Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ad0d6d-f949-46db-981f-b38d7f709d70/1/sL7tbt6esoW9Kmq7mFrc2-jyd5o.mft
File: sL7tbt6esoW9Kmq7mFrc2-jyd5o.mft (raw, json)
Hash identifier: XUNmPoMIPhtOqvCaAyrnhdttxBvLII28XrT/R0zPmcc=
Subject key identifier: 63:44:37:1E:EA:EA:39:96:86:24:9D:83:D4:18:64:1A:A2:59:8B:EF
Authority key identifier: B0:BE:ED:6E:DE:9E:B2:85:BD:2A:6A:BB:98:5A:DC:DB:E8:F2:77:9A
Certificate issuer: /CN=b0beed6ede9eb285bd2a6abb985adcdbe8f2779a
Certificate serial: 0194BC729BAB6EC6E78A4DE3F7743FEED9A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sL7tbt6esoW9Kmq7mFrc2-jyd5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ad0d6d-f949-46db-981f-b38d7f709d70/1/sL7tbt6esoW9Kmq7mFrc2-jyd5o.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 13:00:14 +0000
Manifest this update: Fri 31 Jan 2025 13:00:14 +0000
Manifest next update: Sat 01 Feb 2025 13:00:14 +0000
Files and hashes: 1: 5q_QBExX-iJkMtzTZ_fdW28i38Y.roa (hash: o+vnb00qVUwzoLHaYfEzcLDShc1yhr65w9Ny1ipEj7o=)
2: sL7tbt6esoW9Kmq7mFrc2-jyd5o.crl (hash: 9YDlOKkF6Hs+DU6Lmeo6Ttgic33iWa/jrXEVX7SDiCU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:9b:ab:6e:c6:e7:8a:4d:e3:f7:74:3f:ee:d9:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0beed6ede9eb285bd2a6abb985adcdbe8f2779a
Validity
Not Before: Jan 31 13:00:14 2025 GMT
Not After : Feb 1 13:00:14 2025 GMT
Subject: CN=6344371eeaea399686249d83d418641aa2598bef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:3e:d0:93:4a:08:9e:6c:b5:72:57:54:c5:bc:
9a:cc:74:71:7f:30:70:99:f0:bb:2f:98:2c:83:43:
f9:89:2d:7d:29:46:5f:35:4d:d6:b4:b7:da:0c:3c:
0a:82:0d:00:31:a5:e5:e7:e2:40:aa:ef:ba:cd:99:
22:9c:b7:09:e1:cc:8f:8f:7e:67:ec:89:ef:d0:a2:
95:4b:2d:cb:ac:8a:a0:a3:bb:3d:2f:61:0f:7a:74:
9e:a4:e2:25:4f:c0:d3:f6:f2:9e:bf:dd:ec:12:d1:
29:48:d5:7f:82:8f:ec:a0:68:b1:67:87:20:f9:ca:
88:87:67:0e:17:06:ff:45:3c:cc:2f:a8:02:0f:90:
5e:5d:91:8a:aa:eb:cf:e9:b1:75:d7:d4:71:00:22:
6d:e4:dc:80:89:20:8f:48:29:4f:3f:e5:d4:59:9e:
40:67:da:fc:00:cd:96:c2:c0:d5:99:6a:3b:6d:11:
0b:2e:13:d2:77:56:91:9d:6e:20:8a:ab:20:2b:d3:
ec:43:b2:d3:d9:c3:d2:0d:1c:79:98:bb:91:8f:6b:
d2:4e:f5:34:4b:5a:67:12:08:d0:4f:79:f0:27:33:
30:1c:63:45:4b:1c:09:a0:8f:fc:d9:86:7b:ff:04:
db:75:be:f7:b8:75:92:6c:c7:70:f6:ca:6f:f9:61:
03:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:44:37:1E:EA:EA:39:96:86:24:9D:83:D4:18:64:1A:A2:59:8B:EF
X509v3 Authority Key Identifier:
keyid:B0:BE:ED:6E:DE:9E:B2:85:BD:2A:6A:BB:98:5A:DC:DB:E8:F2:77:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sL7tbt6esoW9Kmq7mFrc2-jyd5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ad0d6d-f949-46db-981f-b38d7f709d70/1/sL7tbt6esoW9Kmq7mFrc2-jyd5o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ad0d6d-f949-46db-981f-b38d7f709d70/1/sL7tbt6esoW9Kmq7mFrc2-jyd5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:c5:83:6a:63:ec:e6:b1:b1:bb:b4:f8:53:cd:0a:5b:41:bd:
e3:8c:4b:a6:e2:56:e5:9a:89:27:5f:14:e1:0a:fd:60:17:a1:
59:82:58:a2:99:ab:9b:5f:19:35:cb:5d:31:32:bf:2a:1d:08:
8f:d7:cf:3d:5f:c3:4c:75:c6:b1:de:ae:b0:73:34:66:f5:9f:
a1:5d:76:48:c8:fe:ef:83:01:1c:68:a7:54:eb:71:60:8f:b1:
e3:ed:1b:2f:dc:c2:f6:b0:a7:c5:a8:74:1a:19:a5:5e:7b:1d:
ee:ff:aa:7a:d3:ed:ca:72:a2:0f:11:6a:0a:dd:fb:f5:2b:0b:
04:9e:57:c8:ca:b3:9b:08:27:63:c6:de:00:27:5c:fe:c3:0f:
09:cb:be:5e:fb:fa:2d:5e:5b:f8:03:aa:9e:0f:44:6d:85:3a:
dd:ee:4e:8b:ed:74:87:88:ba:af:91:bb:c2:fc:79:29:bd:83:
ff:5f:71:42:cc:20:47:a5:e4:71:de:65:98:7f:29:d8:55:4a:
33:8d:87:2a:b9:86:ed:33:be:d2:37:13:12:20:96:b7:55:12:
fa:cd:ea:6d:bd:ac:7d:bd:07:a8:13:19:35:a3:19:07:c0:d7:
9d:63:50:e7:9d:66:ce:10:2b:a4:f1:cf:79:a7:02:a2:f8:fc:
8c:f1:ab:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:05:44 2025 by rpki-client