Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f21ee0-d730-45db-97bd-c34be03c15db/1/S5o7nhAjIJXBjSZERAzlxYoTizU.mft
File: S5o7nhAjIJXBjSZERAzlxYoTizU.mft (raw, json)
Hash identifier: PGJXQI+9cGmIrBe/arfvICjVV4SdAbM8ZzG3uD9wnUo=
Subject key identifier: 41:18:EC:C7:34:9B:E3:50:64:ED:9E:18:D1:E8:74:52:CA:3D:94:4A
Authority key identifier: 4B:9A:3B:9E:10:23:20:95:C1:8D:26:44:44:0C:E5:C5:8A:13:8B:35
Certificate issuer: /CN=4b9a3b9e10232095c18d2644440ce5c58a138b35
Certificate serial: 0194BCE0698FF63B79534C8F19D1CF5BF35E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S5o7nhAjIJXBjSZERAzlxYoTizU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f21ee0-d730-45db-97bd-c34be03c15db/1/S5o7nhAjIJXBjSZERAzlxYoTizU.mft
Manifest number: 0BC2
Signing time: Fri 31 Jan 2025 15:00:11 +0000
Manifest this update: Fri 31 Jan 2025 15:00:11 +0000
Manifest next update: Sat 01 Feb 2025 15:00:11 +0000
Files and hashes: 1: AGFXaqT3BvJjfsfWKc-WZgyT260.roa (hash: otB7RONJ2iX79r/3n1UHcffodGPsIg2+hKNGewXNd5g=)
2: S5o7nhAjIJXBjSZERAzlxYoTizU.crl (hash: lmT5Qg8Dhdy603WsKQ1kMVho/qlEgrQdFd4xZp5MACU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:69:8f:f6:3b:79:53:4c:8f:19:d1:cf:5b:f3:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b9a3b9e10232095c18d2644440ce5c58a138b35
Validity
Not Before: Jan 31 15:00:11 2025 GMT
Not After : Feb 1 15:00:11 2025 GMT
Subject: CN=4118ecc7349be35064ed9e18d1e87452ca3d944a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:84:34:9e:85:dc:4e:a5:1f:38:d9:8d:db:08:
90:32:aa:e7:9e:8a:2b:8a:e2:f8:6b:86:65:30:ae:
e5:ef:f8:13:d2:71:60:2e:e3:dc:57:1d:83:94:bf:
c8:01:cb:16:02:4d:90:d1:0a:8e:12:45:1b:3f:bb:
ca:5e:4b:23:7c:b0:74:5e:d6:29:b8:1c:30:70:87:
58:ed:70:cf:c6:20:70:40:db:22:5c:c3:21:f6:e0:
b5:52:c6:96:b7:c0:83:a0:0a:15:41:45:ac:59:27:
39:b9:0f:19:c4:8b:d0:df:de:3b:8c:2d:e0:01:8b:
5d:7f:04:7d:3a:27:82:39:f9:30:d9:89:32:c1:c6:
e6:cd:d1:42:b8:ec:3f:02:6e:cd:4e:bf:79:ec:e3:
93:19:fb:b3:c3:9c:9b:4b:e9:82:95:5b:2b:ce:28:
1b:c8:3b:09:4e:b3:2f:a9:15:ab:bc:8d:5a:34:85:
87:5f:ad:49:dc:45:4d:51:64:ab:8e:3e:89:4f:ee:
b0:3d:bc:e4:5c:9d:59:87:3b:d2:1f:b7:62:ea:fe:
60:0c:aa:ef:9a:dc:d7:f9:df:93:c4:8c:16:98:5e:
63:ad:c3:da:a7:57:63:f7:ac:a8:d1:6b:a8:34:54:
76:da:d5:8a:4b:bd:29:19:21:ba:7c:13:08:04:2e:
60:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:18:EC:C7:34:9B:E3:50:64:ED:9E:18:D1:E8:74:52:CA:3D:94:4A
X509v3 Authority Key Identifier:
keyid:4B:9A:3B:9E:10:23:20:95:C1:8D:26:44:44:0C:E5:C5:8A:13:8B:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S5o7nhAjIJXBjSZERAzlxYoTizU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f21ee0-d730-45db-97bd-c34be03c15db/1/S5o7nhAjIJXBjSZERAzlxYoTizU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f21ee0-d730-45db-97bd-c34be03c15db/1/S5o7nhAjIJXBjSZERAzlxYoTizU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:87:2c:d2:43:2d:a5:6c:9b:76:c7:b1:83:7b:2b:a7:92:eb:
0e:ba:ed:b0:8b:4f:aa:3c:69:72:2c:2c:49:3e:35:95:21:5e:
22:a7:b1:62:bb:7b:7a:9f:a5:0a:9a:ad:8f:cf:7f:dd:29:0b:
f3:f9:7e:89:52:b1:6a:67:2e:1f:13:51:a8:a8:97:82:9b:6d:
a0:d6:24:3f:e1:eb:7c:02:63:57:91:b1:36:c8:8d:32:2d:b1:
66:7e:0e:ba:ae:f8:43:b4:a4:44:4a:b4:45:97:ec:87:7e:38:
c5:af:fa:0f:5f:ff:73:82:26:3a:97:22:b6:ef:36:78:8d:64:
4e:13:e3:9f:ec:de:e7:5b:e8:d6:1a:dd:70:12:47:14:bc:f3:
f9:22:62:bd:39:74:bd:dd:ac:57:05:dd:35:99:9d:fa:70:81:
ff:25:87:de:86:38:17:63:60:1a:74:7a:f2:62:a3:b3:c9:db:
43:bf:ca:b4:9b:61:f6:a3:47:19:c5:71:06:9b:94:ab:96:81:
9f:07:02:d3:2d:d0:64:21:cc:59:43:d1:ed:d8:b6:2d:bd:6e:
e8:e5:66:3b:92:36:e3:89:75:f0:fc:88:21:17:99:95:23:1d:
ad:21:d4:a3:7b:a4:71:6d:9d:79:47:06:76:f1:cf:31:35:e6:
bc:3e:22:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:19 2025 by rpki-client