Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/96bea2-8e6d-44e8-a809-96b451f6000c/1/sw0gR_9gfu-FKTdg6cEab1lB0bY.mft
File: sw0gR_9gfu-FKTdg6cEab1lB0bY.mft (raw, json)
Hash identifier: R59kvX8D3YacXDq37OY563zLmllX9oYVOD7cRSnQj7s=
Subject key identifier: F4:2D:2A:A7:2B:57:64:58:6F:5B:CD:51:73:EA:1F:5F:B1:99:1A:E6
Authority key identifier: B3:0D:20:47:FF:60:7E:EF:85:29:37:60:E9:C1:1A:6F:59:41:D1:B6
Certificate issuer: /CN=b30d2047ff607eef85293760e9c11a6f5941d1b6
Certificate serial: 0194BD175D2583E9F57633382447E95ABD39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sw0gR_9gfu-FKTdg6cEab1lB0bY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/96bea2-8e6d-44e8-a809-96b451f6000c/1/sw0gR_9gfu-FKTdg6cEab1lB0bY.mft
Manifest number: 0BC5
Signing time: Fri 31 Jan 2025 16:00:12 +0000
Manifest this update: Fri 31 Jan 2025 16:00:12 +0000
Manifest next update: Sat 01 Feb 2025 16:00:12 +0000
Files and hashes: 1: AybpUeYPjFscWUBGnz0eMxdCYVY.roa (hash: Rp8q+rUirDyaLXwQ073sCktRLzdV+RBLGTTN+wcKRwU=)
2: sw0gR_9gfu-FKTdg6cEab1lB0bY.crl (hash: 67UrNAjhjZF05tgxfWkPj8/UkySo/3cuNLpq0l9nE+w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:5d:25:83:e9:f5:76:33:38:24:47:e9:5a:bd:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b30d2047ff607eef85293760e9c11a6f5941d1b6
Validity
Not Before: Jan 31 16:00:12 2025 GMT
Not After : Feb 1 16:00:12 2025 GMT
Subject: CN=f42d2aa72b5764586f5bcd5173ea1f5fb1991ae6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:4d:c8:f9:73:41:95:f0:73:67:b5:c0:14:f3:
14:79:8f:89:ac:43:46:4a:f8:95:82:29:0b:fe:1b:
ef:8c:3c:77:15:e2:0f:fc:6d:bf:6d:f4:db:ea:cd:
9a:33:a3:30:dd:97:06:9f:bf:35:9a:a5:f9:ca:8e:
32:af:a1:8d:d0:69:99:7b:ec:39:f5:a7:7e:9e:e9:
42:e8:c3:39:9f:90:5c:b4:48:84:68:ed:53:a2:87:
99:d4:69:b7:33:2e:78:6c:50:05:4a:62:80:1e:be:
b9:32:ed:d7:0f:1d:62:19:49:aa:cd:67:8a:17:f4:
e8:02:5d:28:5e:f4:b4:d0:33:8a:77:1e:89:63:cc:
73:8d:c8:c6:ea:5e:f9:ac:d3:20:66:d0:31:bb:e8:
eb:4d:b4:93:75:11:f7:96:b9:c6:89:a6:90:57:76:
fd:43:e4:c3:5b:b3:4e:a6:34:88:5d:f6:b3:79:bb:
a7:35:fb:e8:45:98:1d:7b:ed:29:73:9b:56:46:b7:
1e:3f:e2:97:c5:3d:53:3c:54:1f:b4:54:51:5d:fc:
ad:b3:b5:67:ba:3c:fe:a5:4f:c0:73:c3:c4:0a:8c:
8a:cb:54:c2:ec:67:e8:f3:7c:56:10:f5:6a:46:d9:
0f:6a:47:db:7a:57:31:81:cb:57:04:e4:3f:e8:3d:
50:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:2D:2A:A7:2B:57:64:58:6F:5B:CD:51:73:EA:1F:5F:B1:99:1A:E6
X509v3 Authority Key Identifier:
keyid:B3:0D:20:47:FF:60:7E:EF:85:29:37:60:E9:C1:1A:6F:59:41:D1:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sw0gR_9gfu-FKTdg6cEab1lB0bY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/96bea2-8e6d-44e8-a809-96b451f6000c/1/sw0gR_9gfu-FKTdg6cEab1lB0bY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/96bea2-8e6d-44e8-a809-96b451f6000c/1/sw0gR_9gfu-FKTdg6cEab1lB0bY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:01:5b:a1:96:17:3d:a8:c1:f7:06:ce:29:24:96:41:52:99:
76:89:80:89:78:23:90:bb:a9:4e:d2:de:35:ee:33:8a:3e:b2:
98:55:75:7f:9b:c4:b9:6c:85:4a:e8:0d:25:d7:30:a5:01:aa:
cc:29:71:bc:16:9b:fd:52:2a:02:27:fd:26:03:1b:ed:0e:cc:
b9:60:2a:48:5f:08:66:98:f7:7d:fa:a0:b0:3c:da:bc:b8:73:
d3:0f:65:eb:cb:c6:47:61:8f:e6:5f:aa:79:01:64:e2:f6:81:
0a:77:0e:31:e7:0c:20:00:f7:95:57:bd:74:94:ef:29:3e:fc:
5d:ad:2d:ef:12:83:5a:04:d3:b4:3c:1b:60:fd:74:eb:3b:ab:
fc:86:20:28:73:cb:c5:1d:9c:db:53:7b:aa:94:8e:9e:9a:4a:
bb:1c:a9:95:b6:18:b9:2b:cf:76:97:14:14:21:bf:af:7f:d2:
c2:b8:79:e0:20:0b:7f:1b:89:4c:a6:70:21:1f:ba:8c:8b:bb:
c3:99:ad:ee:78:17:bd:d9:6f:0c:db:d5:80:7d:ec:70:dd:69:
41:3d:11:db:dc:55:f5:fc:b1:88:27:86:25:a3:8c:87:4a:36:
ee:8d:ee:c7:5c:76:e3:bb:62:c6:81:aa:ef:83:2f:8a:d5:75:
a2:12:d7:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:39:30 2025 by rpki-client