Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/1182cb-5f95-4cd4-b72f-46b46fc0e496/1/su0dYGb05GVO9fPMcKXZBamvgpA.mft
File: su0dYGb05GVO9fPMcKXZBamvgpA.mft (raw, json)
Hash identifier: fNmra4Zp++6bTjhKxloO9sITbjr/IlwTPZpvDBP/HXo=
Subject key identifier: 17:08:CE:FE:E5:56:FD:E3:9C:CC:FF:72:21:ED:17:52:7C:A2:C4:6B
Authority key identifier: B2:ED:1D:60:66:F4:E4:65:4E:F5:F3:CC:70:A5:D9:05:A9:AF:82:90
Certificate issuer: /CN=b2ed1d6066f4e4654ef5f3cc70a5d905a9af8290
Certificate serial: 0194BC3C120B4C2E2B34EDD454CBC5064DD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/su0dYGb05GVO9fPMcKXZBamvgpA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/1182cb-5f95-4cd4-b72f-46b46fc0e496/1/su0dYGb05GVO9fPMcKXZBamvgpA.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 12:00:40 +0000
Manifest this update: Fri 31 Jan 2025 12:00:40 +0000
Manifest next update: Sat 01 Feb 2025 12:00:40 +0000
Files and hashes: 1: 1-ltIqDmdRri_JzK-WP35nYk2cQM.roa (hash: 0bK+rteLcuTEscCNCfYnJ6bFxtebRlZJOqtPYrohMPw=)
2: Zkat7ibcLmD2h_0_XMZ8A60Ar4Y.roa (hash: S9WARRHeF7XnyVkRNyrlC/MJ9g6e/aBgMKh17IrDCTs=)
3: kLoSSyOqdGXBSQRo8VZp6L-TiaM.roa (hash: 9hIEwlHhl+bUrm5c0k44GlmKeMVBJgHOI+a/J30MoSc=)
4: kweAulzTrCvxJT9UZzTQmhyNMt0.roa (hash: 6ACNdOW4ObJspcsXRMK8EDpIbxmZVEa19iOYRQQmt+I=)
5: su0dYGb05GVO9fPMcKXZBamvgpA.crl (hash: nZvMvsy/+FwXyTNP3aUw1P2RxeVbihUCqM0xFMXQ/g4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:12:0b:4c:2e:2b:34:ed:d4:54:cb:c5:06:4d:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2ed1d6066f4e4654ef5f3cc70a5d905a9af8290
Validity
Not Before: Jan 31 12:00:40 2025 GMT
Not After : Feb 1 12:00:40 2025 GMT
Subject: CN=1708cefee556fde39cccff7221ed17527ca2c46b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e4:35:3e:5f:e3:51:0a:ba:60:a2:fa:67:c5:
ae:83:b7:76:1c:b7:91:aa:0d:20:48:96:37:32:52:
fc:f8:e0:f9:2b:fe:39:f9:65:8b:7c:da:58:80:c8:
de:9a:a1:9c:c5:bd:1e:ae:19:9c:61:0a:74:8e:10:
69:3e:78:d9:f1:ab:65:c5:71:ad:e6:e4:c1:98:5b:
a0:88:b5:c4:e4:0c:53:85:3b:99:ae:00:7a:01:f8:
ac:00:de:79:b3:80:11:c1:5d:e0:23:87:2a:a2:27:
17:19:6e:4e:20:3c:6c:96:65:8c:46:c9:33:93:d1:
2d:b8:32:43:75:12:a9:76:87:16:08:6b:46:a3:78:
9a:28:c8:26:93:d7:e1:99:71:af:46:7f:d9:60:96:
a8:45:17:75:14:8f:72:92:b5:b6:db:49:b2:39:f0:
89:e9:cc:74:76:e1:cb:a7:ad:2b:e8:d7:4b:fd:b7:
b1:f3:40:02:7c:88:82:8b:51:f1:17:53:8f:95:5c:
d7:b7:25:d6:b7:5a:40:17:ec:a4:97:32:4b:8f:00:
0b:29:45:91:5c:18:6c:17:e6:6c:d1:ac:8e:ae:58:
01:3c:1e:e8:2b:f2:8c:d8:93:ac:ad:88:21:20:fd:
ee:40:b7:8a:b0:90:86:65:7c:74:cd:21:1b:35:e7:
9a:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:08:CE:FE:E5:56:FD:E3:9C:CC:FF:72:21:ED:17:52:7C:A2:C4:6B
X509v3 Authority Key Identifier:
keyid:B2:ED:1D:60:66:F4:E4:65:4E:F5:F3:CC:70:A5:D9:05:A9:AF:82:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/su0dYGb05GVO9fPMcKXZBamvgpA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/1182cb-5f95-4cd4-b72f-46b46fc0e496/1/su0dYGb05GVO9fPMcKXZBamvgpA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/1182cb-5f95-4cd4-b72f-46b46fc0e496/1/su0dYGb05GVO9fPMcKXZBamvgpA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:a6:82:2d:ca:8b:45:cf:fb:26:a4:45:df:5b:a5:b4:6b:22:
34:01:38:c9:00:f0:7f:41:30:5a:08:21:56:c7:b6:e3:76:c7:
22:07:6d:50:4a:84:23:d4:be:2e:1e:16:12:73:8e:99:bc:78:
39:54:7a:f1:5a:2b:57:c9:ef:75:57:bd:03:2c:c2:d6:ce:c6:
10:5a:be:a0:dc:42:78:d7:cd:3c:83:37:12:77:1e:ca:e1:b8:
ab:a3:89:17:aa:6d:7d:60:ab:46:ab:63:f6:72:87:bc:0d:25:
95:28:f9:e6:bf:a0:51:31:36:14:b6:09:3d:37:c2:e7:2c:cb:
d0:06:84:74:95:4a:a9:e4:32:fd:58:d7:58:67:ad:b4:71:6a:
10:7f:79:6c:47:cf:cf:61:09:93:e6:23:7c:36:d1:b2:df:e5:
d4:87:c6:a7:57:64:99:4e:ba:19:10:46:33:c1:49:d6:8e:95:
64:7b:0a:9a:e7:20:db:78:3c:7d:56:1f:2d:41:69:b8:c7:0c:
67:90:cc:64:35:86:8c:52:43:69:14:2b:54:d0:25:77:c3:43:
e0:9a:50:89:19:52:ad:fb:c7:ba:d6:54:f4:88:25:03:86:7e:
92:03:eb:8f:99:e3:28:d7:11:b4:d8:08:93:9d:25:4c:38:b9:
1f:13:fa:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:49:54 2025 by rpki-client