Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/e6b77f-40e6-4c93-ac32-3db961703ea9/1/sszaHFSHy5ONV-phzC1i0xBw21E.mft
File: sszaHFSHy5ONV-phzC1i0xBw21E.mft (raw, json)
Hash identifier: LhDhNF+YK63ITyt4ih3YeyxN4mCsrqV3TrV+y4aRQ5A=
Subject key identifier: 7C:23:D0:EB:76:DA:0F:28:E8:A2:77:4E:65:E5:6E:28:8E:BC:08:A9
Authority key identifier: B2:CC:DA:1C:54:87:CB:93:8D:57:EA:61:CC:2D:62:D3:10:70:DB:51
Certificate issuer: /CN=b2ccda1c5487cb938d57ea61cc2d62d31070db51
Certificate serial: 0194BD85864AA802B164A07E8DC848B0B11A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sszaHFSHy5ONV-phzC1i0xBw21E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/e6b77f-40e6-4c93-ac32-3db961703ea9/1/sszaHFSHy5ONV-phzC1i0xBw21E.mft
Manifest number: 0A32
Signing time: Fri 31 Jan 2025 18:00:31 +0000
Manifest this update: Fri 31 Jan 2025 18:00:31 +0000
Manifest next update: Sat 01 Feb 2025 18:00:31 +0000
Files and hashes: 1: 3_xmC1ho9_8ZqNCvSg_4Ci-eALc.roa (hash: F7LfywH9mxXY2KxRJjRgggVLiwyV5wwnZqXcnTIZ+/Y=)
2: sszaHFSHy5ONV-phzC1i0xBw21E.crl (hash: R0TtsISZjsfzrZTYwmXYHW6mgbOBc3/bc/RtdUd9754=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:86:4a:a8:02:b1:64:a0:7e:8d:c8:48:b0:b1:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2ccda1c5487cb938d57ea61cc2d62d31070db51
Validity
Not Before: Jan 31 18:00:31 2025 GMT
Not After : Feb 1 18:00:31 2025 GMT
Subject: CN=7c23d0eb76da0f28e8a2774e65e56e288ebc08a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:83:ff:c8:73:c2:67:2f:c0:76:d0:22:d2:39:
42:2d:13:f7:65:9d:a9:68:32:73:01:46:f3:ca:87:
1b:40:73:8d:2e:9f:e8:99:52:5e:ec:25:55:28:db:
1e:30:a0:2b:2e:9b:8b:5d:aa:82:58:b5:49:01:66:
1a:58:9b:0d:ec:ef:4e:1c:91:ed:1b:fb:b0:36:43:
e5:43:78:1a:24:8a:14:8c:69:c2:5b:09:27:be:6a:
0a:6a:9a:f8:6c:74:1a:6e:b5:10:59:7f:6d:50:09:
fb:19:41:8d:05:75:4b:40:bc:c4:c8:16:b1:62:3b:
88:64:e2:b7:3d:4e:c1:c7:19:ac:2e:bb:14:2b:54:
16:7d:5f:03:a3:0b:db:1b:cf:2d:35:70:3d:03:7e:
9c:90:45:44:75:6c:f0:be:66:c5:49:5d:09:61:1b:
7a:f8:9f:a4:7c:2d:12:7c:ea:34:ca:12:64:61:ad:
71:02:e8:df:55:4e:e4:80:9e:56:6a:8d:7c:01:1a:
f0:46:64:bd:62:bf:fd:bf:87:43:66:5e:96:29:3d:
d2:0b:a9:04:75:46:e9:ae:e3:02:d5:f5:9d:d8:87:
99:d9:aa:ee:e5:31:0b:1b:d0:b8:e3:06:da:f6:f2:
32:f9:07:70:d6:95:55:b0:8f:60:81:c7:c5:f5:e7:
7a:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:23:D0:EB:76:DA:0F:28:E8:A2:77:4E:65:E5:6E:28:8E:BC:08:A9
X509v3 Authority Key Identifier:
keyid:B2:CC:DA:1C:54:87:CB:93:8D:57:EA:61:CC:2D:62:D3:10:70:DB:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sszaHFSHy5ONV-phzC1i0xBw21E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/e6b77f-40e6-4c93-ac32-3db961703ea9/1/sszaHFSHy5ONV-phzC1i0xBw21E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/e6b77f-40e6-4c93-ac32-3db961703ea9/1/sszaHFSHy5ONV-phzC1i0xBw21E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:a3:79:6a:9b:fa:a7:56:a3:85:82:e7:b9:69:cc:3e:9b:43:
1e:80:77:5f:cc:42:0c:f6:f6:72:01:f9:28:25:f8:08:52:75:
fb:33:52:fa:53:20:71:e1:11:bd:e7:28:32:8b:fe:0d:f8:3d:
cc:80:b0:fb:d6:e1:d8:3e:6d:94:2e:94:f8:19:34:f8:27:d3:
5b:e6:eb:5b:0a:d6:6c:2c:94:81:bb:19:39:5d:5f:34:0d:33:
5a:ac:6c:68:dc:25:cd:29:10:27:d3:db:9b:64:cb:e1:16:b9:
c4:08:10:e6:cf:30:ff:62:66:e3:35:9b:7d:0f:52:ed:46:86:
89:c9:db:56:cd:2c:14:2f:88:1a:a8:0f:6b:3c:d6:2f:e2:04:
83:82:7a:dc:02:97:38:3c:a8:42:0c:22:be:f0:68:d4:f6:a8:
98:f7:d7:31:53:6a:89:04:86:a2:bc:eb:7f:82:37:03:fc:b9:
59:48:49:b6:54:d8:c1:b9:05:94:14:1f:ab:89:61:a9:86:79:
14:87:a1:30:92:51:ac:05:32:ea:37:4d:0c:ac:c9:9b:bb:27:
85:11:43:2b:71:f6:18:1e:39:4c:11:51:a7:0a:49:9d:70:aa:
2b:6c:07:7c:fd:3c:d9:0a:37:17:f5:f5:91:61:48:d6:97:70:
83:bd:81:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 03:20:48 2025 by rpki-client