Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/642897-530e-4613-af84-0da300c7c63d/1/S_PRgzZkK2qayK7f-_eu5uXmKfQ.mft
File: S_PRgzZkK2qayK7f-_eu5uXmKfQ.mft (raw, json)
Hash identifier: t8QrMxSW7vqRQgGes3qP1T/YbSgP9/vNv2+KMR1MCic=
Subject key identifier: 5D:D3:29:99:20:D2:1B:17:09:EE:F6:EB:C8:5C:61:42:40:A2:FA:1C
Authority key identifier: 4B:F3:D1:83:36:64:2B:6A:9A:C8:AE:DF:FB:F7:AE:E6:E5:E6:29:F4
Certificate issuer: /CN=4bf3d18336642b6a9ac8aedffbf7aee6e5e629f4
Certificate serial: 0194BC0501CA500C08A5590BE6D1E2B44D92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S_PRgzZkK2qayK7f-_eu5uXmKfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/642897-530e-4613-af84-0da300c7c63d/1/S_PRgzZkK2qayK7f-_eu5uXmKfQ.mft
Manifest number: 13E0
Signing time: Fri 31 Jan 2025 11:00:32 +0000
Manifest this update: Fri 31 Jan 2025 11:00:32 +0000
Manifest next update: Sat 01 Feb 2025 11:00:32 +0000
Files and hashes: 1: S_PRgzZkK2qayK7f-_eu5uXmKfQ.crl (hash: xewScYp8FKX6bahag/YPpD0V7TmRS4e2XbG4ewobrHw=)
2: zO3b4_gkop7bpRFmwUyQSnP3CuQ.roa (hash: KQ8uWDK74BxQd55e4CkD8HOGjkQGRjBDcA3U74QNwgw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:01:ca:50:0c:08:a5:59:0b:e6:d1:e2:b4:4d:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bf3d18336642b6a9ac8aedffbf7aee6e5e629f4
Validity
Not Before: Jan 31 11:00:32 2025 GMT
Not After : Feb 1 11:00:32 2025 GMT
Subject: CN=5dd3299920d21b1709eef6ebc85c614240a2fa1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:9f:bd:42:d6:26:db:a4:61:23:9a:ea:31:e7:
f7:fa:50:32:8b:0f:57:0c:c9:e1:e7:a0:cb:50:5d:
34:9a:a1:9b:10:ef:e1:da:25:42:d9:43:88:c5:72:
8a:38:2c:f0:54:2f:4c:da:eb:10:f1:2d:e5:3b:ec:
8e:c1:62:bf:ee:43:f3:27:5f:c5:77:e9:29:0f:85:
8c:7d:78:48:bc:62:10:b0:8e:57:ab:fe:82:32:ed:
37:eb:a8:9e:58:e3:47:24:69:1d:5f:cc:c6:46:9d:
35:a5:15:64:a7:e4:10:c1:49:48:22:34:76:77:ea:
96:18:b2:fc:5e:42:a0:fc:95:39:42:74:a2:70:6b:
0b:c7:e4:5b:41:83:12:26:93:85:93:23:78:b7:13:
2c:60:cd:c6:cf:ff:b7:3e:4b:2f:2a:45:ea:ac:6e:
4e:dc:ea:bd:5a:c1:28:24:bd:dc:ef:7f:38:15:36:
1c:38:d0:69:7c:5b:fd:4f:3f:88:f0:f2:96:e4:6e:
19:c7:3a:63:c1:c1:3d:2a:70:c1:60:9d:0a:ab:ff:
d7:1d:bb:0e:05:8c:ca:5c:b5:2c:bd:d8:cb:1b:45:
51:dd:c7:50:a9:b0:86:91:ca:6c:6a:a0:d8:f0:de:
8c:eb:e6:66:d7:24:3a:a6:a3:e8:23:df:a0:77:bb:
ab:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:D3:29:99:20:D2:1B:17:09:EE:F6:EB:C8:5C:61:42:40:A2:FA:1C
X509v3 Authority Key Identifier:
keyid:4B:F3:D1:83:36:64:2B:6A:9A:C8:AE:DF:FB:F7:AE:E6:E5:E6:29:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S_PRgzZkK2qayK7f-_eu5uXmKfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/642897-530e-4613-af84-0da300c7c63d/1/S_PRgzZkK2qayK7f-_eu5uXmKfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/642897-530e-4613-af84-0da300c7c63d/1/S_PRgzZkK2qayK7f-_eu5uXmKfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:70:c1:9d:4f:97:b1:56:0e:64:8c:84:52:c9:f0:ab:1c:5e:
d7:4a:19:31:0f:14:ca:fd:57:aa:75:d2:96:4f:03:28:d0:04:
04:31:d6:ec:e1:cf:0d:a1:78:cc:87:73:fc:5d:f2:36:69:c1:
e2:2e:74:ac:71:14:d8:5b:11:fc:74:2a:97:ad:f7:33:c5:c8:
5d:ea:75:4e:0e:f0:9e:7b:e1:b8:88:61:80:8b:21:58:09:0b:
f5:f4:06:9c:64:92:86:bb:94:c1:da:7b:c1:b8:bd:d1:9b:1b:
9f:87:4a:af:bc:3b:ac:3d:41:04:c2:34:56:01:22:ae:3a:d2:
c3:a4:9e:84:3c:ca:df:04:ee:01:2a:82:7c:e5:b9:e3:56:a3:
cd:b5:41:e7:3c:e1:e7:03:ab:03:c1:13:19:1e:8a:f2:14:57:
fb:ba:04:63:ba:a4:24:40:bd:85:bd:1e:63:c1:d7:c0:6b:6b:
46:3b:c7:0e:a5:b5:3b:24:26:42:dd:ff:c2:12:a5:50:5e:ab:
88:22:0d:b3:c4:8a:99:79:b4:98:b0:48:e0:e1:47:1b:64:18:
91:db:c5:ca:d2:11:eb:f3:57:d9:bb:1a:75:02:fe:f4:49:46:
1c:d0:0c:af:3a:6c:2f:5c:4b:06:2a:99:41:78:58:bd:4a:09:
db:8b:f5:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:41 2025 by rpki-client