Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/d5daf8-4924-4bec-8518-aefc189fd851/1/SxzcuQuYMgFnSKfiaMwe_yOSYvg.mft
File: SxzcuQuYMgFnSKfiaMwe_yOSYvg.mft (raw, json)
Hash identifier: vLWfhIPJszE/OjTce6MgzEafcN0GrDMMFom83IqTgaM=
Subject key identifier: 2B:44:38:16:84:7B:4C:21:F7:C4:44:EE:06:4A:A0:77:C2:5C:38:27
Authority key identifier: 4B:1C:DC:B9:0B:98:32:01:67:48:A7:E2:68:CC:1E:FF:23:92:62:F8
Certificate issuer: /CN=4b1cdcb90b9832016748a7e268cc1eff239262f8
Certificate serial: 0194BD85374CFDF7C8ADE15BD987FA2C3E89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SxzcuQuYMgFnSKfiaMwe_yOSYvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/d5daf8-4924-4bec-8518-aefc189fd851/1/SxzcuQuYMgFnSKfiaMwe_yOSYvg.mft
Manifest number: 1167
Signing time: Fri 31 Jan 2025 18:00:11 +0000
Manifest this update: Fri 31 Jan 2025 18:00:11 +0000
Manifest next update: Sat 01 Feb 2025 18:00:11 +0000
Files and hashes: 1: SxzcuQuYMgFnSKfiaMwe_yOSYvg.crl (hash: ujA20X6aO3CeFCGLos7QjnJDQg83s1zq3k5A78Twni8=)
2: eiFnEmDTPMfL3dAfRXolzkxp_i4.roa (hash: 4dzfRJYq125S/BqKfHbwTEsWNU4YgfgsuuliSEpx9eU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:37:4c:fd:f7:c8:ad:e1:5b:d9:87:fa:2c:3e:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b1cdcb90b9832016748a7e268cc1eff239262f8
Validity
Not Before: Jan 31 18:00:11 2025 GMT
Not After : Feb 1 18:00:11 2025 GMT
Subject: CN=2b443816847b4c21f7c444ee064aa077c25c3827
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6c:a5:b2:2b:81:58:b6:64:32:6d:1f:c8:b4:
47:f8:cd:6a:a7:c1:8c:82:0b:8c:56:9d:7e:d4:6e:
78:ed:93:e6:8b:e9:aa:6a:6d:ce:47:3c:31:09:81:
9a:b2:c9:f9:1d:10:0c:50:66:13:34:43:a5:b5:93:
bd:bd:54:4a:90:71:8d:fc:51:09:76:1b:bf:44:a2:
69:5e:35:57:9a:cd:a1:77:e6:77:aa:4a:b1:9d:9b:
17:82:92:5f:6e:11:7c:90:f5:e4:31:94:42:55:ab:
db:17:2c:06:90:69:94:dd:cd:b7:18:92:64:fc:c3:
f8:54:d3:70:d4:34:eb:3b:07:38:e9:ba:85:15:a4:
2b:6b:7f:7c:5a:0e:e0:29:f2:89:d0:f6:c8:d8:ab:
c1:fb:ab:d5:33:c2:37:9a:38:c3:b3:2a:d2:3c:b6:
8f:ee:39:7b:97:4f:8e:e4:55:6d:1c:ae:3e:0e:10:
c9:0b:6a:19:94:59:07:dd:ad:50:e6:6b:8e:ea:2b:
82:2f:1c:3c:4b:1a:4c:b7:79:9c:7b:df:f8:b2:41:
42:9f:c7:7f:22:5d:1d:03:31:fc:d1:11:db:29:28:
ec:22:9c:65:28:94:92:4a:c0:c8:e0:7c:d4:f0:bb:
13:61:52:d7:de:61:22:76:a2:58:55:c7:fb:fe:fb:
21:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:44:38:16:84:7B:4C:21:F7:C4:44:EE:06:4A:A0:77:C2:5C:38:27
X509v3 Authority Key Identifier:
keyid:4B:1C:DC:B9:0B:98:32:01:67:48:A7:E2:68:CC:1E:FF:23:92:62:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SxzcuQuYMgFnSKfiaMwe_yOSYvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d5daf8-4924-4bec-8518-aefc189fd851/1/SxzcuQuYMgFnSKfiaMwe_yOSYvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d5daf8-4924-4bec-8518-aefc189fd851/1/SxzcuQuYMgFnSKfiaMwe_yOSYvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:7f:6f:90:90:d6:07:28:22:1a:6d:d0:63:24:cf:96:e4:61:
c1:4e:39:8a:9d:79:bd:ea:08:0c:37:1f:e4:35:e9:e1:80:6d:
1e:ba:37:dd:b8:9d:2a:57:c1:71:3e:f9:b8:1c:c0:4b:fb:b0:
be:2f:fb:28:e1:21:c6:02:e8:13:5c:94:21:24:f6:2d:76:75:
3e:c8:fa:43:3f:41:42:d7:28:39:65:cf:d2:89:7f:ce:50:2b:
89:b3:f3:e0:85:71:48:37:44:e9:7e:78:22:2f:98:e4:62:4a:
4e:d1:4e:cc:c3:5c:6b:16:ec:51:6c:ae:f8:c1:f1:aa:52:35:
82:bc:53:64:84:ae:0c:70:9c:4d:28:9f:e3:fd:0e:00:e3:8b:
69:e6:65:9a:fb:56:f3:4a:49:83:fe:a3:7a:73:3c:9f:cc:27:
c8:d2:07:17:cc:b3:f0:8f:51:e1:74:0d:47:0c:ef:c2:1b:78:
c1:fb:f8:c5:1d:ef:e7:f2:ac:c3:e9:d4:08:77:a9:8f:7a:e2:
60:8a:6a:b4:7a:15:01:63:b9:e3:4d:6f:c3:d1:c6:52:bf:19:
ea:71:a8:44:58:53:74:1c:74:4c:ec:dd:81:ed:09:04:0c:37:
59:76:f0:25:3b:da:bb:15:ef:2e:28:3d:73:00:4d:e7:78:e9:
78:db:85:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:08 2025 by rpki-client