Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/e45c52-171f-4c5c-abe8-ee96d0df0003/1/S-CVOnswPWoemgKHFgwvRg8H8iY.mft
File: S-CVOnswPWoemgKHFgwvRg8H8iY.mft (raw, json)
Hash identifier: +FXmA7eztGQve70AYhW9J8Gi+EhTgDuOpFaivkSl1QU=
Subject key identifier: 5F:E6:41:04:CC:BD:E3:F9:34:60:B0:E0:44:76:41:BD:7C:45:85:A7
Authority key identifier: 4B:E0:95:3A:7B:30:3D:6A:1E:9A:02:87:16:0C:2F:46:0F:07:F2:26
Certificate issuer: /CN=4be0953a7b303d6a1e9a0287160c2f460f07f226
Certificate serial: 0194BD85328D0DF2A97D659E353C338FC273
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S-CVOnswPWoemgKHFgwvRg8H8iY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/e45c52-171f-4c5c-abe8-ee96d0df0003/1/S-CVOnswPWoemgKHFgwvRg8H8iY.mft
Manifest number: 12FE
Signing time: Fri 31 Jan 2025 18:00:10 +0000
Manifest this update: Fri 31 Jan 2025 18:00:10 +0000
Manifest next update: Sat 01 Feb 2025 18:00:10 +0000
Files and hashes: 1: S-CVOnswPWoemgKHFgwvRg8H8iY.crl (hash: YXXcKRf33fndIBitbb4GgPcSOIJV/TJZLe1IMZur33g=)
2: oeCxzVDUfHaJOXyvnKDzLrak4gk.roa (hash: IomvdIa0fgMjIoUuc5morX/DBZMfwMxLqyV3hq96Pqw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:32:8d:0d:f2:a9:7d:65:9e:35:3c:33:8f:c2:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4be0953a7b303d6a1e9a0287160c2f460f07f226
Validity
Not Before: Jan 31 18:00:10 2025 GMT
Not After : Feb 1 18:00:10 2025 GMT
Subject: CN=5fe64104ccbde3f93460b0e0447641bd7c4585a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e2:f0:c3:25:ce:43:0d:da:af:82:fe:31:fa:
ac:e0:cb:76:33:36:bf:cb:88:01:d7:15:e8:08:6f:
8e:e1:38:5b:ec:0d:28:db:ea:47:56:19:6e:3d:d4:
00:74:47:7c:7f:de:11:e1:db:52:44:47:9b:78:97:
69:41:9e:6b:f8:aa:60:df:d2:eb:00:66:54:b6:05:
43:f5:98:7b:a8:e5:78:fe:a5:8c:da:7e:6a:7d:5e:
1d:58:62:0c:fc:2e:0a:28:4a:22:91:a7:b2:29:21:
30:41:85:48:7b:0a:89:08:22:e4:45:dd:00:04:f5:
1c:3c:6c:c2:48:15:5d:90:54:0d:a8:0f:91:ae:ee:
e1:2e:f7:2a:45:67:16:8d:cd:27:96:e9:18:d2:de:
08:11:f6:4c:a4:b4:6f:87:23:34:08:dc:d1:86:10:
92:b2:c5:01:99:74:65:aa:e5:c3:c4:5e:7d:3b:3a:
3d:38:fb:c1:4e:d3:e9:f5:3b:b0:8b:35:1b:4e:8b:
34:68:07:1d:23:19:85:5c:60:10:46:10:35:a1:aa:
e3:65:4e:45:72:7d:87:b7:28:2e:47:5b:71:5a:13:
2b:82:b5:40:d1:07:e0:a8:d6:ef:4a:02:c1:b8:6e:
be:0c:31:c3:2d:7c:7a:3e:b7:97:eb:b2:cd:7f:6b:
c7:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:E6:41:04:CC:BD:E3:F9:34:60:B0:E0:44:76:41:BD:7C:45:85:A7
X509v3 Authority Key Identifier:
keyid:4B:E0:95:3A:7B:30:3D:6A:1E:9A:02:87:16:0C:2F:46:0F:07:F2:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-CVOnswPWoemgKHFgwvRg8H8iY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/e45c52-171f-4c5c-abe8-ee96d0df0003/1/S-CVOnswPWoemgKHFgwvRg8H8iY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/e45c52-171f-4c5c-abe8-ee96d0df0003/1/S-CVOnswPWoemgKHFgwvRg8H8iY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:2f:4c:ba:cc:fa:3d:8b:bd:01:dc:a3:b2:b5:78:e5:c9:c4:
5c:91:f9:8e:13:bc:df:8f:a5:7d:3b:05:48:2e:84:cd:ae:bf:
97:c2:d1:91:56:3e:f5:9d:b9:56:87:b1:b1:a2:de:4c:3d:8e:
84:38:0f:5c:0d:26:6e:a9:58:c3:d7:b8:7d:07:e3:1e:29:61:
68:2f:93:14:ca:e8:c9:e9:ef:c9:eb:b4:65:ae:8b:20:c0:0b:
9c:bd:76:d5:bf:f7:11:39:30:59:7a:0e:85:f7:34:22:06:4f:
27:00:f2:08:97:87:06:58:bc:24:3b:26:eb:9c:91:b5:e2:56:
e4:e6:3c:46:3a:d8:0d:ea:3b:b0:79:b2:81:82:1f:9f:af:42:
9e:ce:ec:f7:e4:03:0a:1c:ff:79:ec:16:d3:62:b5:51:f5:00:
9f:63:41:21:e1:43:d8:18:6d:df:4b:c1:39:44:4f:8b:4d:bc:
09:f5:74:60:3f:ed:85:a1:24:2e:c0:2f:d6:41:6e:c3:83:6c:
cc:2d:08:67:a7:d2:3e:93:70:d6:1f:5f:22:78:3a:cb:e0:d7:
67:e3:8c:15:de:cb:be:c8:f9:40:98:bb:55:67:f0:53:5f:ee:
59:68:0e:29:1a:d4:82:a8:af:db:c8:c8:c5:06:ed:43:62:e1:
90:d9:f8:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:18:34 2025 by rpki-client