Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/s_7bUAlSbwxrrUI_AM2gigkzt4s.mft
File: s_7bUAlSbwxrrUI_AM2gigkzt4s.mft (raw, json)
Hash identifier: 9VPybZNFscg46ZRlDYyQg2gbHsoBzBmyxFICSdit9hw=
Subject key identifier: F7:59:F2:C5:8A:EE:C0:30:85:FC:03:B6:4C:D6:17:96:DA:E3:3A:82
Authority key identifier: B3:FE:DB:50:09:52:6F:0C:6B:AD:42:3F:00:CD:A0:8A:09:33:B7:8B
Certificate issuer: /CN=b3fedb5009526f0c6bad423f00cda08a0933b78b
Certificate serial: 0194BD17B33792667E9431743BFEEA382BD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s_7bUAlSbwxrrUI_AM2gigkzt4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/s_7bUAlSbwxrrUI_AM2gigkzt4s.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 16:00:34 +0000
Manifest this update: Fri 31 Jan 2025 16:00:34 +0000
Manifest next update: Sat 01 Feb 2025 16:00:34 +0000
Files and hashes: 1: 0tQcefpfubMAiDK8yBCYIdHUFe8.roa (hash: MGbilktJn2FXD9Deb4HrkutAMaDvrial7VVm5dZ7Uxo=)
2: s_7bUAlSbwxrrUI_AM2gigkzt4s.crl (hash: ehS3Ws6WxyqLCOh83yNHPuwxpTZZx/HicWbeFyJ5vXU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:b3:37:92:66:7e:94:31:74:3b:fe:ea:38:2b:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3fedb5009526f0c6bad423f00cda08a0933b78b
Validity
Not Before: Jan 31 16:00:34 2025 GMT
Not After : Feb 1 16:00:34 2025 GMT
Subject: CN=f759f2c58aeec03085fc03b64cd61796dae33a82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ca:28:dd:2d:5d:04:9d:7e:3c:4d:31:b5:09:
4c:91:59:da:2d:9b:3f:39:f5:af:bc:e6:09:1f:1a:
e3:6a:2d:02:7e:9a:29:7e:0c:2f:22:26:c9:00:38:
60:eb:19:a3:dc:5e:48:c4:a8:98:63:42:75:e3:b3:
e7:5c:ac:25:c2:c2:7a:a5:59:b2:d4:93:26:b1:30:
96:f0:17:67:fd:fe:e6:ad:98:f7:41:0d:0d:e9:d4:
35:aa:19:dd:6e:fa:36:bf:78:c6:34:85:47:1d:29:
9d:0b:c0:fd:70:c1:d4:78:29:1b:32:a9:f6:67:58:
11:51:d6:a9:9b:02:04:56:00:a8:f8:64:4e:9a:83:
1f:25:d1:81:ce:b4:db:fc:41:60:2c:86:d5:01:34:
d0:41:65:1a:06:c9:99:32:a5:e0:70:e1:61:65:d8:
c1:30:ec:c1:4d:a8:29:40:24:51:1c:9d:16:80:a7:
1b:ac:14:95:f2:4e:99:98:e9:9d:67:18:98:10:c9:
5c:05:8d:43:65:bc:f5:5e:d0:77:21:35:28:63:c0:
54:26:ff:43:bb:06:e1:ec:df:fe:fb:2c:74:52:c6:
45:81:a1:29:1c:54:5a:55:84:ec:d6:5f:41:4b:8c:
3b:59:b2:8d:ee:dc:64:22:f0:a4:fc:d4:9e:ec:0e:
dc:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:59:F2:C5:8A:EE:C0:30:85:FC:03:B6:4C:D6:17:96:DA:E3:3A:82
X509v3 Authority Key Identifier:
keyid:B3:FE:DB:50:09:52:6F:0C:6B:AD:42:3F:00:CD:A0:8A:09:33:B7:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s_7bUAlSbwxrrUI_AM2gigkzt4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/s_7bUAlSbwxrrUI_AM2gigkzt4s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/s_7bUAlSbwxrrUI_AM2gigkzt4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:88:f7:ee:2f:bf:20:71:fc:cf:a2:01:75:a3:88:10:36:4c:
7b:a3:e9:9e:1c:1e:4c:5b:0c:b6:f6:00:80:62:3e:79:92:19:
6c:d2:6f:d9:25:88:a3:e2:3a:72:a9:7d:b5:96:f4:ba:11:89:
05:ee:34:a4:25:45:43:44:9f:6c:0c:36:57:de:74:d4:b6:90:
b7:50:9e:71:16:ec:3b:23:0c:25:dc:40:bc:ef:82:70:4e:40:
24:c0:ad:ba:9b:9f:8c:25:99:ae:fd:36:1e:2c:68:1d:ec:55:
21:9d:fd:47:9e:93:0e:e3:6d:ff:dc:b6:6b:56:e7:5e:e7:ea:
76:c0:1d:ab:b7:26:c9:42:45:2d:ea:65:7b:a5:f2:43:67:4b:
23:11:6e:2d:2b:c1:b9:26:3f:52:61:8a:fb:4d:6d:1d:b1:18:
6a:19:2e:56:94:ae:bc:f0:9f:ae:84:d8:0d:d6:b7:fd:b5:2e:
30:a8:58:77:d7:32:9c:f1:52:8f:58:d3:ac:4d:66:2a:94:3c:
c2:e7:3f:d2:92:bb:e6:24:67:04:3d:c5:b0:78:46:60:d8:ba:
3e:35:4e:eb:64:9e:c9:37:54:35:24:5a:0f:6d:17:1b:0e:1e:
9d:a8:e5:23:8b:1a:ba:c9:d9:a2:21:51:07:4e:0d:66:4a:47:
27:9a:da:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:34:19 2025 by rpki-client