Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/521a74-ebc9-4267-b046-e0acacc10ef5/1/sRFXyY8mJ5_D7tLas88Rg3K9vhs.mft
File: sRFXyY8mJ5_D7tLas88Rg3K9vhs.mft (raw, json)
Hash identifier: wmNdTSFbEUhrBE+11FLNCjlR4fwk7ZAIGjGzod3SzBM=
Subject key identifier: 2F:42:48:77:B3:5C:EC:4C:64:03:46:1C:BD:4D:E3:51:99:3A:15:88
Authority key identifier: B1:11:57:C9:8F:26:27:9F:C3:EE:D2:DA:B3:CF:11:83:72:BD:BE:1B
Certificate issuer: /CN=b11157c98f26279fc3eed2dab3cf118372bdbe1b
Certificate serial: 0194BC72A1BCB866FE9EC7B7D01E36FCA7F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sRFXyY8mJ5_D7tLas88Rg3K9vhs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/521a74-ebc9-4267-b046-e0acacc10ef5/1/sRFXyY8mJ5_D7tLas88Rg3K9vhs.mft
Manifest number: 0123
Signing time: Fri 31 Jan 2025 13:00:16 +0000
Manifest this update: Fri 31 Jan 2025 13:00:16 +0000
Manifest next update: Sat 01 Feb 2025 13:00:16 +0000
Files and hashes: 1: cutf0Yk4GqOLANVUSKcxrSdUxug.roa (hash: Q8Q4U3gD48zecWRmDv6Pw0MZwpRvb60BHrR0/Xs/Hmo=)
2: sRFXyY8mJ5_D7tLas88Rg3K9vhs.crl (hash: wMRHDwXQm2w4d3s2eVACqhIcio1kvBcOs16opKyyad0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:a1:bc:b8:66:fe:9e:c7:b7:d0:1e:36:fc:a7:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b11157c98f26279fc3eed2dab3cf118372bdbe1b
Validity
Not Before: Jan 31 13:00:16 2025 GMT
Not After : Feb 1 13:00:16 2025 GMT
Subject: CN=2f424877b35cec4c6403461cbd4de351993a1588
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:9f:31:77:26:d1:01:a4:3d:9a:cb:da:46:b0:
ba:49:22:b6:d7:a8:09:55:a1:15:68:1d:56:4d:e0:
c4:a7:19:1d:cd:56:f7:37:b4:59:18:49:bc:41:b9:
06:1d:fd:ba:bd:0b:7c:78:a6:1a:be:a2:5b:18:05:
3a:ec:c6:3b:38:fd:82:9d:ea:31:ff:a1:c4:82:b5:
f2:63:81:ff:76:7b:09:0e:bf:a8:c1:9f:10:2e:fe:
53:c6:17:e3:be:f5:b7:69:d9:66:fb:c1:9a:dc:22:
8a:ea:be:88:bf:ef:e3:25:04:27:70:4d:b3:8e:1d:
f7:69:38:ec:43:6d:65:30:d4:9e:d7:6a:e4:cf:f5:
0b:48:7a:5b:59:c8:49:8a:a7:19:be:a2:9a:10:b8:
9b:50:7b:f7:d9:4d:17:a9:2e:e2:7a:14:18:33:f9:
25:ee:b0:7f:71:ac:33:dc:51:f5:13:30:07:20:ba:
a9:48:4c:4c:9d:56:d4:a4:73:72:64:34:57:96:1e:
0b:07:5a:e3:84:fb:1f:e8:ab:fb:dd:a7:29:47:be:
7c:ae:3d:4a:b8:49:8f:4d:3c:6e:6b:db:f2:8f:de:
05:ef:72:4c:04:50:0c:99:e5:92:d9:61:65:c2:c8:
54:97:df:91:91:b1:54:25:53:ab:14:3d:54:67:58:
15:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:42:48:77:B3:5C:EC:4C:64:03:46:1C:BD:4D:E3:51:99:3A:15:88
X509v3 Authority Key Identifier:
keyid:B1:11:57:C9:8F:26:27:9F:C3:EE:D2:DA:B3:CF:11:83:72:BD:BE:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sRFXyY8mJ5_D7tLas88Rg3K9vhs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/521a74-ebc9-4267-b046-e0acacc10ef5/1/sRFXyY8mJ5_D7tLas88Rg3K9vhs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/521a74-ebc9-4267-b046-e0acacc10ef5/1/sRFXyY8mJ5_D7tLas88Rg3K9vhs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:d0:7f:d5:5c:92:9e:52:6f:78:22:8b:ff:f9:98:bf:99:bd:
5e:03:4f:aa:6c:7e:39:68:3f:1b:14:55:66:95:d6:fa:00:e7:
e4:d7:be:86:6b:34:59:9c:ee:5b:53:f5:6d:82:fa:81:b9:12:
50:5b:b2:ed:05:cc:30:f8:11:e3:61:87:d8:cc:34:3f:4f:2a:
7d:62:20:fc:70:18:07:7f:54:9d:6f:a1:26:db:08:e2:17:b6:
97:c2:ac:ea:db:c9:34:d8:a7:70:30:55:6b:7b:49:e7:04:09:
a8:94:1c:5d:2e:e3:ca:cb:35:df:7a:31:c5:28:74:82:78:0a:
34:7f:37:36:a7:bd:ac:35:ba:d8:08:94:1c:26:ad:34:f3:43:
5c:2a:9c:bd:5b:45:85:6d:7e:7d:03:66:46:87:82:7f:69:a8:
f1:8e:a4:05:b6:62:92:1f:f5:3b:a8:ab:c8:3d:fc:de:1a:b7:
bd:d2:c8:a7:cc:1a:48:16:60:8d:e1:44:5e:46:e2:d5:0f:89:
bc:b9:b1:ac:8e:c6:01:54:50:1d:ad:f6:7f:8a:68:8b:fa:b6:
75:58:51:9c:e5:29:ce:bd:98:3b:14:42:26:2d:94:b3:40:92:
d6:51:b2:57:8a:e8:5f:07:55:60:1c:ac:a8:a6:80:03:2a:99:
06:9e:53:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:39 2025 by rpki-client