Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/Sp2wDLFKNKGT-ErKFEsq6x88Asg.mft
File: Sp2wDLFKNKGT-ErKFEsq6x88Asg.mft (raw, json)
Hash identifier: KeH7wlLftQqIMAtDq1+EnqklGMP6ab3qhbmX9EtPGVg=
Subject key identifier: DB:F4:71:DC:68:CB:FC:9C:EB:4D:7B:F6:1C:A9:41:48:34:D8:02:8B
Authority key identifier: 4A:9D:B0:0C:B1:4A:34:A1:93:F8:4A:CA:14:4B:2A:EB:1F:3C:02:C8
Certificate issuer: /CN=4a9db00cb14a34a193f84aca144b2aeb1f3c02c8
Certificate serial: 0194BCE0AFBDEC41ACE82A3EB600515E6EFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sp2wDLFKNKGT-ErKFEsq6x88Asg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/Sp2wDLFKNKGT-ErKFEsq6x88Asg.mft
Manifest number: 13BD
Signing time: Fri 31 Jan 2025 15:00:29 +0000
Manifest this update: Fri 31 Jan 2025 15:00:29 +0000
Manifest next update: Sat 01 Feb 2025 15:00:29 +0000
Files and hashes: 1: Sp2wDLFKNKGT-ErKFEsq6x88Asg.crl (hash: SIemh4rK/cdFzlSQcoK8m4y2daHRpvF/R8TS4abLUwY=)
2: gljC_B2rLOcaRp9AWxqW22c-7Qo.roa (hash: NoSPrUUL8y9y3Ux1jd4/HcDTr8xF/Dw/8aDNiPAZOdA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:af:bd:ec:41:ac:e8:2a:3e:b6:00:51:5e:6e:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a9db00cb14a34a193f84aca144b2aeb1f3c02c8
Validity
Not Before: Jan 31 15:00:29 2025 GMT
Not After : Feb 1 15:00:29 2025 GMT
Subject: CN=dbf471dc68cbfc9ceb4d7bf61ca9414834d8028b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:df:e5:54:62:a1:b5:39:32:ad:0f:c0:c1:95:
eb:c7:d9:7e:3f:61:4a:94:03:12:af:a0:f7:52:57:
d4:b6:42:69:7a:dd:6f:21:6a:2d:38:5f:60:98:e5:
81:1e:2a:6d:91:c2:39:55:45:c9:de:65:91:b8:99:
4a:02:8e:d6:0f:2c:5c:97:c5:c8:68:61:af:53:2f:
79:30:9d:89:35:ee:1f:65:45:e3:a7:a9:0d:c7:a3:
62:cb:86:fc:22:5c:d4:52:c9:05:ef:e8:97:1a:9c:
cc:74:8a:c5:39:97:92:bc:c2:7a:ba:a7:77:44:db:
8b:c8:c5:6d:20:29:97:1b:95:a7:83:11:12:2b:b3:
b8:4c:62:eb:ba:96:c8:27:d2:5f:ff:e8:8d:a1:ef:
e1:28:26:bb:7f:13:9b:57:f9:85:e0:7f:bc:cd:72:
8a:0f:cc:3e:62:1c:9e:24:25:08:79:7f:e5:39:58:
6f:7a:ee:5d:02:0c:a7:81:37:84:3b:fe:b7:bd:e3:
b5:d9:8c:5f:76:41:3f:cf:cd:33:61:a8:a7:63:15:
80:73:d0:ef:78:72:a8:56:b2:ea:48:65:4a:77:89:
20:b1:8c:35:4c:f2:01:83:22:cd:b5:4f:eb:48:4c:
dc:96:63:78:d8:cc:f7:9c:60:6b:c6:50:b5:7e:e9:
45:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:F4:71:DC:68:CB:FC:9C:EB:4D:7B:F6:1C:A9:41:48:34:D8:02:8B
X509v3 Authority Key Identifier:
keyid:4A:9D:B0:0C:B1:4A:34:A1:93:F8:4A:CA:14:4B:2A:EB:1F:3C:02:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sp2wDLFKNKGT-ErKFEsq6x88Asg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/Sp2wDLFKNKGT-ErKFEsq6x88Asg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/Sp2wDLFKNKGT-ErKFEsq6x88Asg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:38:45:1e:0a:a3:76:67:64:05:d5:1f:4d:2b:b3:04:05:9e:
c3:d9:5f:31:1a:b5:b7:30:ff:93:8a:4c:7b:99:76:fc:82:b4:
77:98:c8:ab:7e:7c:c0:66:95:34:44:41:08:72:25:ce:56:7d:
d3:57:ab:f1:48:89:d9:a2:04:b8:6c:b4:8a:cd:8c:c5:0a:b9:
69:59:a4:16:d1:0d:17:96:45:ab:47:1e:2c:96:bf:d3:ad:3c:
2a:38:05:0f:24:53:b1:98:9f:1d:1c:81:39:6c:68:53:c6:94:
bf:ef:bb:42:dd:88:f4:bc:14:e1:c5:a8:9d:66:ca:c8:6f:ec:
c2:0c:55:2b:bd:72:2f:05:fe:96:dd:b9:cc:0a:8a:1e:a7:0e:
50:9e:15:b7:de:11:a7:32:37:18:10:b7:f6:95:95:76:a3:5c:
e8:94:2b:2b:22:46:f7:b5:96:05:5a:34:28:74:42:7e:3c:bb:
38:f7:0a:af:7c:ac:95:cc:5b:f2:13:9b:21:e0:31:bb:ce:de:
73:35:d7:74:56:20:23:0b:12:14:49:3a:03:70:d9:d2:6e:70:
d0:73:53:0e:18:e9:b0:e4:c8:bf:41:6d:d5:01:f2:11:eb:94:
31:31:bf:bb:3f:be:72:a2:47:d7:96:04:42:14:57:9a:2c:85:
0a:ee:f0:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:28:51 2025 by rpki-client