Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/2adc39-3630-425f-af29-fbb0d3c10423/1/sWq92UIPBLqcHNLDTcezUpiK-Nk.mft
File: sWq92UIPBLqcHNLDTcezUpiK-Nk.mft (raw, json)
Hash identifier: b/EoL9LuM0Uit1zKUGJhDJAwVBMAHP76gXcE84y2I9k=
Subject key identifier: 28:F8:D0:9D:0A:17:E8:9A:E5:CF:EE:91:24:84:2A:89:1B:01:9D:5D
Authority key identifier: B1:6A:BD:D9:42:0F:04:BA:9C:1C:D2:C3:4D:C7:B3:52:98:8A:F8:D9
Certificate issuer: /CN=b16abdd9420f04ba9c1cd2c34dc7b352988af8d9
Certificate serial: 0194BD4ECB59E8A0FB0359ECDA9071DA0A25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sWq92UIPBLqcHNLDTcezUpiK-Nk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/2adc39-3630-425f-af29-fbb0d3c10423/1/sWq92UIPBLqcHNLDTcezUpiK-Nk.mft
Manifest number: 1167
Signing time: Fri 31 Jan 2025 17:00:45 +0000
Manifest this update: Fri 31 Jan 2025 17:00:45 +0000
Manifest next update: Sat 01 Feb 2025 17:00:45 +0000
Files and hashes: 1: SX7CKkNX5ke670AWCb1741Boh3c.roa (hash: /+lvUIY6Nj8pitkJ880DAygWMpOJMtNOHpSYINj0dno=)
2: sWq92UIPBLqcHNLDTcezUpiK-Nk.crl (hash: FNmHlyRaRpETVPw1raFMvoWuivV4LWV1YCMYltDhoJA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:cb:59:e8:a0:fb:03:59:ec:da:90:71:da:0a:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b16abdd9420f04ba9c1cd2c34dc7b352988af8d9
Validity
Not Before: Jan 31 17:00:45 2025 GMT
Not After : Feb 1 17:00:45 2025 GMT
Subject: CN=28f8d09d0a17e89ae5cfee9124842a891b019d5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:0b:2c:da:68:68:de:75:0f:3b:2d:9d:83:69:
46:1a:18:0f:2a:1e:9f:f2:a3:db:e5:ef:33:b0:d6:
bb:32:ff:44:e8:e2:4f:be:f7:30:5d:f8:ac:f3:db:
5c:83:b9:9b:c5:07:0d:7f:5a:45:f2:1b:b7:fd:3f:
d5:03:e8:9c:58:58:45:13:40:ef:fc:f8:d5:e7:a3:
6f:98:30:98:a7:0f:e1:13:12:1d:fb:92:ab:79:92:
2d:d3:f5:dc:9a:c5:0e:d5:68:f6:0f:52:14:24:ef:
11:d0:8e:9c:b5:9c:14:37:2d:be:23:a1:7b:26:1c:
30:b6:bf:73:f3:78:5f:69:ca:97:0b:ad:1a:0b:4d:
20:a1:14:7f:d2:75:e9:58:73:ec:cb:a3:6f:43:2c:
10:e1:de:f8:96:06:fd:12:af:57:53:93:c3:e2:d9:
20:9f:62:d9:ed:cc:4d:b3:4b:f3:ad:26:49:29:42:
d3:0a:fa:e0:d2:32:d0:73:34:d4:1b:6a:ae:6d:22:
81:85:1a:5d:54:64:14:bb:0e:1b:77:5f:a3:6b:c8:
0c:0a:5b:11:0d:d6:00:43:84:d4:db:d9:85:06:cb:
02:6c:2f:61:e3:81:56:c0:0d:1a:44:dc:ac:7a:75:
29:8c:74:c8:9e:f1:9c:f7:a8:8e:e5:08:d3:dc:a3:
f1:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:F8:D0:9D:0A:17:E8:9A:E5:CF:EE:91:24:84:2A:89:1B:01:9D:5D
X509v3 Authority Key Identifier:
keyid:B1:6A:BD:D9:42:0F:04:BA:9C:1C:D2:C3:4D:C7:B3:52:98:8A:F8:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sWq92UIPBLqcHNLDTcezUpiK-Nk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2adc39-3630-425f-af29-fbb0d3c10423/1/sWq92UIPBLqcHNLDTcezUpiK-Nk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2adc39-3630-425f-af29-fbb0d3c10423/1/sWq92UIPBLqcHNLDTcezUpiK-Nk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:e9:f2:80:f7:47:2c:c3:50:11:4d:1b:6d:5a:c7:a4:a6:ac:
40:18:42:b2:76:74:0d:f0:2b:6f:6f:15:a2:17:6b:e8:a3:28:
d3:a0:0a:f0:3d:f7:4e:5b:9c:dd:95:dd:fd:e9:ac:ee:5c:08:
00:f2:8e:0d:c6:6d:b8:49:4b:85:1a:80:db:1c:08:d3:b7:d9:
96:86:84:23:f5:08:23:00:db:86:14:ab:13:2c:51:25:84:1e:
01:56:06:22:62:90:5d:8f:fa:5d:83:f2:b6:15:2b:9f:c8:38:
71:71:91:f0:11:49:1c:3d:8d:ae:d3:5f:05:e3:02:bb:af:83:
12:c1:50:89:4b:8a:eb:0a:c3:3f:86:da:dd:f8:8c:b1:ab:39:
12:e8:a9:16:aa:d4:26:2b:e6:fb:8c:0d:2b:58:9e:8e:d4:15:
11:a6:3a:d4:93:20:d7:00:82:89:f5:cf:d9:36:d0:07:e0:c9:
a0:4c:85:11:2a:c9:68:48:ef:c8:ce:33:e7:5a:09:ad:7f:46:
32:fc:5f:bf:d5:2e:ad:8f:81:1d:08:7e:6d:c5:ec:e8:08:85:
c4:54:40:77:c3:b4:53:9f:ed:09:7a:55:bd:c6:0a:35:b5:84:
95:e5:49:b8:2f:37:61:0d:26:e3:ba:7a:c0:45:94:b1:9e:ac:
dd:97:34:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:21 2025 by rpki-client