Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/73e90d-0553-4fe6-96de-deef8d154950/1/su7525PeEaAlPVqoxT7Mrg-cPTM.mft
File: su7525PeEaAlPVqoxT7Mrg-cPTM.mft (raw, json)
Hash identifier: TCwjgrqswnn0WMUwl9PbB8KsQTqlm4atJumQaCAfDxw=
Subject key identifier: 2B:99:59:9C:A4:15:22:9A:88:7E:D3:F3:7B:3B:46:7C:CC:94:AE:49
Authority key identifier: B2:EE:F9:DB:93:DE:11:A0:25:3D:5A:A8:C5:3E:CC:AE:0F:9C:3D:33
Certificate issuer: /CN=b2eef9db93de11a0253d5aa8c53eccae0f9c3d33
Certificate serial: 0194BC04BDF5992EC3A5107FF749F9D48F0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/su7525PeEaAlPVqoxT7Mrg-cPTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/73e90d-0553-4fe6-96de-deef8d154950/1/su7525PeEaAlPVqoxT7Mrg-cPTM.mft
Manifest number: 079C
Signing time: Fri 31 Jan 2025 11:00:14 +0000
Manifest this update: Fri 31 Jan 2025 11:00:14 +0000
Manifest next update: Sat 01 Feb 2025 11:00:14 +0000
Files and hashes: 1: HmEXSyMzNsE6ZXWyBUFqSz_-J_I.roa (hash: QHoycNdEbZMja0gAvjEgeC3E4wx2OI9vc9S4Y873m1w=)
2: su7525PeEaAlPVqoxT7Mrg-cPTM.crl (hash: bf2rdqnzD0QBiMX80F0/yjd+R143BS+uBP1uczrXi7k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:bd:f5:99:2e:c3:a5:10:7f:f7:49:f9:d4:8f:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2eef9db93de11a0253d5aa8c53eccae0f9c3d33
Validity
Not Before: Jan 31 11:00:14 2025 GMT
Not After : Feb 1 11:00:14 2025 GMT
Subject: CN=2b99599ca415229a887ed3f37b3b467ccc94ae49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:3a:e2:14:df:8e:09:44:54:a3:45:2c:d5:fd:
0c:81:1a:fb:89:28:d4:c4:7c:76:3c:f4:c7:87:08:
af:6a:cf:66:b9:c4:af:a3:11:8c:97:d3:3d:90:f2:
f0:2f:fa:97:13:d5:87:0e:ac:d4:e2:5a:76:d2:e9:
83:d0:f9:db:22:6b:06:1a:93:5e:8f:9b:13:52:0f:
2d:f8:4d:cd:9a:90:46:f8:2e:79:7c:29:17:ca:bd:
b0:15:34:d8:be:96:10:26:17:d0:47:c5:5a:38:13:
75:25:1a:ca:40:25:c5:16:0b:67:1a:9e:6c:8d:65:
95:00:d4:5a:32:1b:7e:c8:2c:b8:e3:a9:f8:3a:03:
a2:ff:43:62:30:66:9e:6c:13:39:bf:f7:40:0a:01:
37:bc:4e:10:40:9c:45:06:fb:ca:82:67:d4:17:4a:
2a:ce:6d:57:9e:ea:aa:fd:c7:e4:6f:be:e8:47:04:
d6:37:0e:bf:71:f6:63:9f:61:9c:cd:dc:22:ec:ca:
e3:65:96:68:5c:5e:41:5e:ce:de:93:d7:6d:2f:dc:
7b:7f:2d:82:ae:35:9e:14:31:64:d7:b4:1d:98:8f:
75:ad:b8:8d:87:16:7f:31:ea:a2:c2:0d:51:2e:91:
42:05:bf:d3:77:09:53:5a:27:57:91:30:7e:67:35:
9c:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:99:59:9C:A4:15:22:9A:88:7E:D3:F3:7B:3B:46:7C:CC:94:AE:49
X509v3 Authority Key Identifier:
keyid:B2:EE:F9:DB:93:DE:11:A0:25:3D:5A:A8:C5:3E:CC:AE:0F:9C:3D:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/su7525PeEaAlPVqoxT7Mrg-cPTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/73e90d-0553-4fe6-96de-deef8d154950/1/su7525PeEaAlPVqoxT7Mrg-cPTM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/73e90d-0553-4fe6-96de-deef8d154950/1/su7525PeEaAlPVqoxT7Mrg-cPTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:6e:bf:df:9b:a9:bd:46:47:e8:5c:73:78:48:50:8f:1f:13:
6a:6b:09:3c:a3:d6:03:62:1a:76:58:df:6b:e3:6d:bf:9d:71:
dc:99:93:64:3f:2d:f1:c9:e8:68:a0:8c:ee:b7:b9:8e:ad:5f:
e9:04:45:88:ca:51:f5:45:84:e3:27:db:80:6b:82:f2:2e:f6:
2b:36:44:d4:bf:6f:12:b9:08:7e:0e:e9:84:0d:a3:e2:1f:8f:
c8:77:a8:0c:c5:8a:9a:b9:e7:ae:11:a6:16:99:32:1d:63:03:
87:cf:f6:be:35:af:51:81:bb:9a:b1:89:0c:5e:52:c9:e1:06:
68:3c:32:81:09:95:0c:0a:ca:7a:c0:62:2a:cb:72:ef:4f:ea:
d6:7f:3f:06:85:85:43:6e:49:96:66:77:a5:fc:b7:ed:0a:9e:
0b:a2:38:f6:04:1a:10:a8:c2:3f:3e:3f:1e:f7:b4:54:48:ff:
e2:36:da:8b:63:ce:f5:ab:03:f6:1e:27:f5:79:12:69:91:b4:
0e:85:fe:eb:3c:f7:e8:59:71:ed:49:19:f4:d4:14:e2:6d:42:
01:7b:a5:6a:a9:fd:88:86:ad:5a:38:c7:6e:c8:4a:4c:df:8b:
23:dd:95:0f:98:f3:7c:af:9b:bd:db:a6:db:ca:b7:8a:02:df:
16:67:dc:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:50 2025 by rpki-client