Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/dfffc5-cb6d-44ce-8472-777ee9556210/1/ssX3TfRSDTQdo0inAKA7l8rwdzU.mft
File: ssX3TfRSDTQdo0inAKA7l8rwdzU.mft (raw, json)
Hash identifier: kt0VqTl4oBbMbON4eZgtXFqRWb2bPvceD0A7EaHaCHo=
Subject key identifier: 1A:17:2E:47:D3:9B:90:10:68:76:3A:8F:D0:06:9F:70:BF:32:CE:BE
Authority key identifier: B2:C5:F7:4D:F4:52:0D:34:1D:A3:48:A7:00:A0:3B:97:CA:F0:77:35
Certificate issuer: /CN=b2c5f74df4520d341da348a700a03b97caf07735
Certificate serial: 0194BC3C5E95124B4CD22FA717307A260FCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ssX3TfRSDTQdo0inAKA7l8rwdzU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/dfffc5-cb6d-44ce-8472-777ee9556210/1/ssX3TfRSDTQdo0inAKA7l8rwdzU.mft
Manifest number: 0B0C
Signing time: Fri 31 Jan 2025 12:01:00 +0000
Manifest this update: Fri 31 Jan 2025 12:01:00 +0000
Manifest next update: Sat 01 Feb 2025 12:01:00 +0000
Files and hashes: 1: 1-Mg08ooGsj9VN-8i0khJXBw3jVQ.roa (hash: cP0po0zW+LQnzjrZSQHX9u1ecovx/li0WZt0UNimdaw=)
2: E1tiJF9pbO0eSBPSwr1et8cPjUs.roa (hash: KqE7+MnUHX3Ki13WWK14Wm5uLKCL0/xXzqRQ5h2lQNo=)
3: ssX3TfRSDTQdo0inAKA7l8rwdzU.crl (hash: zPJ6r3F5SUcI0I52766PCMHG3844ZVCej7p/TQcrc10=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:5e:95:12:4b:4c:d2:2f:a7:17:30:7a:26:0f:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2c5f74df4520d341da348a700a03b97caf07735
Validity
Not Before: Jan 31 12:01:00 2025 GMT
Not After : Feb 1 12:01:00 2025 GMT
Subject: CN=1a172e47d39b901068763a8fd0069f70bf32cebe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:24:fa:d4:d5:36:02:1c:05:4a:24:85:d5:d0:
d5:2c:74:85:36:60:67:f5:2c:f2:d2:85:16:fc:55:
79:35:94:4c:39:61:8f:ab:b0:b5:be:9f:4a:ec:71:
40:84:79:ee:4d:8a:0b:22:3f:2e:73:07:7f:26:cc:
bf:5f:76:76:b1:32:a3:21:4f:36:42:dc:e7:85:da:
24:f8:3a:c5:31:37:b9:28:ee:fc:a5:9d:ae:f1:96:
6f:88:32:02:bb:5d:42:f3:4e:fe:6d:e4:49:c5:bb:
c9:a0:a6:e0:96:25:aa:cc:b4:66:cd:21:1f:2e:02:
c6:03:9d:eb:97:87:fa:19:be:6b:be:10:ee:9f:22:
bf:af:c8:12:e4:8d:d2:8a:11:40:57:8f:07:e3:09:
60:ef:6a:5d:f0:3c:b2:46:4f:60:03:ea:11:d3:73:
12:05:3b:bf:15:ab:60:41:86:a0:cb:d7:8b:5b:5a:
b2:06:16:87:0b:7a:be:f5:73:bc:dc:45:fd:19:7e:
0d:7c:98:2f:73:ab:18:85:0b:c4:ba:bf:87:73:1d:
fd:a0:45:77:aa:bd:d8:d4:ec:a4:77:d0:a2:ba:13:
bd:6b:63:52:60:b3:f5:9b:29:3b:db:98:df:1b:48:
3a:ac:e1:95:33:a3:09:94:d7:8c:8c:bc:14:c6:63:
5d:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:17:2E:47:D3:9B:90:10:68:76:3A:8F:D0:06:9F:70:BF:32:CE:BE
X509v3 Authority Key Identifier:
keyid:B2:C5:F7:4D:F4:52:0D:34:1D:A3:48:A7:00:A0:3B:97:CA:F0:77:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ssX3TfRSDTQdo0inAKA7l8rwdzU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/dfffc5-cb6d-44ce-8472-777ee9556210/1/ssX3TfRSDTQdo0inAKA7l8rwdzU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/dfffc5-cb6d-44ce-8472-777ee9556210/1/ssX3TfRSDTQdo0inAKA7l8rwdzU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:a7:c8:9d:c0:12:e0:24:82:94:90:a7:53:2d:47:a9:04:29:
7b:58:fd:61:39:62:fd:d7:03:79:1d:23:d4:72:ef:94:48:4a:
be:0d:f5:cf:f9:dd:b6:97:65:8d:61:55:94:ef:fa:b2:08:b6:
0a:7f:ba:8c:f5:44:2a:60:90:60:5c:9c:d8:84:8c:a4:2a:04:
36:cd:2d:56:e2:e4:50:71:c9:58:ff:2d:90:dc:00:fa:43:9b:
59:9d:a5:97:49:39:6f:54:16:f9:f9:eb:a9:40:e4:05:09:86:
24:e4:7d:f9:ca:59:b8:be:66:61:89:89:d3:8a:1a:f3:94:2c:
13:45:a3:d1:e7:43:f5:76:2f:47:24:21:ea:1e:56:15:e2:33:
63:2a:ca:f9:1f:f0:48:de:fc:7b:b4:a0:a8:1d:05:2e:ce:1d:
83:1c:66:b4:26:53:b2:53:cd:cc:a2:b7:9a:ab:ee:9f:93:00:
63:c9:33:76:b3:63:91:f5:f2:9c:63:94:80:0a:55:11:7d:a0:
90:96:d3:ec:29:78:3c:3e:c4:f9:e6:7d:e7:05:63:cf:dd:86:
14:79:fb:29:cb:d5:c0:c0:5f:0e:ff:86:24:57:f0:62:ac:0c:
5b:54:40:bc:0f:47:ac:59:94:68:75:d6:34:79:42:d3:25:33:
ef:0d:a8:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 03:17:56 2025 by rpki-client