15:b5:3b:d3:
60:57:3f:6e:39:bd:89:0e:bf:1c:ec:06:35:44:76:bd:f9:8d:
24:46:da:6b:c7:89:d0:99:d3:52:e9:0c:c8:a9:85:63:4b:d6:
28:4e:62:7c:0a:ef:b4:24:64:3b:2b:24:7e:11:5a:b7:d7:f6:
12:14:55:da:7d:fe:5b:68:3c:a3:dd:b6:18:a3:0c:24:f4:40:
0d:d3:7e:b4:7b:ed:8a:03:16:98:83:fc:98:14:41:ba:e7:6f:
d4:10:73:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 23 19:12:54 2025 by rpki-client on console.sobornost.net