Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/616c00-fbeb-4b30-9e25-9e91fca78f47/1/SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.mft
File: SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.mft (raw, json)
Hash identifier: 2+jug+KpW/HTrJccOpfP+Wr4WSnfDpUdbZkRkB3A9F4=
Subject key identifier: CC:01:B4:A6:A3:29:82:E4:50:BA:86:61:EF:F5:14:DA:34:CC:F5:51
Authority key identifier: 48:16:7D:C1:DD:2B:F9:91:D7:0C:F6:EE:87:F4:36:1E:75:CE:F2:0D
Certificate issuer: /CN=48167dc1dd2bf991d70cf6ee87f4361e75cef20d
Certificate serial: 0194BC72F35B871C9F1103AE8E2027F9DE08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/616c00-fbeb-4b30-9e25-9e91fca78f47/1/SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.mft
Manifest number: 1315
Signing time: Fri 31 Jan 2025 13:00:37 +0000
Manifest this update: Fri 31 Jan 2025 13:00:37 +0000
Manifest next update: Sat 01 Feb 2025 13:00:37 +0000
Files and hashes: 1: SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.crl (hash: l0BsFnZXWv+/qsEPw3MtrnBDGYlD02qF6UVt5dsCFos=)
2: fDIcgxuviPH1xRvEDyo8UqwcwI4.roa (hash: rJoyrLL7oo1+w5siaXJh6iXQyoUFBWgTdCtgNT3fEho=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:f3:5b:87:1c:9f:11:03:ae:8e:20:27:f9:de:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48167dc1dd2bf991d70cf6ee87f4361e75cef20d
Validity
Not Before: Jan 31 13:00:37 2025 GMT
Not After : Feb 1 13:00:37 2025 GMT
Subject: CN=cc01b4a6a32982e450ba8661eff514da34ccf551
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:ab:b4:83:96:0d:20:f1:ce:4b:e6:21:b7:8a:
7f:be:2d:63:41:b1:9e:2a:4c:04:b8:48:26:99:ae:
26:66:e6:ca:d0:78:2e:da:1b:d0:6f:6d:6d:3c:0d:
3f:cc:38:18:14:cc:8c:b2:56:b0:5e:7f:67:3d:14:
65:c8:b4:f2:21:a0:ed:a2:92:e7:80:5a:81:22:b9:
a7:99:2c:6d:e3:77:6f:60:59:82:4f:8f:3c:51:11:
84:81:4d:84:e5:94:f1:97:47:19:b4:0e:76:e8:dd:
35:c8:d2:43:61:2a:f3:83:3f:65:d7:2b:f0:55:86:
5d:0a:48:d8:a9:74:d7:5e:0f:f8:41:76:8f:21:f2:
61:5d:a8:ea:41:f7:8e:72:1f:15:eb:a0:cb:32:d8:
77:ef:fc:76:df:71:08:47:a3:7f:ac:94:09:a1:df:
2c:b8:16:4d:98:72:c0:d0:3b:f1:62:15:bd:f3:1a:
37:aa:b3:1b:92:96:63:d3:18:14:4a:fc:e0:45:68:
1a:42:ae:66:97:06:32:77:59:79:41:85:e4:2d:ad:
ec:cd:af:7d:2b:86:73:6b:ad:83:4b:1a:d0:01:45:
c5:e7:ff:01:5f:21:c6:3d:20:f6:20:97:3e:25:32:
b4:93:59:5b:48:47:c7:ce:78:26:7b:5c:03:c9:80:
a5:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:01:B4:A6:A3:29:82:E4:50:BA:86:61:EF:F5:14:DA:34:CC:F5:51
X509v3 Authority Key Identifier:
keyid:48:16:7D:C1:DD:2B:F9:91:D7:0C:F6:EE:87:F4:36:1E:75:CE:F2:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/616c00-fbeb-4b30-9e25-9e91fca78f47/1/SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/616c00-fbeb-4b30-9e25-9e91fca78f47/1/SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:90:ad:a2:ae:5e:23:22:2d:43:17:ae:e0:b1:e3:14:da:49:
b4:0b:08:6d:fb:7d:10:1f:f3:cd:24:8c:f0:7e:ed:fc:83:1d:
63:08:eb:8e:bf:bd:e0:39:0d:ef:e2:87:3f:7d:2f:b6:64:d2:
d8:b0:a4:6c:d9:73:97:7d:c8:95:24:4b:d8:5a:42:69:a7:b2:
ac:6e:4f:46:62:67:19:4d:b0:09:16:31:e7:26:24:f1:fc:dd:
15:9e:c4:be:ab:9f:c5:c2:8e:33:b6:70:cc:d6:6e:e2:a6:f3:
91:46:df:92:d4:46:2a:ce:3c:2c:df:21:97:af:97:b1:aa:45:
f6:8c:57:3f:97:8d:b6:5e:06:93:1b:8f:51:cf:f7:64:cd:12:
fe:60:12:fa:cb:16:5a:2e:26:9a:4b:f1:8b:4f:93:92:9b:de:
05:b2:a0:e2:7c:ea:57:32:f4:80:27:e1:9f:e2:af:9a:9f:cc:
43:8b:32:6f:72:50:5d:cb:5a:0d:c1:d4:bf:61:ae:6b:e1:97:
4a:c0:79:51:60:55:99:72:10:1b:be:0d:b4:98:aa:b7:d3:be:
e2:1a:83:c1:53:f6:1e:0c:15:97:5e:de:6f:4a:1c:c2:05:f0:
60:74:5d:b7:d5:70:bc:83:6f:75:d4:49:f1:bb:5e:2c:ac:8b:
74:5c:6e:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:54 2025 by rpki-client