Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/2b87c5-380d-476f-a714-5c0d92f9a49f/1/snkS_-9nB4uwa9SpAh-6lq2xgL4.mft
File: snkS_-9nB4uwa9SpAh-6lq2xgL4.mft (raw, json)
Hash identifier: vU1EwCmSk8N5DPg8iNfQrt7Eqd4sw7t2tIx3nnJ0li8=
Subject key identifier: 6E:56:A3:8A:3D:04:00:AF:07:F0:69:35:CA:43:5A:19:3B:FE:7A:0A
Authority key identifier: B2:79:12:FF:EF:67:07:8B:B0:6B:D4:A9:02:1F:BA:96:AD:B1:80:BE
Certificate issuer: /CN=b27912ffef67078bb06bd4a9021fba96adb180be
Certificate serial: 0194BC72868CA69764213ACCC873D35C89EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/snkS_-9nB4uwa9SpAh-6lq2xgL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/2b87c5-380d-476f-a714-5c0d92f9a49f/1/snkS_-9nB4uwa9SpAh-6lq2xgL4.mft
Manifest number: 0FC6
Signing time: Fri 31 Jan 2025 13:00:09 +0000
Manifest this update: Fri 31 Jan 2025 13:00:09 +0000
Manifest next update: Sat 01 Feb 2025 13:00:09 +0000
Files and hashes: 1: Q0e2nZwWTgSOnN3XYro_yC3AqqY.roa (hash: p1jDlEZ3jtWSk1Gt2ui3hdbzWJmpWW1M0qlAGcolPG0=)
2: snkS_-9nB4uwa9SpAh-6lq2xgL4.crl (hash: GJlplzBZv453M4McYbPtj07HQLEnBUwxzco0K/KLm20=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:86:8c:a6:97:64:21:3a:cc:c8:73:d3:5c:89:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b27912ffef67078bb06bd4a9021fba96adb180be
Validity
Not Before: Jan 31 13:00:09 2025 GMT
Not After : Feb 1 13:00:09 2025 GMT
Subject: CN=6e56a38a3d0400af07f06935ca435a193bfe7a0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:05:54:b6:45:12:0b:29:e5:a7:b0:88:70:79:
09:b2:1b:2e:18:9a:47:62:27:b8:5c:48:c2:67:8d:
16:cd:9f:31:34:10:56:db:b4:aa:c4:6e:09:99:ad:
6b:66:06:41:43:3a:d7:8c:f0:97:7f:1b:d1:f9:b6:
37:dc:ac:cc:54:3a:01:2d:b5:9e:c0:5d:d3:ef:81:
98:77:c3:c4:f7:ca:a8:92:8a:51:76:d9:52:95:ae:
f5:cf:b4:cc:ff:cc:18:3f:be:40:3e:d3:f7:bb:09:
ec:b9:4b:6c:4e:c6:42:95:74:29:c1:76:70:39:be:
f5:23:98:f8:d5:10:27:e5:34:ce:93:bf:f5:ea:1e:
28:03:9e:53:86:82:b6:7b:f6:8a:46:ee:f3:31:9c:
71:3c:38:74:a5:0e:81:9a:72:da:89:a3:3a:46:72:
d2:23:9c:95:4a:6d:7f:43:32:31:4e:b0:6c:ad:7c:
3b:1e:ad:69:b0:7b:9b:f7:fe:af:cc:08:82:e2:0e:
0b:97:9b:6a:06:44:c7:8c:32:8f:f3:c7:8c:54:b8:
93:b8:bb:b6:6a:a0:34:a3:d5:7e:45:60:05:25:c1:
c2:bd:89:34:d4:05:63:1d:f2:42:e9:1a:87:1b:a9:
ac:87:f8:f9:84:b3:cf:08:ea:6c:a0:db:d5:c4:8a:
c8:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:56:A3:8A:3D:04:00:AF:07:F0:69:35:CA:43:5A:19:3B:FE:7A:0A
X509v3 Authority Key Identifier:
keyid:B2:79:12:FF:EF:67:07:8B:B0:6B:D4:A9:02:1F:BA:96:AD:B1:80:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/snkS_-9nB4uwa9SpAh-6lq2xgL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/2b87c5-380d-476f-a714-5c0d92f9a49f/1/snkS_-9nB4uwa9SpAh-6lq2xgL4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/2b87c5-380d-476f-a714-5c0d92f9a49f/1/snkS_-9nB4uwa9SpAh-6lq2xgL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:ed:b4:84:55:a2:25:1a:06:a1:83:09:6e:10:03:3f:44:4f:
4e:a9:e9:ff:3a:94:5a:03:65:3a:92:32:42:81:5d:ba:d9:fb:
4f:76:9a:d2:38:52:08:7f:a5:59:1c:97:65:b2:b8:0f:25:c0:
2d:fc:c6:94:0a:30:51:c2:a6:a0:cf:ab:77:be:4a:47:d5:0d:
ef:38:a3:33:2b:ab:71:33:5f:59:1f:68:30:c3:ec:e1:b6:25:
bf:df:8a:f5:63:a2:28:de:bf:39:cc:10:8b:97:f2:93:da:94:
82:86:f1:64:e3:23:4b:2b:68:c3:0e:22:9e:45:ca:5d:8d:d6:
b9:aa:3e:93:81:b7:3c:e9:95:be:61:29:7d:df:e7:e9:45:14:
d8:46:91:48:61:15:ef:d7:17:08:e2:7d:61:4d:b2:38:e1:be:
2f:a7:4a:ed:9f:02:68:f0:0a:d2:be:88:b1:57:b0:c8:13:62:
f8:b8:b6:9d:89:ea:56:d9:c2:f6:ec:a4:64:3d:18:de:4d:25:
7f:c1:6a:97:25:29:8e:a3:a1:ff:7b:4f:8a:3c:a2:45:78:af:
e8:87:e8:b9:9a:13:1a:40:b6:08:1d:ea:06:9a:f1:8e:5d:84:
6f:96:6d:a5:f4:ca:b8:1e:be:90:e4:5f:1f:6f:ab:27:83:70:
e2:fc:8f:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:42:38 2025 by rpki-client