Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/e8bbd2-1361-41a3-90f0-5334e6b8c5fe/1/sBECIYfjOVoVJPoadUHqeTKFr8I.mft
File: sBECIYfjOVoVJPoadUHqeTKFr8I.mft (raw, json)
Hash identifier: sBFEk6n7CJenN+kkHqxe6XW/u8gcZyK8/42QiRq0Pqg=
Subject key identifier: 71:E0:17:71:9A:F4:89:5A:57:82:7E:20:8A:18:F1:56:61:AD:BA:B8
Authority key identifier: B0:11:02:21:87:E3:39:5A:15:24:FA:1A:75:41:EA:79:32:85:AF:C2
Certificate issuer: /CN=b011022187e3395a1524fa1a7541ea793285afc2
Certificate serial: 0194BC72CFBCE2BB64617B4FA35AC17A8887
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sBECIYfjOVoVJPoadUHqeTKFr8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/e8bbd2-1361-41a3-90f0-5334e6b8c5fe/1/sBECIYfjOVoVJPoadUHqeTKFr8I.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 13:00:28 +0000
Manifest this update: Fri 31 Jan 2025 13:00:28 +0000
Manifest next update: Sat 01 Feb 2025 13:00:28 +0000
Files and hashes: 1: NxzgzrcAsHWy0jDkGocEc3A82GY.roa (hash: 49MMg/vk9brRgJNoRcoYkHau0scqC/ahxGjMTh7J3YU=)
2: mPhBEESpSSmoxdu-n5OAjI6sC_I.roa (hash: 6Dj5yn1/ctkVobyO+cPsteiP8qKS3BhAZ1jJUQtNU9w=)
3: sBECIYfjOVoVJPoadUHqeTKFr8I.crl (hash: 5ePK6AntMMWD8SaGluo3fccFb66EVu6/lfrZ9RQcRKI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:cf:bc:e2:bb:64:61:7b:4f:a3:5a:c1:7a:88:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b011022187e3395a1524fa1a7541ea793285afc2
Validity
Not Before: Jan 31 13:00:28 2025 GMT
Not After : Feb 1 13:00:28 2025 GMT
Subject: CN=71e017719af4895a57827e208a18f15661adbab8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:b3:94:ac:f4:70:de:8b:52:30:21:e7:88:81:
8e:66:a9:47:c5:66:10:89:23:41:00:5b:48:0b:12:
d5:eb:a2:65:0f:02:60:ac:c7:68:c5:f2:6c:9e:cf:
54:4e:f0:0c:0d:27:18:b4:a7:77:64:71:e8:69:b8:
6d:44:30:3c:90:95:48:45:65:bb:32:4f:7f:1a:61:
b5:09:4a:64:ad:6a:31:84:6f:8e:66:ed:ff:44:4d:
9e:82:0f:3f:58:37:b9:2c:ac:1c:ee:f8:94:d0:a3:
4e:68:f5:3e:49:46:aa:b5:5a:87:41:56:71:2f:a9:
4c:3a:e7:f5:85:47:54:c6:51:9c:e2:7e:47:2f:ca:
74:fc:d7:ad:41:65:d6:ec:e8:e8:d6:8d:01:68:c8:
aa:f7:a4:96:aa:83:2d:3b:c9:ad:bb:27:15:1f:cf:
66:49:e4:3d:3a:5b:f7:8e:e0:79:c2:1e:ff:47:96:
d2:33:e8:85:08:7d:f0:4c:69:9d:a6:50:e3:11:46:
da:02:8c:2e:03:78:86:d3:24:36:d9:a9:ba:f5:49:
8e:36:2d:2d:27:5f:b9:5e:e4:64:21:59:db:e3:91:
0b:a6:32:47:60:7f:f7:1b:b1:8e:f2:bc:2f:b9:fc:
ae:e2:ca:95:a3:81:79:81:d0:84:c8:be:0e:03:68:
87:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:E0:17:71:9A:F4:89:5A:57:82:7E:20:8A:18:F1:56:61:AD:BA:B8
X509v3 Authority Key Identifier:
keyid:B0:11:02:21:87:E3:39:5A:15:24:FA:1A:75:41:EA:79:32:85:AF:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sBECIYfjOVoVJPoadUHqeTKFr8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e8bbd2-1361-41a3-90f0-5334e6b8c5fe/1/sBECIYfjOVoVJPoadUHqeTKFr8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e8bbd2-1361-41a3-90f0-5334e6b8c5fe/1/sBECIYfjOVoVJPoadUHqeTKFr8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:4f:62:6d:59:bd:7d:6f:58:80:f4:6c:49:39:c7:f9:9c:54:
7b:87:34:89:d2:f6:2a:35:b5:59:c5:85:e8:2b:ff:7d:0f:26:
66:16:0c:5d:eb:94:45:81:65:3a:a3:b0:81:85:e3:ae:80:94:
39:f7:90:12:5b:19:5e:df:a9:ed:8c:07:13:e7:c7:5b:f7:4e:
04:28:4f:c7:a6:5d:96:98:bb:13:12:24:fe:00:e6:2c:98:d1:
6a:ac:11:20:79:7a:cb:cc:9b:0f:c3:40:85:83:b1:ff:ab:1e:
25:2e:20:96:3d:2f:9e:13:15:7e:07:e6:d7:91:eb:46:ac:96:
21:9c:e6:78:77:ce:ad:d3:e3:88:f1:6a:a6:40:f0:32:8e:dc:
19:28:af:4f:70:13:a2:57:a4:25:98:f3:33:9a:4c:dd:24:ac:
15:df:44:4f:73:6f:86:fd:d8:df:fa:67:d1:00:98:b7:b5:d9:
71:74:a9:09:9d:81:d3:8c:8e:97:6b:d1:c6:26:ce:7e:b1:bd:
95:14:ca:ff:49:c7:36:6e:b4:94:90:cf:a2:10:6c:04:5f:ec:
9e:bf:72:df:4a:f5:04:02:1e:a5:a3:49:59:9d:b1:c3:e6:0b:
22:be:33:8e:29:df:bf:f0:1b:3c:32:ee:a2:4e:31:13:6e:2f:
e9:70:27:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 09:52:09 2025 by rpki-client