Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a02262-e37f-4142-9a2c-9f176e24c034/1/sID4AB1ZkzNz_o5YhJ5Lkd6qK7I.mft
File: sID4AB1ZkzNz_o5YhJ5Lkd6qK7I.mft (raw, json)
Hash identifier: iYL83t346lD+d98OX1uHHurerIPGLtYGM3005nAYfRk=
Subject key identifier: 28:4C:27:22:2B:4A:A1:DB:13:0D:2E:09:78:13:E4:2B:C3:B6:7D:F4
Authority key identifier: B0:80:F8:00:1D:59:93:33:73:FE:8E:58:84:9E:4B:91:DE:AA:2B:B2
Certificate issuer: /CN=b080f8001d59933373fe8e58849e4b91deaa2bb2
Certificate serial: 0194BBCE8A374265882F3C3617697CCE81D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sID4AB1ZkzNz_o5YhJ5Lkd6qK7I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a02262-e37f-4142-9a2c-9f176e24c034/1/sID4AB1ZkzNz_o5YhJ5Lkd6qK7I.mft
Manifest number: 026F
Signing time: Fri 31 Jan 2025 10:01:02 +0000
Manifest this update: Fri 31 Jan 2025 10:01:02 +0000
Manifest next update: Sat 01 Feb 2025 10:01:02 +0000
Files and hashes: 1: f-wF0yIlDOHaFqLViWnFWeP4B9o.roa (hash: 8olsSb6V441J0mOtJjve8qF0Z7IUWgXwJVtuxOxK2Bg=)
2: sID4AB1ZkzNz_o5YhJ5Lkd6qK7I.crl (hash: OV9wNTYiLNMIDBbwpDUPyMGG2q8qjKprtPConLwQyJ8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:8a:37:42:65:88:2f:3c:36:17:69:7c:ce:81:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b080f8001d59933373fe8e58849e4b91deaa2bb2
Validity
Not Before: Jan 31 10:01:02 2025 GMT
Not After : Feb 1 10:01:02 2025 GMT
Subject: CN=284c27222b4aa1db130d2e097813e42bc3b67df4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:cf:98:d1:7d:2e:e7:e9:2a:53:80:af:77:2a:
a9:a7:e5:35:7e:ba:ae:66:b6:82:d5:de:c7:c2:32:
66:4f:b4:b1:5f:49:e5:51:eb:48:d2:2a:77:1f:93:
bd:53:c5:b6:b3:d9:15:4f:08:b7:48:54:66:0f:73:
d1:56:b4:06:67:41:d2:ee:74:68:e1:89:31:ec:17:
62:ad:23:e7:67:65:de:1b:73:c1:61:dd:7b:66:d5:
39:c9:b0:57:28:f0:0c:f2:2c:5e:d9:42:ec:38:98:
e2:2f:61:d4:b5:08:82:ed:07:79:18:7a:d5:a4:86:
dc:6c:cc:f8:cf:4a:04:32:74:6d:ff:85:31:36:2a:
b4:04:21:69:cf:16:d6:8d:dd:db:84:9a:b0:eb:a0:
b8:a6:1a:0d:d0:01:0b:90:13:21:90:81:d1:58:92:
34:85:d2:29:4a:7b:6a:0a:d8:34:e7:99:72:be:1a:
b3:5b:39:d3:d0:37:a2:1a:65:bb:cc:6f:7a:a9:59:
31:0e:d0:2e:b4:48:34:17:1d:79:4a:a1:96:bf:c4:
17:6c:a4:1a:0d:62:86:75:9b:40:ea:81:47:b2:8b:
f6:d6:09:9b:ef:af:d3:c9:e7:be:fb:f6:3f:f4:b6:
3e:54:3d:00:54:5b:f6:5e:0e:7c:7d:0d:b4:98:97:
4e:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:4C:27:22:2B:4A:A1:DB:13:0D:2E:09:78:13:E4:2B:C3:B6:7D:F4
X509v3 Authority Key Identifier:
keyid:B0:80:F8:00:1D:59:93:33:73:FE:8E:58:84:9E:4B:91:DE:AA:2B:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sID4AB1ZkzNz_o5YhJ5Lkd6qK7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a02262-e37f-4142-9a2c-9f176e24c034/1/sID4AB1ZkzNz_o5YhJ5Lkd6qK7I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a02262-e37f-4142-9a2c-9f176e24c034/1/sID4AB1ZkzNz_o5YhJ5Lkd6qK7I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:a0:dd:69:21:78:1b:b1:71:07:96:af:3b:9d:cb:e8:9c:5c:
48:60:d0:15:78:16:ff:8c:84:33:76:ce:d8:23:ea:4e:f7:da:
53:b4:96:55:d9:6f:ea:7d:a4:95:22:d7:e1:a9:0e:00:f2:87:
20:a1:a7:70:73:3a:26:92:69:43:be:2f:99:9b:35:bc:3c:cc:
45:34:0b:d6:17:e7:4e:35:61:7f:2b:d2:c3:d4:7f:7b:37:61:
ae:38:1f:ff:c1:f7:6b:47:97:72:9e:90:61:0f:1e:f5:aa:be:
0f:47:33:64:ce:fe:40:62:1d:e2:9d:58:4f:c9:ea:05:66:b9:
2d:50:bf:fc:40:d0:25:1f:f8:f9:3a:d3:96:b5:48:01:cf:50:
79:08:dd:b1:62:45:23:71:01:85:69:59:bb:ae:54:33:92:c3:
f9:ad:49:f3:c5:b9:ce:e6:1e:d1:32:c5:c5:07:60:da:a4:1a:
45:b8:1a:83:78:7c:f6:2b:fb:62:13:19:37:e3:bc:f8:7c:9c:
26:97:f6:20:ae:9c:78:40:58:98:f8:8a:18:7c:ba:62:be:ba:
1a:4a:a0:a7:46:df:2a:08:d4:1c:98:5f:da:03:41:73:96:6d:
54:50:f5:ed:a1:fd:c6:17:1a:ec:fa:12:df:c8:79:c9:4f:8c:
0c:f7:80:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:57:18 2025 by rpki-client