Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/81aa49-8b4a-4c28-a578-a605717d34ae/1/sFoGBOdodvoD5q2Gh_odtsY9OQg.mft
File: sFoGBOdodvoD5q2Gh_odtsY9OQg.mft (raw, json)
Hash identifier: CTxz0scoq+IVVfJLMhwOLPIdlB2CjiBRcs6lYswqVtg=
Subject key identifier: 34:D2:0D:4B:AE:23:6D:84:F2:95:06:1D:2A:3A:16:97:67:76:C1:D8
Authority key identifier: B0:5A:06:04:E7:68:76:FA:03:E6:AD:86:87:FA:1D:B6:C6:3D:39:08
Certificate issuer: /CN=b05a0604e76876fa03e6ad8687fa1db6c63d3908
Certificate serial: 0194BCE0A4AB565D29F2EB8BED387EE5E610
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sFoGBOdodvoD5q2Gh_odtsY9OQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/81aa49-8b4a-4c28-a578-a605717d34ae/1/sFoGBOdodvoD5q2Gh_odtsY9OQg.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 15:00:26 +0000
Manifest this update: Fri 31 Jan 2025 15:00:26 +0000
Manifest next update: Sat 01 Feb 2025 15:00:26 +0000
Files and hashes: 1: 2T5PZV0ykQrCqtWQsuyltR-_EP0.roa (hash: adHBBG4DTLEXzzbMMTMmfqzyorTjLSxY7EK7i8wkAJ4=)
2: fOGaYfmCbgoyUIfYq0nj6dp3ggs.roa (hash: k+pBFiGRIlpDeHFyJ2TjGWDmfTvqV2e7W4zXwUECFg0=)
3: hu6cElB5t5xLfzkwp-1E2pD6XpI.roa (hash: kdn6w5+MgRdzoZY9M3/FnbfXPKK9TjtWqwutVLtON4g=)
4: sFoGBOdodvoD5q2Gh_odtsY9OQg.crl (hash: NcKBp2JQ0hMNOxJKZVC3QdJVpQ+Jl5lyLNqAngP5ooo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:a4:ab:56:5d:29:f2:eb:8b:ed:38:7e:e5:e6:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b05a0604e76876fa03e6ad8687fa1db6c63d3908
Validity
Not Before: Jan 31 15:00:26 2025 GMT
Not After : Feb 1 15:00:26 2025 GMT
Subject: CN=34d20d4bae236d84f295061d2a3a16976776c1d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:49:f5:94:06:17:94:a2:15:51:9e:ed:39:82:
c7:c9:bc:a9:bc:e8:69:51:a4:82:eb:29:49:27:21:
ba:ca:9a:5b:61:80:e7:05:ad:6a:51:8a:e7:cf:12:
22:ab:f5:99:58:bd:20:f7:df:fb:ec:a4:91:9b:c5:
0c:22:1c:0e:31:68:7b:b4:e1:71:f9:9b:dd:f0:29:
e3:18:5b:45:bf:ac:90:d5:f0:10:fa:61:4d:70:1d:
6b:3d:27:3f:e9:4b:20:95:f9:8a:7c:80:9a:b2:e7:
21:bd:57:f0:29:e3:67:31:78:e9:51:2f:ca:e1:9a:
a8:63:84:d2:22:db:15:12:04:c3:da:7a:d2:22:46:
9b:8c:ff:78:6b:1e:49:75:a9:c7:18:dd:90:04:71:
bc:e7:ff:49:2f:1b:07:64:82:e3:2b:1c:b8:df:ce:
b9:f4:6d:2b:08:da:1f:30:18:b6:7f:41:49:e4:24:
9d:90:9a:d1:d8:6c:77:73:78:ec:e6:fc:83:b5:41:
b1:90:20:12:f9:79:0e:fc:5e:26:fd:61:a3:92:a3:
46:b1:11:94:2e:12:24:17:ac:7a:d8:b8:97:75:f5:
fd:ab:c8:ca:b2:cd:b6:66:d2:93:c1:bb:ef:98:7f:
11:8f:e5:80:80:6c:a0:47:b5:f9:4d:96:f4:96:1c:
5c:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:D2:0D:4B:AE:23:6D:84:F2:95:06:1D:2A:3A:16:97:67:76:C1:D8
X509v3 Authority Key Identifier:
keyid:B0:5A:06:04:E7:68:76:FA:03:E6:AD:86:87:FA:1D:B6:C6:3D:39:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sFoGBOdodvoD5q2Gh_odtsY9OQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/81aa49-8b4a-4c28-a578-a605717d34ae/1/sFoGBOdodvoD5q2Gh_odtsY9OQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/81aa49-8b4a-4c28-a578-a605717d34ae/1/sFoGBOdodvoD5q2Gh_odtsY9OQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:5d:d4:69:fa:fa:09:7a:b1:ce:fe:71:1f:04:d1:48:b3:1a:
01:35:9c:d0:ac:ac:5a:54:5d:ef:36:d9:5b:ab:9f:31:f9:64:
82:ee:0d:54:a7:2d:63:d5:af:6b:bd:f9:06:52:4f:78:65:2e:
8c:3c:af:5b:aa:49:6c:ee:c0:26:ee:ca:82:8f:31:e0:fe:f3:
7f:91:99:42:5e:65:54:7c:c8:01:66:17:8d:8f:e2:27:f1:10:
47:b6:df:3d:e6:c8:69:e5:1e:d3:11:89:b6:01:c5:af:85:71:
2c:ab:f7:60:4d:66:1a:7c:a7:4f:90:93:4c:a3:92:de:b8:1d:
ec:ae:01:f9:75:0a:8c:cf:41:d4:58:15:73:84:25:16:83:01:
e3:4a:f2:e1:d0:c7:3e:7b:2a:e0:d1:5e:65:2c:2a:d1:5e:e1:
87:7b:9a:95:81:6e:97:7d:b7:44:43:5d:da:35:73:3b:97:a1:
3f:ea:54:d7:f5:9d:2c:4a:54:18:da:67:09:82:37:fa:ec:8b:
1d:2a:15:61:0a:e1:3c:f1:14:97:d6:10:73:85:ee:ff:eb:19:
fd:8e:f2:c0:0f:82:dd:c5:79:28:26:2e:d3:05:83:ea:36:9f:
c4:5f:ba:f6:0b:61:1c:4b:79:08:1b:93:67:49:6a:9f:7f:c0:
37:12:e2:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:20 2025 by rpki-client