Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/880eb2-fa65-47ca-8a00-6480c3d1f4e4/1/sgkwhUDE35ubt9Yyf6e11JAIBow.mft
File: sgkwhUDE35ubt9Yyf6e11JAIBow.mft (raw, json)
Hash identifier: yPySHx1FOfqdzefMGwFw9k7Kcjx92K3W3L89cwJWiNQ=
Subject key identifier: D3:11:EC:60:5C:51:67:35:BE:94:50:D1:9E:73:B1:51:9E:4A:59:8F
Authority key identifier: B2:09:30:85:40:C4:DF:9B:9B:B7:D6:32:7F:A7:B5:D4:90:08:06:8C
Certificate issuer: /CN=b209308540c4df9b9bb7d6327fa7b5d49008068c
Certificate serial: 0195E190433ED5FA32A1DFBF0FC9438F4BE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sgkwhUDE35ubt9Yyf6e11JAIBow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/880eb2-fa65-47ca-8a00-6480c3d1f4e4/1/sgkwhUDE35ubt9Yyf6e11JAIBow.mft
Manifest number: 01E1
Signing time: Sat 29 Mar 2025 11:01:22 +0000
Manifest this update: Sat 29 Mar 2025 11:01:22 +0000
Manifest next update: Sun 30 Mar 2025 11:01:22 +0000
Files and hashes: 1: qVO6LhE7z2bZkoKlkX0beS7hTAc.roa (hash: XTXUYf4gL001nX+kLZ++ZcjMPFy332S2u/yOlN4Emdo=)
2: qnIt-FemLvN0LrzCWdq4IFMKMh0.roa (hash: XtaUj5IrA/ML4502o9zY4/e7MPms6zhSGFr03ZO20B4=)
3: sgkwhUDE35ubt9Yyf6e11JAIBow.crl (hash: G3mlEeAwOgotLTeNxOiw8fdK4dvEHTG1rmsP3g+tJxc=)
4: tkTC2VvHSyv0pveynJI-6L4hd0I.roa (hash: 5vfe3u4feYrCZTyQJo1lzJFnHS+4DwphvDI7Mkx8veI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:90:43:3e:d5:fa:32:a1:df:bf:0f:c9:43:8f:4b:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b209308540c4df9b9bb7d6327fa7b5d49008068c
Validity
Not Before: Mar 29 11:01:22 2025 GMT
Not After : Mar 30 11:01:22 2025 GMT
Subject: CN=d311ec605c516735be9450d19e73b1519e4a598f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:54:61:9f:6f:5f:17:51:9b:1c:8f:dc:25:d0:
c7:58:25:09:9f:89:92:d4:16:3a:13:d8:e6:15:10:
a2:77:df:f2:35:d5:ad:ae:28:75:6b:36:69:60:5d:
c5:a7:21:5c:2c:66:d4:bd:2f:59:48:e6:c2:fb:e3:
54:b5:db:4e:2c:c2:e3:13:27:e5:f5:cd:c4:cf:f9:
45:35:81:37:72:75:51:43:90:43:e3:a1:7b:48:a3:
f4:ad:cd:70:c9:9f:c1:04:e3:07:8f:c7:2e:f6:02:
fd:aa:fd:67:fc:0c:89:98:00:83:be:17:bd:51:f2:
7b:76:c0:b0:51:de:03:e7:d8:7e:7d:e2:b6:ae:1a:
43:6f:a8:c7:ad:7d:4b:de:8c:7a:8e:03:50:78:f7:
11:d1:49:56:25:1d:27:b7:34:c1:25:82:ae:d5:15:
7a:a5:63:61:a7:05:26:97:f4:fc:d2:79:5d:08:64:
e3:9f:ec:e3:23:49:cc:e8:7c:12:c4:5d:7a:46:db:
2b:7f:ae:2e:ab:64:b2:7f:82:1d:11:a5:de:6e:76:
78:b2:c8:55:2e:1e:8a:85:63:17:7e:18:ee:4b:d4:
ce:c7:92:19:2e:fc:f4:f7:3a:16:39:4d:a7:44:9d:
b6:94:e7:0f:ad:fc:85:2f:d4:f6:c9:7e:a7:c5:9d:
71:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:11:EC:60:5C:51:67:35:BE:94:50:D1:9E:73:B1:51:9E:4A:59:8F
X509v3 Authority Key Identifier:
keyid:B2:09:30:85:40:C4:DF:9B:9B:B7:D6:32:7F:A7:B5:D4:90:08:06:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sgkwhUDE35ubt9Yyf6e11JAIBow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/880eb2-fa65-47ca-8a00-6480c3d1f4e4/1/sgkwhUDE35ubt9Yyf6e11JAIBow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/880eb2-fa65-47ca-8a00-6480c3d1f4e4/1/sgkwhUDE35ubt9Yyf6e11JAIBow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:d3:87:3d:31:1f:c5:9f:2c:79:77:2b:72:71:93:1e:eb:2d:
ca:d5:44:a9:46:e3:3e:54:de:32:e8:66:80:a3:c8:f0:d6:e3:
c0:47:ea:41:92:76:15:0b:4c:7f:14:18:f5:ea:83:97:4c:18:
c3:dc:55:fb:ec:b9:1f:be:df:22:bd:1a:e7:b8:c2:08:f9:a0:
df:40:7b:22:9c:d9:95:8c:fe:0e:1a:6f:87:b1:cb:d2:48:58:
c4:57:23:dc:34:f5:aa:38:2a:69:9a:aa:9c:b4:93:15:67:57:
6f:0a:9f:1e:94:8a:79:c6:1d:44:e3:8d:f3:b9:3c:2d:69:6d:
1a:49:39:8f:8c:fe:ad:68:bf:32:a5:14:6c:44:e6:92:9b:1b:
61:7d:89:25:9b:52:f2:4f:b4:93:4d:3a:e7:a9:c1:99:f2:93:
05:0f:0c:3f:5a:0f:4a:1f:cf:65:10:ed:da:15:ec:15:be:d9:
c7:91:41:12:5e:a2:a2:cd:09:09:ac:bc:9a:9c:51:e9:5f:5c:
cf:e0:d6:73:46:91:8c:3f:91:b7:e6:10:98:50:97:33:e1:e6:
20:9a:d7:be:b3:ee:2c:6e:d0:d8:db:77:11:fd:33:c8:e4:b1:
e0:7d:4f:54:5a:3c:1c:0b:16:13:9c:67:86:39:cf:4c:80:58:
90:6c:16:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 18:26:04 2025 by rpki-client