Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/e7bd01-432f-4bf9-80c5-897d00977ff2/1/SVls7MId0CZ3pyfvN_BolUbqUJc.mft
File: SVls7MId0CZ3pyfvN_BolUbqUJc.mft (raw, json)
Hash identifier: bwKKe13/R37CPmWsnPfuMYaju9YIDgbfpMMRXD4Z+EQ=
Subject key identifier: 8C:89:94:73:8D:02:4D:FF:28:B0:10:D9:82:71:99:89:E8:9A:BD:20
Authority key identifier: 49:59:6C:EC:C2:1D:D0:26:77:A7:27:EF:37:F0:68:95:46:EA:50:97
Certificate issuer: /CN=49596cecc21dd02677a727ef37f0689546ea5097
Certificate serial: 0194BD85969737178C2A6F6E288DFCA56848
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SVls7MId0CZ3pyfvN_BolUbqUJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/e7bd01-432f-4bf9-80c5-897d00977ff2/1/SVls7MId0CZ3pyfvN_BolUbqUJc.mft
Manifest number: 1436
Signing time: Fri 31 Jan 2025 18:00:36 +0000
Manifest this update: Fri 31 Jan 2025 18:00:36 +0000
Manifest next update: Sat 01 Feb 2025 18:00:36 +0000
Files and hashes: 1: CgdiB-LvALW6eF8te_abb7XhHzw.roa (hash: FMmsOk3IFJDqEQcmSu8en9nadePYE7fdzLtSrsLGOLw=)
2: DheYS6kXlTHMFO59gGUyPsW4eds.roa (hash: n/9tk9beMA1XkkvC1xAFHfiOMzHgwQU8810EuXnnbI8=)
3: PBiMn82gChQHdPPkS-Oqs-Fnbh8.roa (hash: egCOLbWqDbWYCFc5/6lxhgVs+rP+45wHq+Te93L2gCw=)
4: SVls7MId0CZ3pyfvN_BolUbqUJc.crl (hash: HkkFhLWNbB82N8sSXuinzraMm19oY4hv6m51nyUXuns=)
5: heiFtANLkWlLrNLuIvdxl9kb0CQ.roa (hash: TnGpURbkXAESJ2Gk47wlG4sEj84D3SKrlpwSgF/8yys=)
6: jj0FH0DBvDqihM_PehNtHmRi9os.roa (hash: YyltTND33n/AiLCX9ViD6/mj27hWtc2LPtOCmOwTReA=)
7: lH-qHFc7crMLSf4GUnVsxi7d5S0.roa (hash: mgWBS9e4WAOzI2AGy8eUIJvq5GzFNK7+k2P1TPWDi18=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:96:97:37:17:8c:2a:6f:6e:28:8d:fc:a5:68:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49596cecc21dd02677a727ef37f0689546ea5097
Validity
Not Before: Jan 31 18:00:36 2025 GMT
Not After : Feb 1 18:00:36 2025 GMT
Subject: CN=8c8994738d024dff28b010d982719989e89abd20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:11:4a:0c:e4:49:92:2e:0c:68:4d:76:60:28:
61:30:13:b0:36:03:b0:0c:0a:c0:c7:68:42:3b:1a:
0e:c8:57:28:b7:33:c2:9a:0b:f5:d8:fd:bd:c3:5d:
5d:7e:2d:8d:72:df:3b:ed:74:9a:f7:fc:83:ee:9f:
23:9a:45:4f:6a:e1:6a:f7:ac:4f:10:6b:0c:07:79:
dd:ac:85:e2:20:e9:d7:ae:45:f7:6d:89:e8:13:91:
e0:b9:a1:d7:57:31:f1:4e:e2:3a:89:1a:0a:dd:e1:
b3:1b:a2:d6:94:f6:2b:ed:df:5b:a5:1a:27:74:e5:
cc:a0:a5:37:f4:57:ee:e6:d1:f3:25:c0:d8:5a:be:
e5:a4:62:6d:a0:e0:64:09:7c:44:86:ab:b8:f2:ac:
a6:37:fa:85:8d:78:fa:7d:88:7e:f0:56:07:97:ae:
d4:98:63:85:da:33:ea:d8:d7:99:51:be:de:c4:91:
47:7f:d4:47:17:ba:5b:06:c9:79:14:f3:86:51:67:
83:a9:73:96:10:7e:e9:3d:32:46:ca:67:7c:32:77:
0c:6e:c7:bf:d9:b4:23:7b:48:85:8d:71:9b:f3:e1:
2f:4a:87:5b:54:94:f6:95:b1:0a:f4:30:c8:ad:62:
d6:16:bd:b1:88:3f:39:0d:48:76:f0:75:9f:04:7a:
9e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:89:94:73:8D:02:4D:FF:28:B0:10:D9:82:71:99:89:E8:9A:BD:20
X509v3 Authority Key Identifier:
keyid:49:59:6C:EC:C2:1D:D0:26:77:A7:27:EF:37:F0:68:95:46:EA:50:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SVls7MId0CZ3pyfvN_BolUbqUJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e7bd01-432f-4bf9-80c5-897d00977ff2/1/SVls7MId0CZ3pyfvN_BolUbqUJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e7bd01-432f-4bf9-80c5-897d00977ff2/1/SVls7MId0CZ3pyfvN_BolUbqUJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:6b:34:13:61:b6:83:23:8a:76:3a:df:4b:14:04:b0:2f:c8:
ef:3e:8a:f9:31:f6:cc:df:c7:5c:f3:6f:bb:a9:13:d0:0c:f3:
99:79:bb:f8:c9:7e:0d:60:dc:0a:d3:af:40:6d:f8:0f:d4:d7:
34:93:c7:ff:3b:1d:7d:d1:9a:03:15:dd:bc:dc:59:67:7d:1a:
be:c8:8e:eb:d1:00:c1:b7:69:d1:53:94:53:03:65:b5:0e:22:
ea:6e:64:c5:ad:1c:b7:78:d6:72:93:b2:b1:21:27:9d:08:47:
80:ec:2d:ae:02:fc:c7:9c:41:26:60:0c:7e:c5:05:b5:3c:de:
34:3b:bf:d9:a1:bf:98:71:13:f9:c2:cd:dd:32:fa:94:6b:6b:
17:d4:20:1d:4f:fa:c4:77:c4:87:b2:d0:54:57:45:5e:7c:06:
06:72:b9:65:eb:52:ed:2c:52:59:81:70:70:78:4d:ba:d6:e1:
f7:b3:b3:15:b9:d0:23:cc:03:0e:08:8e:46:37:5d:78:37:e9:
d0:d7:47:f4:aa:38:b6:93:da:a7:1b:33:b2:9f:39:36:c2:a6:
01:54:03:97:e5:8d:cb:46:a6:17:72:10:cc:cf:e8:5e:f9:9d:
30:b1:87:13:e4:5c:3d:06:8e:67:44:43:8a:38:9b:17:b6:f2:
92:5d:4d:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 15:15:50 2025 by rpki-client