Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/08f671-3c35-450a-a90e-2cce9600660f/1/S81y1ss4Wjozxsj-VFnGhqaElQk.mft
File: S81y1ss4Wjozxsj-VFnGhqaElQk.mft (raw, json)
Hash identifier: lwjY18GteXeEwRzUm/sw2xMdSuOLALIgbU3qczeoEe4=
Subject key identifier: FE:96:E8:8F:B9:23:F8:F4:3B:B6:CB:D4:86:E7:98:77:70:48:46:F3
Authority key identifier: 4B:CD:72:D6:CB:38:5A:3A:33:C6:C8:FE:54:59:C6:86:A6:84:95:09
Certificate issuer: /CN=4bcd72d6cb385a3a33c6c8fe5459c686a6849509
Certificate serial: 0195DFD8FF0FE237B15263709AC298339CE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S81y1ss4Wjozxsj-VFnGhqaElQk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/08f671-3c35-450a-a90e-2cce9600660f/1/S81y1ss4Wjozxsj-VFnGhqaElQk.mft
Manifest number: 0F9B
Signing time: Sat 29 Mar 2025 03:01:34 +0000
Manifest this update: Sat 29 Mar 2025 03:01:34 +0000
Manifest next update: Sun 30 Mar 2025 03:01:34 +0000
Files and hashes: 1: S81y1ss4Wjozxsj-VFnGhqaElQk.crl (hash: +/Vomu9bbpnjhx5/k7iWynu6HSIXJltE/Jh+2ECgm+8=)
2: wEf4V0fjRLwMdiaytYSjwCEyTHU.roa (hash: lUa2DLkPGwF47ayLCrKzv9wyplQdvB6BMfu9nJfZZtA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:df:d8:ff:0f:e2:37:b1:52:63:70:9a:c2:98:33:9c:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bcd72d6cb385a3a33c6c8fe5459c686a6849509
Validity
Not Before: Mar 29 03:01:34 2025 GMT
Not After : Mar 30 03:01:34 2025 GMT
Subject: CN=fe96e88fb923f8f43bb6cbd486e79877704846f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:c3:d7:a6:3b:b7:9d:e5:6a:6b:40:16:4b:53:
21:85:4b:24:13:e7:4c:49:e1:f5:d5:d9:e3:71:d5:
36:5c:64:fb:d6:8e:0c:a8:22:1c:a0:28:d1:ed:9a:
42:d8:69:39:a6:d0:ab:32:37:bd:23:28:32:2e:d5:
3a:71:8d:5b:21:77:3f:50:49:68:e6:a9:f9:74:1a:
24:80:e7:7d:4b:86:9e:69:75:0e:3a:0d:30:b2:ae:
86:76:4f:13:f9:a0:44:aa:28:fc:9f:2d:f4:cd:fd:
84:54:e1:fc:5e:44:2a:e0:85:25:31:af:a2:90:e0:
a6:1e:96:33:d9:6b:5e:cf:f7:11:d4:26:cc:04:8c:
25:5a:9a:b9:b4:49:e8:b1:e7:7a:f8:6e:d1:09:d2:
6b:30:96:f1:9c:f6:56:92:42:88:25:f6:a2:46:b4:
25:c5:4a:a7:da:50:30:6c:4a:da:22:dd:f3:ba:0a:
36:7c:3c:af:91:ae:ec:1c:1c:ca:a6:37:1a:8b:fd:
de:2d:4c:80:1c:3c:d9:10:6e:48:41:44:8b:4b:84:
eb:5e:34:ac:70:b4:0b:cb:98:f3:20:70:89:76:89:
b1:c0:b1:52:46:d4:a2:8f:92:b6:c2:4e:ef:5d:46:
bc:d6:56:81:de:f9:e2:82:3d:82:92:96:f3:12:1d:
f8:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:96:E8:8F:B9:23:F8:F4:3B:B6:CB:D4:86:E7:98:77:70:48:46:F3
X509v3 Authority Key Identifier:
keyid:4B:CD:72:D6:CB:38:5A:3A:33:C6:C8:FE:54:59:C6:86:A6:84:95:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S81y1ss4Wjozxsj-VFnGhqaElQk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/08f671-3c35-450a-a90e-2cce9600660f/1/S81y1ss4Wjozxsj-VFnGhqaElQk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/08f671-3c35-450a-a90e-2cce9600660f/1/S81y1ss4Wjozxsj-VFnGhqaElQk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:4f:2e:ce:6c:28:a5:35:d7:17:e1:6d:e8:84:8b:7d:e4:fd:
98:db:22:3b:a6:c3:8f:7e:d9:3f:c2:57:1d:13:b0:bc:ea:e9:
7a:76:00:bc:0d:af:85:5d:2b:a1:a4:37:6a:0f:a8:17:7b:be:
66:1a:5e:9f:29:6e:e2:5d:2d:43:23:36:3a:07:0a:51:ae:8a:
9d:64:f1:89:e7:48:3e:02:72:8f:fb:eb:3b:ae:4f:f7:3d:ce:
11:41:53:bf:01:3a:e9:4b:46:64:be:07:c3:c2:1e:6d:28:59:
e9:a5:6b:d7:c5:bc:42:c9:71:b1:d5:5a:11:fd:31:9d:6d:ae:
25:01:a0:67:61:af:08:c1:f2:11:d5:a5:ac:0e:7d:3f:a4:0c:
27:1d:34:b5:7b:d5:cb:ef:6f:dd:c9:64:bb:46:aa:72:de:2d:
e6:dd:3e:72:92:a8:e3:12:b0:72:38:ef:88:a8:54:eb:7e:ea:
b0:73:ed:45:41:d6:04:47:8c:17:86:11:fc:82:4f:a0:f2:d1:
a8:05:aa:67:d8:e2:8e:a3:c3:0d:85:88:17:b9:d7:28:1c:ca:
29:bd:e8:4e:00:ae:12:fc:5f:38:0e:31:51:24:71:e8:97:36:
72:67:33:0d:f5:cd:99:cf:b6:d7:a9:2e:e9:1f:cf:b3:eb:f3:
5e:c2:af:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:38:38 2025 by rpki-client