Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/slpaQ70jhPiS0mXlWLRBHosjK1U.mft
File: slpaQ70jhPiS0mXlWLRBHosjK1U.mft (raw, json)
Hash identifier: L+24uOzeeGL0HDJyHLsTFL6ffIc9RPzYA0UIK1DhSzQ=
Subject key identifier: D0:4C:1F:1F:28:C8:BB:F2:6B:D5:D4:C3:FF:B1:08:7D:87:B3:5E:35
Authority key identifier: B2:5A:5A:43:BD:23:84:F8:92:D2:65:E5:58:B4:41:1E:8B:23:2B:55
Certificate issuer: /CN=b25a5a43bd2384f892d265e558b4411e8b232b55
Certificate serial: 0194BD85323BEAA10CA6070AF8823FCA5B45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/slpaQ70jhPiS0mXlWLRBHosjK1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/slpaQ70jhPiS0mXlWLRBHosjK1U.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 18:00:10 +0000
Manifest this update: Fri 31 Jan 2025 18:00:10 +0000
Manifest next update: Sat 01 Feb 2025 18:00:10 +0000
Files and hashes: 1: 1-yGyAb5aLCteBw1IK7px8umPM0E.roa (hash: sbk/bLa9eBvitwUvY7P4OBh7ripskQi0SoXdYbLT94o=)
2: slpaQ70jhPiS0mXlWLRBHosjK1U.crl (hash: L/rqHgiobJ5ySqT2FWGd4J08l+4/HI8ZZVnsmo/gWNI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:32:3b:ea:a1:0c:a6:07:0a:f8:82:3f:ca:5b:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b25a5a43bd2384f892d265e558b4411e8b232b55
Validity
Not Before: Jan 31 18:00:10 2025 GMT
Not After : Feb 1 18:00:10 2025 GMT
Subject: CN=d04c1f1f28c8bbf26bd5d4c3ffb1087d87b35e35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:af:a8:dd:f6:99:1b:1f:5e:d2:c9:bd:1c:b7:
31:26:47:45:7a:7d:c0:ff:d1:2b:88:c6:6d:c1:a7:
98:76:a2:35:f3:4b:07:e6:82:98:1e:a7:90:d9:52:
6a:9b:42:5c:b8:9c:83:34:14:27:38:44:f2:0d:dc:
38:75:92:d6:32:a5:2c:51:32:d4:f7:7a:6b:c0:82:
f9:4c:18:bb:96:7c:74:99:3a:c3:f4:56:c9:3a:a2:
32:fb:db:b4:a8:9c:80:3b:e5:d2:f5:9a:5b:34:24:
0b:be:e1:28:9b:7e:61:d6:5d:22:16:4e:54:a8:6f:
28:04:f7:29:16:de:ba:d3:8a:d4:c1:b5:95:51:01:
3a:ba:6d:64:0e:12:9d:63:94:c9:9a:5f:1e:d4:2e:
4c:7c:5c:7a:81:96:ca:2b:bf:a7:39:1e:b2:e5:38:
f1:73:4f:9e:a7:8b:d4:3f:57:71:a7:1e:95:2f:95:
d9:0f:59:d9:1d:83:66:ca:49:a7:69:bb:07:fe:4d:
f9:69:5e:d5:3e:79:97:a0:bf:3e:af:f2:31:f1:9d:
5d:55:ea:d7:87:ad:f8:10:dc:37:04:1d:90:64:9b:
73:97:7a:d8:e2:0f:1b:a7:66:cd:f5:16:46:fe:fe:
dd:be:fd:cc:8c:19:7a:b5:f0:be:6d:57:c9:3e:61:
30:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:4C:1F:1F:28:C8:BB:F2:6B:D5:D4:C3:FF:B1:08:7D:87:B3:5E:35
X509v3 Authority Key Identifier:
keyid:B2:5A:5A:43:BD:23:84:F8:92:D2:65:E5:58:B4:41:1E:8B:23:2B:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/slpaQ70jhPiS0mXlWLRBHosjK1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/slpaQ70jhPiS0mXlWLRBHosjK1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/slpaQ70jhPiS0mXlWLRBHosjK1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:85:34:d7:43:08:89:f5:33:dd:e3:08:de:bb:50:2b:3c:ad:
a6:27:e1:ed:03:57:a5:81:e4:9d:d9:b3:1d:e0:2e:0d:5e:54:
46:07:92:00:0f:07:80:cd:f0:38:b5:58:89:65:b5:db:15:cf:
6f:25:ca:a7:ee:e2:2f:c6:a8:51:1c:e2:49:b3:40:7d:47:7d:
4b:1e:b5:65:31:fe:15:23:fd:f0:88:8f:a5:86:cb:25:35:a3:
94:f0:22:bd:d7:3e:dc:66:2a:65:e2:1d:8d:b2:01:d2:0d:31:
48:a8:67:07:cc:6f:c0:09:88:95:f0:df:80:f7:ed:64:ed:1a:
02:f6:1d:5c:de:dd:b0:c6:da:34:59:54:53:08:6a:d0:11:58:
86:17:03:1a:33:df:00:45:00:d9:58:5c:7e:90:da:03:2d:0d:
d0:01:7a:a1:30:fa:38:12:84:ff:ef:54:2b:35:70:b0:8b:5e:
31:3f:b9:b5:6e:cb:78:c7:27:03:f1:b1:f6:35:7d:6b:45:d4:
19:3c:09:d8:e0:f3:1a:76:55:74:f7:6d:82:ce:1e:ea:0a:4a:
c4:b3:fb:9c:b0:e7:ec:f3:49:f0:70:fb:f4:7e:fa:22:db:1f:
a5:3f:41:68:ba:0d:b5:61:5d:22:02:a1:13:14:96:65:d6:47:
01:4c:50:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 23:42:10 2025 by rpki-client