Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/20a767-7b41-463b-a6c9-5fc8e6327889/1/sUJ73NR8eEMfZioIWJAFrLULk0E.mft
File: sUJ73NR8eEMfZioIWJAFrLULk0E.mft (raw, json)
Hash identifier: n8+wdFqOPOgtdTOYaZkbjJ0cMxZq9hr/U7vRoz2t8fg=
Subject key identifier: 0A:3B:BF:24:19:39:39:3A:20:FD:5E:8D:31:4F:CA:E0:44:A9:4B:62
Authority key identifier: B1:42:7B:DC:D4:7C:78:43:1F:66:2A:08:58:90:05:AC:B5:0B:93:41
Certificate issuer: /CN=b1427bdcd47c78431f662a08589005acb50b9341
Certificate serial: 0194BCE0576D3691318DE4882ACF351E16C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sUJ73NR8eEMfZioIWJAFrLULk0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/20a767-7b41-463b-a6c9-5fc8e6327889/1/sUJ73NR8eEMfZioIWJAFrLULk0E.mft
Manifest number: 09F1
Signing time: Fri 31 Jan 2025 15:00:06 +0000
Manifest this update: Fri 31 Jan 2025 15:00:06 +0000
Manifest next update: Sat 01 Feb 2025 15:00:06 +0000
Files and hashes: 1: iqbUC3RkeGwfkGzLdhu1vTKXGrY.roa (hash: RaEnfZTaOx7WzFEEDktbraYPhjg7MFND4IvOcK58KYI=)
2: sUJ73NR8eEMfZioIWJAFrLULk0E.crl (hash: oknT6+L0ngz2OVv+OgUu9Y7l1HtD/y2CaX2eZTEl82k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:57:6d:36:91:31:8d:e4:88:2a:cf:35:1e:16:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1427bdcd47c78431f662a08589005acb50b9341
Validity
Not Before: Jan 31 15:00:06 2025 GMT
Not After : Feb 1 15:00:06 2025 GMT
Subject: CN=0a3bbf241939393a20fd5e8d314fcae044a94b62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e4:d0:a8:2a:08:c7:1a:26:1f:8c:6f:ba:bb:
9e:cf:9b:72:d8:22:a6:1d:63:a6:71:55:99:56:03:
3f:df:2b:f4:80:5b:3c:5c:de:44:1f:20:e5:a5:ef:
d1:b2:91:df:62:68:b4:99:bb:41:94:a4:af:d1:1c:
45:33:0a:94:1e:5d:0b:39:8b:1f:bd:db:bb:4d:d1:
7d:ff:6b:fc:c9:a0:ca:e3:09:31:48:1a:c3:00:83:
4a:c3:49:b6:30:cd:d2:c9:39:57:a6:a5:6d:70:32:
4e:9e:20:cf:41:88:5c:67:7a:32:de:37:25:7f:43:
ca:4a:f0:df:5a:a1:3f:ce:21:3d:09:5c:ac:0b:53:
f0:ee:c1:19:64:ab:78:5e:19:92:2a:02:02:47:c0:
ee:b2:42:3c:35:b3:49:03:d5:d7:4a:31:62:ab:d6:
aa:6c:7b:ae:f4:4b:b9:f3:2b:93:37:a2:b0:02:db:
2a:17:57:19:69:55:49:50:93:3e:ec:63:f5:b4:33:
9d:f7:d8:bb:28:e8:e7:0f:b2:5f:84:df:2d:4d:96:
2b:37:a7:64:f6:7f:71:ee:03:2d:80:28:0e:a1:9d:
af:94:d1:1a:52:ee:22:c9:b4:10:4a:3d:d1:6a:f3:
1f:0c:f3:b7:74:87:5d:bc:0a:18:90:10:0e:8b:13:
93:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:3B:BF:24:19:39:39:3A:20:FD:5E:8D:31:4F:CA:E0:44:A9:4B:62
X509v3 Authority Key Identifier:
keyid:B1:42:7B:DC:D4:7C:78:43:1F:66:2A:08:58:90:05:AC:B5:0B:93:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sUJ73NR8eEMfZioIWJAFrLULk0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/20a767-7b41-463b-a6c9-5fc8e6327889/1/sUJ73NR8eEMfZioIWJAFrLULk0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/20a767-7b41-463b-a6c9-5fc8e6327889/1/sUJ73NR8eEMfZioIWJAFrLULk0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
da:ce:5f:3b:50:3f:dc:62:5d:5b:7f:be:cf:a2:84:ad:2d:42:
28:2f:84:b6:7f:61:be:75:82:cc:ba:1f:7c:81:bc:63:25:2e:
a9:de:a2:d4:67:db:3a:25:04:38:ba:be:63:8c:b8:df:20:40:
4d:26:fa:27:33:ea:68:31:18:80:a9:52:9b:fd:3c:6d:55:ee:
b9:20:2c:ff:f1:26:f7:51:4f:a0:cc:bc:39:38:f5:5f:ad:e3:
02:09:ea:83:2b:93:82:eb:a5:17:42:c1:69:86:de:3b:67:83:
0c:ab:a2:eb:a8:08:48:60:82:b4:59:fd:96:af:de:80:bc:90:
3f:9b:d6:14:93:4a:67:66:c3:b3:1d:0b:de:a0:f8:92:3b:ee:
d1:cf:5a:86:0b:23:7b:0d:91:d3:08:67:3a:cb:c6:b6:3c:82:
3a:4a:b6:87:5d:c8:92:40:87:59:30:8f:68:c7:c7:0c:73:54:
5d:fb:9e:e8:a7:c4:3e:15:e1:c6:07:23:a0:a9:43:02:0c:b7:
94:65:43:f3:b0:90:01:b1:5c:2b:32:64:24:f5:4f:e2:f8:c3:
d6:f5:3d:7b:29:ff:0c:cd:63:a2:a7:93:9f:7a:c6:f2:44:0a:
99:78:b0:59:cd:b3:43:62:4b:53:58:1d:f7:85:32:d1:ae:5e:
bd:4f:2e:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 15:39:51 2025 by rpki-client