Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/2f48bd-a8e3-487b-a274-078510ceac0d/1/S9ReWCBqG51Z7d-o-YizJxe_nGs.mft
File: S9ReWCBqG51Z7d-o-YizJxe_nGs.mft (raw, json)
Hash identifier: t3T7tuylYJHBE5X3s60oLwOndWvbTLJvnBwx95ZVQ1E=
Subject key identifier: DB:8E:4B:E2:97:DA:96:21:C1:7D:3C:A6:9F:20:24:BB:94:9F:9B:C3
Authority key identifier: 4B:D4:5E:58:20:6A:1B:9D:59:ED:DF:A8:F9:88:B3:27:17:BF:9C:6B
Certificate issuer: /CN=4bd45e58206a1b9d59eddfa8f988b32717bf9c6b
Certificate serial: 0194BC72B0A800722EB135DEB554FB5B29EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S9ReWCBqG51Z7d-o-YizJxe_nGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/2f48bd-a8e3-487b-a274-078510ceac0d/1/S9ReWCBqG51Z7d-o-YizJxe_nGs.mft
Manifest number: 056B
Signing time: Fri 31 Jan 2025 13:00:20 +0000
Manifest this update: Fri 31 Jan 2025 13:00:20 +0000
Manifest next update: Sat 01 Feb 2025 13:00:20 +0000
Files and hashes: 1: S9ReWCBqG51Z7d-o-YizJxe_nGs.crl (hash: t9R9L+tI8IPSEVnVHRh0/TxXKBST1CBl4d9rZ1Ypywo=)
2: uNPxSzoBaXvBOJFQn-2SS8eLdrE.roa (hash: aQ7mvpV3ivI5FkoVAB6sSeBflcpGk3YWeApRgwYyH1g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:b0:a8:00:72:2e:b1:35:de:b5:54:fb:5b:29:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bd45e58206a1b9d59eddfa8f988b32717bf9c6b
Validity
Not Before: Jan 31 13:00:20 2025 GMT
Not After : Feb 1 13:00:20 2025 GMT
Subject: CN=db8e4be297da9621c17d3ca69f2024bb949f9bc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:47:89:e7:9a:1f:43:9e:99:a8:f5:ea:60:3e:
b7:0f:16:ab:9c:ad:43:ac:ea:37:ec:7b:05:d7:7f:
34:4c:f9:de:dc:99:37:b3:d6:f1:1a:50:33:68:4c:
29:a4:5a:4d:5d:b8:73:59:27:cb:f7:1d:51:05:d6:
23:61:8e:84:66:54:9c:f2:e5:94:31:df:79:d0:e6:
e2:68:0d:4b:e8:de:78:d4:43:36:f7:d9:1a:0e:65:
ce:1d:dd:d1:9d:8a:7b:37:a0:23:a9:12:4b:e0:6e:
1b:d0:ec:79:c7:7d:c8:3f:25:82:14:a7:bc:fd:81:
cd:52:cc:cd:71:52:f2:f0:31:ab:fd:9e:eb:69:d9:
6b:4b:f4:65:0f:33:56:a9:88:0a:6e:f3:12:0c:f5:
4f:79:79:66:70:90:f7:ce:c9:bb:fc:f1:66:8b:56:
bb:48:a3:0f:e9:8c:d6:4d:4d:5b:e0:34:a2:b8:b1:
b0:5c:60:9f:2a:01:4f:38:4b:d0:86:80:97:b2:b7:
d8:c9:69:93:b1:01:45:29:84:2d:69:7b:b4:72:4f:
3b:1f:56:fa:c2:50:11:af:f3:07:32:f8:a2:a3:2a:
82:cb:69:7e:0a:c1:82:4a:38:c5:b1:e2:bc:a0:cb:
7e:df:97:cc:84:2e:74:aa:1a:d3:99:b8:64:fb:8c:
44:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:8E:4B:E2:97:DA:96:21:C1:7D:3C:A6:9F:20:24:BB:94:9F:9B:C3
X509v3 Authority Key Identifier:
keyid:4B:D4:5E:58:20:6A:1B:9D:59:ED:DF:A8:F9:88:B3:27:17:BF:9C:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S9ReWCBqG51Z7d-o-YizJxe_nGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/2f48bd-a8e3-487b-a274-078510ceac0d/1/S9ReWCBqG51Z7d-o-YizJxe_nGs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/2f48bd-a8e3-487b-a274-078510ceac0d/1/S9ReWCBqG51Z7d-o-YizJxe_nGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:b0:69:91:73:d0:0f:89:3f:e7:08:cc:a9:da:a7:7d:ba:9c:
28:9f:fb:82:12:b5:5c:f8:25:f5:ef:d5:14:03:55:d5:71:28:
2f:49:aa:ed:7e:32:bd:61:bb:fc:68:25:39:9a:fd:f9:e5:9c:
e1:4e:7f:ec:76:20:b3:fe:7d:61:22:d1:41:ca:e7:0d:c6:15:
de:ca:32:47:17:31:21:f7:51:0e:34:8e:ee:23:6c:cd:61:ef:
c5:2d:b1:fd:e5:5b:d2:17:85:6b:2c:1f:f1:23:90:2f:eb:08:
c6:bd:f5:f1:d8:43:13:59:dd:d8:1d:e3:41:b3:db:e3:88:3c:
8d:26:ff:e4:5a:50:78:b4:75:4c:27:60:6f:04:94:e7:f3:ba:
96:a4:21:1e:10:45:b8:97:9d:81:62:71:f6:bf:87:89:35:04:
aa:1b:3f:dc:4d:09:2f:f0:c4:8b:7c:9c:ff:8f:54:94:a9:de:
ee:66:31:40:f6:7e:1e:3e:b7:d8:93:df:2f:2b:bf:5e:23:96:
40:66:a0:3b:84:30:20:3d:a2:2b:76:60:ed:6a:9f:2c:dc:a5:
ce:ef:cc:27:e2:46:18:c9:d5:34:5d:3d:18:b6:3b:45:c7:3e:
f8:38:8e:c5:9f:e8:14:fb:0c:7f:ab:aa:33:58:c6:df:2e:80:
f0:10:cb:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:39:24 2025 by rpki-client