Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/25cdb4-e508-4b37-81bc-36f82bd379bd/1/sQw889xTylScA-T19G2RzpC44HA.mft
File: sQw889xTylScA-T19G2RzpC44HA.mft (raw, json)
Hash identifier: JtJ8evuzdgTqEd+5ndvrM1c9t6Lzv0lbVx/sBeAdwSs=
Subject key identifier: F0:72:27:E9:6F:AC:3A:9C:88:38:12:9D:24:3A:84:AE:BA:FD:25:E3
Authority key identifier: B1:0C:3C:F3:DC:53:CA:54:9C:03:E4:F5:F4:6D:91:CE:90:B8:E0:70
Certificate issuer: /CN=b10c3cf3dc53ca549c03e4f5f46d91ce90b8e070
Certificate serial: 0195E15A390557ABA3C1A45EC23648E5DF73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sQw889xTylScA-T19G2RzpC44HA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/25cdb4-e508-4b37-81bc-36f82bd379bd/1/sQw889xTylScA-T19G2RzpC44HA.mft
Manifest number: 14D7
Signing time: Sat 29 Mar 2025 10:02:21 +0000
Manifest this update: Sat 29 Mar 2025 10:02:21 +0000
Manifest next update: Sun 30 Mar 2025 10:02:21 +0000
Files and hashes: 1: FbIoob4iTw44eH-Dt8h61MoAIPY.roa (hash: 7Jgl5oeZbwQ2DvaEShI936iS6DHQaWaMAl7kfq1Du28=)
2: sQw889xTylScA-T19G2RzpC44HA.crl (hash: /fZeQ60/rmHrs2aM3dZH7614shONA1U7VEuWSiWq18o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:5a:39:05:57:ab:a3:c1:a4:5e:c2:36:48:e5:df:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b10c3cf3dc53ca549c03e4f5f46d91ce90b8e070
Validity
Not Before: Mar 29 10:02:21 2025 GMT
Not After : Mar 30 10:02:21 2025 GMT
Subject: CN=f07227e96fac3a9c8838129d243a84aebafd25e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d9:ad:49:81:2e:d8:a4:5b:68:9e:77:21:54:
95:d4:ea:5f:d1:be:c0:eb:f9:a3:0d:87:47:c2:59:
79:2d:74:81:f7:32:d1:f3:c0:c6:24:22:ed:06:b2:
12:46:57:c8:11:40:3c:d8:de:ea:b6:42:e3:7f:01:
72:ef:fb:ce:60:73:9b:69:28:28:0b:e8:26:0c:e3:
73:4e:5d:c9:76:d9:73:e4:3d:b8:14:55:44:28:67:
14:41:0d:f6:67:ed:a0:2e:62:3a:fa:7e:59:6d:23:
c9:de:2f:a6:19:2c:8b:6a:ce:e9:c0:64:14:69:c6:
4b:e6:4e:4a:aa:70:76:74:f6:e8:12:c0:b8:57:64:
86:84:c5:45:be:55:cf:d8:9a:33:ae:53:5a:ce:24:
a6:8f:8b:b4:60:88:66:91:a8:da:75:3a:e7:03:f5:
8c:78:07:1a:6e:a4:2f:f6:6c:b6:5c:5e:22:e2:e2:
30:f1:18:f2:45:23:db:9a:df:8b:28:32:ec:d2:af:
d6:b0:80:92:03:14:34:27:94:e1:f2:c7:93:31:46:
23:7f:2d:c9:35:31:6b:92:92:43:cd:a4:03:f3:15:
e6:b4:89:8b:13:70:a6:3d:c1:29:24:fe:cb:d5:0d:
5b:cc:aa:24:64:71:3c:ce:68:17:d5:24:8a:bd:c8:
00:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:72:27:E9:6F:AC:3A:9C:88:38:12:9D:24:3A:84:AE:BA:FD:25:E3
X509v3 Authority Key Identifier:
keyid:B1:0C:3C:F3:DC:53:CA:54:9C:03:E4:F5:F4:6D:91:CE:90:B8:E0:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sQw889xTylScA-T19G2RzpC44HA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/25cdb4-e508-4b37-81bc-36f82bd379bd/1/sQw889xTylScA-T19G2RzpC44HA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/25cdb4-e508-4b37-81bc-36f82bd379bd/1/sQw889xTylScA-T19G2RzpC44HA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:f6:6f:86:d6:f3:b2:d0:a8:af:61:40:de:91:eb:c6:f9:58:
19:c8:a0:8c:3f:87:d3:a9:76:b2:7b:7c:50:6d:53:aa:ca:82:
cc:ce:e4:8e:f7:3b:a1:08:1e:6b:ec:e1:7d:ad:72:8e:ce:e2:
de:43:22:4e:ae:e3:73:9e:0c:75:e2:e3:6c:2e:d1:db:8f:9d:
db:dd:3a:7f:e7:73:e3:78:44:2f:01:a5:b2:1d:2f:fa:a6:10:
f0:0f:69:f6:d9:8a:a9:6a:be:95:46:85:c6:da:60:83:bb:44:
c2:02:de:d1:5c:aa:b6:26:25:ba:56:5c:72:a4:22:a3:91:9c:
6c:20:0d:00:ec:e8:d7:34:59:8f:70:a9:57:35:48:70:2c:3c:
4c:a8:23:86:cc:49:9a:4c:6c:5f:22:61:ed:24:bb:49:8e:92:
bb:51:01:e0:8a:1e:f2:09:a8:c8:df:d4:58:70:0c:7d:f5:89:
0b:0a:7e:c4:31:9f:15:c7:fd:6f:23:f5:82:08:04:91:f0:90:
ac:eb:57:35:a2:3a:3a:1d:77:28:63:51:26:07:80:f7:e7:fc:
2e:1d:87:c2:da:f9:82:e9:01:15:cd:58:1b:fe:6f:9f:5a:4e:
97:11:2f:15:6d:33:1e:ab:79:df:08:85:c7:5f:5f:64:36:3a:
2c:67:ee:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 14:32:19 2025 by rpki-client