Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/33154b-2941-4f70-8133-d48450521dd9/1/ss0DX6sYpLeCYURWP2DniYpO8PE.mft
File: ss0DX6sYpLeCYURWP2DniYpO8PE.mft (raw, json)
Hash identifier: GHFuyK3SsZsZWATeatSJDCO/b6PDl/j+IWpDMJ+N9qk=
Subject key identifier: 2F:5F:32:15:7D:83:A2:32:28:23:BF:F2:EF:EE:31:8E:A9:29:0D:D6
Authority key identifier: B2:CD:03:5F:AB:18:A4:B7:82:61:44:56:3F:60:E7:89:8A:4E:F0:F1
Certificate issuer: /CN=b2cd035fab18a4b7826144563f60e7898a4ef0f1
Certificate serial: 0194BCE06C72FD3F7B5B6ACBEBF160B3253F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ss0DX6sYpLeCYURWP2DniYpO8PE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/33154b-2941-4f70-8133-d48450521dd9/1/ss0DX6sYpLeCYURWP2DniYpO8PE.mft
Manifest number: 0F47
Signing time: Fri 31 Jan 2025 15:00:11 +0000
Manifest this update: Fri 31 Jan 2025 15:00:11 +0000
Manifest next update: Sat 01 Feb 2025 15:00:11 +0000
Files and hashes: 1: 8ioI1P3WjfVGZeocJzXjV25zEAM.roa (hash: R5/GZ5yigab2BnvLmrfCDXR0klk9Au0FN2fkvOAY+V4=)
2: ss0DX6sYpLeCYURWP2DniYpO8PE.crl (hash: 5XJpQl9klGtl7iNHJ2IFKkVieqsYXjmfyeq5aPeBU7E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:6c:72:fd:3f:7b:5b:6a:cb:eb:f1:60:b3:25:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2cd035fab18a4b7826144563f60e7898a4ef0f1
Validity
Not Before: Jan 31 15:00:11 2025 GMT
Not After : Feb 1 15:00:11 2025 GMT
Subject: CN=2f5f32157d83a2322823bff2efee318ea9290dd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:bd:e2:13:81:d3:0e:7b:09:67:79:68:97:41:
2a:62:90:f2:d4:86:3a:23:24:b1:0d:c6:07:1b:36:
ac:9f:56:6d:80:e4:f3:29:aa:76:43:85:40:91:36:
6e:aa:34:07:7b:e5:9c:c0:9e:44:2e:30:80:53:86:
80:37:21:d3:38:42:0e:49:38:49:0f:12:17:97:13:
f1:52:f2:1a:fd:9a:db:06:f0:79:bf:d9:ef:8e:89:
7c:8c:3d:23:1a:4b:70:28:96:c7:d6:a9:6f:3f:44:
b0:2f:bb:59:3e:e2:fc:25:ca:47:cf:d8:3c:36:9b:
d5:9c:73:0e:d6:28:12:a9:57:00:5d:0b:94:8d:e8:
83:d3:3c:19:0e:af:be:fa:47:89:ec:dd:69:21:e0:
54:6a:9d:2e:81:2c:7b:c6:22:c2:e9:a6:3a:51:66:
f1:1f:47:8b:18:03:6e:9a:85:ed:aa:7f:d5:c7:b1:
4a:c5:b7:ac:50:e4:08:a8:4f:75:9f:75:8c:d9:d0:
f4:6f:25:9d:cc:15:b1:8a:72:ec:87:9c:5d:e3:a7:
5c:38:27:85:c1:54:60:ff:57:28:81:22:69:0e:46:
c0:3b:67:f7:ea:a6:fb:7a:ea:45:69:57:02:05:82:
19:5f:92:e8:2b:df:4b:8a:b7:ec:3d:55:4f:9a:12:
e6:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:5F:32:15:7D:83:A2:32:28:23:BF:F2:EF:EE:31:8E:A9:29:0D:D6
X509v3 Authority Key Identifier:
keyid:B2:CD:03:5F:AB:18:A4:B7:82:61:44:56:3F:60:E7:89:8A:4E:F0:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ss0DX6sYpLeCYURWP2DniYpO8PE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/33154b-2941-4f70-8133-d48450521dd9/1/ss0DX6sYpLeCYURWP2DniYpO8PE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/33154b-2941-4f70-8133-d48450521dd9/1/ss0DX6sYpLeCYURWP2DniYpO8PE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:98:af:d6:8f:21:06:10:91:d5:6c:c1:87:f9:56:c2:9c:69:
46:25:be:80:e8:00:e0:96:b5:47:90:67:e2:a4:ea:51:c8:6e:
2a:8d:e6:90:a0:48:cf:91:39:1d:2c:8c:f9:ee:48:d3:a9:92:
69:71:ac:4b:85:37:93:31:b9:31:3b:4c:75:9c:ea:fd:99:ea:
b8:c3:ef:38:cf:cc:37:cc:3b:25:65:25:8b:a5:2a:c4:29:93:
ba:40:72:3d:19:23:3a:e5:a5:b7:9c:75:ec:96:e2:85:ad:80:
40:d0:cd:7c:b8:4f:53:f1:8c:99:c1:5b:36:7a:07:29:4a:66:
76:27:a3:8e:74:69:66:51:31:2a:26:06:82:c7:83:ee:5b:32:
c3:a7:fc:b2:a5:97:b9:f9:26:e7:42:d1:ac:e5:44:67:a4:2f:
84:23:42:8e:fd:95:ef:c5:30:13:8f:dd:e3:38:1f:8e:88:c0:
8d:23:61:a9:c3:bf:7e:8c:e2:af:4c:5b:42:9b:6b:e2:06:7a:
2f:4d:03:0c:06:28:7e:da:51:b4:cd:cc:b3:3d:98:91:a1:3e:
e0:80:c8:47:0e:f3:dd:19:f2:3d:57:63:98:a9:57:cd:35:a8:
5d:37:65:06:c7:65:f7:b4:e9:d7:ca:7c:90:cd:7a:2c:48:e4:
5f:7a:4e:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:34 2025 by rpki-client