Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/ccaa1a-9daa-44b8-9e26-87f341888560/1/syHLgokI9DB0nuOl8qYt5fgi99E.mft
File: syHLgokI9DB0nuOl8qYt5fgi99E.mft (raw, json)
Hash identifier: M+GRWWZuGwXIuW4S9NNrrukRus3Xswoa/D6l7IkpbQQ=
Subject key identifier: 7F:19:25:E1:07:E0:2A:FC:E4:5A:76:91:DC:24:25:D5:ED:22:53:A2
Authority key identifier: B3:21:CB:82:89:08:F4:30:74:9E:E3:A5:F2:A6:2D:E5:F8:22:F7:D1
Certificate issuer: /CN=b321cb828908f430749ee3a5f2a62de5f822f7d1
Certificate serial: 0194BC04C3D4BF0B1117A9DD7449C5077554
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/syHLgokI9DB0nuOl8qYt5fgi99E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/ccaa1a-9daa-44b8-9e26-87f341888560/1/syHLgokI9DB0nuOl8qYt5fgi99E.mft
Manifest number: 0F6A
Signing time: Fri 31 Jan 2025 11:00:16 +0000
Manifest this update: Fri 31 Jan 2025 11:00:16 +0000
Manifest next update: Sat 01 Feb 2025 11:00:16 +0000
Files and hashes: 1: 7Vf5R0kVboHfQe1HmwZydUmPy3w.roa (hash: CSR8lVlOICslmIH5THMhkf2ZR8pm8M7MZ0mWBD2ElFE=)
2: syHLgokI9DB0nuOl8qYt5fgi99E.crl (hash: jdRXm5UHRrj27gqMJF92He8Rru4+3365VahXAZieI3c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:c3:d4:bf:0b:11:17:a9:dd:74:49:c5:07:75:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b321cb828908f430749ee3a5f2a62de5f822f7d1
Validity
Not Before: Jan 31 11:00:16 2025 GMT
Not After : Feb 1 11:00:16 2025 GMT
Subject: CN=7f1925e107e02afce45a7691dc2425d5ed2253a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8c:12:7f:79:ae:36:77:fc:eb:0d:00:46:91:
36:e1:b5:c6:00:5c:99:bb:87:01:6e:f8:39:36:c0:
be:f3:46:02:3e:c1:41:69:33:52:08:54:14:37:ab:
9a:3a:e8:fb:58:97:47:4a:7d:1a:36:cc:2b:51:43:
ba:11:f8:bc:46:49:e6:19:33:1d:c2:3a:44:52:90:
ff:12:48:2e:bd:79:11:1f:26:d4:90:1c:ab:6e:ba:
b1:d7:98:2f:53:eb:03:39:a3:81:b7:73:54:97:51:
b5:98:fe:cf:a4:6d:e1:d0:e5:00:c0:13:eb:a5:82:
50:5e:b9:12:93:57:b1:a8:83:df:48:0b:d5:1b:ff:
54:59:50:ef:8f:80:91:26:46:0c:a1:70:37:9d:2a:
87:21:fd:19:87:20:59:14:71:e2:25:5f:f2:5d:38:
f7:29:24:c5:c8:44:c2:f6:00:44:68:f3:ab:3f:1d:
32:e2:5f:90:ca:a3:18:7f:ab:de:64:74:72:26:6a:
6e:7f:54:dd:5a:2a:7d:d5:a3:46:96:2a:b6:38:50:
dd:c2:c5:a6:a5:17:ae:ee:5c:a3:37:f1:07:ae:31:
7b:dc:dc:6f:29:db:2f:3c:6a:06:36:7e:0e:a7:fa:
1e:f5:6f:a4:57:6f:fe:b4:fb:bb:b5:60:4e:2a:99:
8c:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:19:25:E1:07:E0:2A:FC:E4:5A:76:91:DC:24:25:D5:ED:22:53:A2
X509v3 Authority Key Identifier:
keyid:B3:21:CB:82:89:08:F4:30:74:9E:E3:A5:F2:A6:2D:E5:F8:22:F7:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/syHLgokI9DB0nuOl8qYt5fgi99E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/ccaa1a-9daa-44b8-9e26-87f341888560/1/syHLgokI9DB0nuOl8qYt5fgi99E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/ccaa1a-9daa-44b8-9e26-87f341888560/1/syHLgokI9DB0nuOl8qYt5fgi99E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:e0:2a:da:bf:09:a7:8a:1a:6c:2e:69:1b:3f:79:32:7f:7c:
cf:13:e9:ac:c3:c8:93:bd:cd:a1:34:7a:f8:2c:49:d4:a3:4f:
a1:f0:e9:21:14:f9:67:d8:fd:29:cf:eb:d0:c8:d2:a5:04:fc:
19:d8:a9:00:f0:24:36:bb:90:9b:bd:3c:b8:7c:90:c1:6f:a8:
06:6d:80:70:7c:79:7e:5d:d6:6a:e4:0b:e2:dc:54:c9:b3:66:
b0:55:c0:08:2f:81:a3:24:8c:90:40:aa:0b:42:0f:8c:56:17:
a6:2a:c1:60:77:46:82:a6:68:59:73:76:ea:ea:11:0e:39:f0:
ae:e0:5c:34:57:c5:37:9a:60:a3:de:a1:ec:fc:9c:30:a6:a0:
40:ec:a6:ab:ad:1b:1b:93:41:05:bb:ae:24:54:29:da:9a:b9:
5b:dd:38:0e:3a:54:f1:4c:5c:1f:51:94:1b:ed:6f:f3:c3:f0:
bc:0a:d9:70:80:d2:2d:d3:c0:d2:e2:da:30:6f:8f:11:1b:82:
13:b8:3a:05:d6:08:09:ce:f3:a4:20:a0:44:4b:05:33:f7:9c:
68:b5:b7:c4:a1:fc:cb:dd:2b:86:05:45:0e:45:73:c5:47:9e:
52:66:8a:07:bf:0d:b9:42:e7:11:07:84:ef:5b:e4:38:3a:a6:
41:0f:21:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:57:50 2025 by rpki-client