Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/1f051b-e735-49b8-bc6d-9ef0a59927b1/1/so7x9PiCePTfGec-M4HOzXjgacE.mft
File: so7x9PiCePTfGec-M4HOzXjgacE.mft (raw, json)
Hash identifier: mvtXwnF8LX3ca8KRC74pNE54iyknac1+IqG5P+5l48M=
Subject key identifier: 53:C4:E7:18:A2:E7:B1:1B:0E:62:D1:8E:21:FC:3C:A5:2B:73:EE:7E
Authority key identifier: B2:8E:F1:F4:F8:82:78:F4:DF:19:E7:3E:33:81:CE:CD:78:E0:69:C1
Certificate issuer: /CN=b28ef1f4f88278f4df19e73e3381cecd78e069c1
Certificate serial: 0194BCA9FA88055881F1E31745F4DD097997
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/so7x9PiCePTfGec-M4HOzXjgacE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/1f051b-e735-49b8-bc6d-9ef0a59927b1/1/so7x9PiCePTfGec-M4HOzXjgacE.mft
Manifest number: D3
Signing time: Fri 31 Jan 2025 14:00:43 +0000
Manifest this update: Fri 31 Jan 2025 14:00:43 +0000
Manifest next update: Sat 01 Feb 2025 14:00:43 +0000
Files and hashes: 1: ZWC54UPrMHyZ6gth2IDDnRYsMDY.roa (hash: 4Yk1QA2QugshfW9geeysUTQ4Sub4Aja/bv1m3JJnrLU=)
2: so7x9PiCePTfGec-M4HOzXjgacE.crl (hash: Wws3/UGFVNIfKOcJOGuoRltsCS8orE3AcvI69ibViAM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:fa:88:05:58:81:f1:e3:17:45:f4:dd:09:79:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b28ef1f4f88278f4df19e73e3381cecd78e069c1
Validity
Not Before: Jan 31 14:00:43 2025 GMT
Not After : Feb 1 14:00:43 2025 GMT
Subject: CN=53c4e718a2e7b11b0e62d18e21fc3ca52b73ee7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d7:ca:dc:c4:fc:3d:25:03:d9:1c:94:f2:37:
8a:70:c0:e7:a1:68:d8:64:4d:75:a8:75:e7:3e:ba:
c3:ee:e1:c4:6f:98:fe:b5:e5:6b:a5:0f:04:fc:b3:
9c:77:a6:5e:54:8b:f7:7c:a4:64:82:d1:78:04:c2:
a3:fe:36:7f:bf:2c:29:ec:20:b5:9e:20:0c:45:98:
0d:6e:fd:53:71:24:d5:1a:a0:82:f6:15:f5:fc:40:
02:46:e4:78:e4:50:17:70:f2:6c:5b:31:5d:c3:03:
d2:f6:24:63:a0:42:69:a9:d3:fc:ae:70:72:50:d4:
31:da:95:91:21:72:0c:e9:9b:ce:09:1c:63:ed:34:
e4:3d:4e:cc:3b:b9:44:0f:95:f6:90:cb:1e:f3:57:
b9:3e:93:79:38:ec:fc:31:c9:db:e5:f2:ff:f6:70:
db:77:b3:f3:a5:d0:05:65:c4:40:63:e2:ba:af:ba:
b3:f8:79:68:54:1b:d3:0d:d9:b3:4e:28:c0:a8:07:
ed:ad:2d:22:2a:4f:61:87:04:c5:0b:d5:e8:a8:d5:
b8:cc:8f:e6:8b:e0:19:88:3d:a0:a6:92:3d:2a:47:
b9:31:98:4d:24:13:c3:c2:2a:a0:34:ed:1f:7c:93:
5b:11:15:96:05:ac:be:fa:5e:18:c3:a3:07:28:d6:
b5:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:C4:E7:18:A2:E7:B1:1B:0E:62:D1:8E:21:FC:3C:A5:2B:73:EE:7E
X509v3 Authority Key Identifier:
keyid:B2:8E:F1:F4:F8:82:78:F4:DF:19:E7:3E:33:81:CE:CD:78:E0:69:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/so7x9PiCePTfGec-M4HOzXjgacE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/1f051b-e735-49b8-bc6d-9ef0a59927b1/1/so7x9PiCePTfGec-M4HOzXjgacE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/1f051b-e735-49b8-bc6d-9ef0a59927b1/1/so7x9PiCePTfGec-M4HOzXjgacE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:8f:48:49:2b:cf:77:35:1e:bd:3b:7c:ab:4d:87:69:b0:00:
57:d0:81:32:4c:b9:ea:30:3e:ae:be:16:8f:b0:91:17:8b:92:
2e:82:5c:d7:ed:60:28:7b:2f:5f:61:98:da:29:42:4e:cf:1a:
53:e4:eb:04:82:eb:26:10:45:c6:2a:73:94:95:4a:25:0b:84:
d7:17:d7:e9:13:e2:95:48:29:e2:7f:1e:a3:b4:9b:75:2d:35:
f4:52:65:9c:72:74:46:af:13:cd:60:18:c4:49:f8:9d:27:01:
df:33:62:ab:3c:3a:4e:d5:3a:10:f4:b0:cd:6a:0a:13:a5:6e:
21:f8:78:da:de:f4:61:5c:f1:be:b0:0a:1a:4e:9d:25:41:c3:
79:e6:b0:c4:d4:96:4e:b0:0c:49:63:ae:a6:09:e1:79:23:60:
74:10:65:95:9d:36:3a:b7:5d:4b:ba:dc:38:57:1b:cd:d0:1b:
0a:ff:2a:bc:8f:e3:8e:13:a6:9f:4d:ae:e3:f1:df:bd:34:d5:
34:83:61:74:1f:22:06:26:52:53:a3:a9:bd:9b:cf:1b:d7:50:
c0:f3:ee:06:6c:3a:39:59:f6:f0:c5:98:26:51:4a:32:75:f2:
57:03:cb:3c:ba:c5:2a:0a:64:98:3a:fb:5e:34:57:62:7a:89:
26:70:e9:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:19:39 2025 by rpki-client