Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/a64b09-64df-470c-a64d-1f6991877b26/1/S3IGbX5sqK0v-mKmmwZ5I6Qt-W8.mft
File: S3IGbX5sqK0v-mKmmwZ5I6Qt-W8.mft (raw, json)
Hash identifier: EytIqS0pRuRUXpjyg+vK7dCqfwsObgl+gS+UCaF94u4=
Subject key identifier: C2:67:13:06:5B:AB:BB:8E:86:D8:32:99:CC:40:CB:C7:E5:E8:38:09
Authority key identifier: 4B:72:06:6D:7E:6C:A8:AD:2F:FA:62:A6:9B:06:79:23:A4:2D:F9:6F
Certificate issuer: /CN=4b72066d7e6ca8ad2ffa62a69b067923a42df96f
Certificate serial: 0194BD4E5ABB5F8167FF5837933B5C15438F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S3IGbX5sqK0v-mKmmwZ5I6Qt-W8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/a64b09-64df-470c-a64d-1f6991877b26/1/S3IGbX5sqK0v-mKmmwZ5I6Qt-W8.mft
Manifest number: 10C5
Signing time: Fri 31 Jan 2025 17:00:16 +0000
Manifest this update: Fri 31 Jan 2025 17:00:16 +0000
Manifest next update: Sat 01 Feb 2025 17:00:16 +0000
Files and hashes: 1: 1D0kryG-hg5X4kNtLF0_L_6fbtc.roa (hash: Zop4UA3qvwcLs+PgF6ZAbdQWhdOq1xNbvhqjWudAWN0=)
2: S3IGbX5sqK0v-mKmmwZ5I6Qt-W8.crl (hash: XBJwp3dF35hZUA+ZF35o6IeF5+ZZTvL/MBfUQR8xN04=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:5a:bb:5f:81:67:ff:58:37:93:3b:5c:15:43:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b72066d7e6ca8ad2ffa62a69b067923a42df96f
Validity
Not Before: Jan 31 17:00:16 2025 GMT
Not After : Feb 1 17:00:16 2025 GMT
Subject: CN=c26713065babbb8e86d83299cc40cbc7e5e83809
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:f3:2f:c8:ec:28:41:66:10:d2:1a:30:68:b6:
a8:75:27:55:65:02:22:61:79:7c:78:de:5a:6a:ce:
fd:ea:2e:c5:2c:f8:83:ba:f2:57:d2:a5:29:3b:a3:
b5:1c:ea:13:f2:a0:6f:2c:36:95:86:b9:65:96:cc:
54:e6:c4:f6:9c:4e:3b:53:9d:ef:63:59:3a:7f:d9:
41:16:b4:d3:e5:b6:01:9d:4b:fb:c9:32:7e:6f:c8:
44:02:6d:ef:d6:95:6a:7e:e2:73:3b:5d:c9:be:aa:
c3:0c:ec:52:08:4e:65:3a:69:3d:87:94:45:13:e7:
17:7c:72:7c:21:ba:c4:aa:62:7f:6b:7c:fa:01:56:
d5:18:50:14:59:1d:ee:0b:2f:bb:43:66:d8:ad:b6:
24:6b:b2:a1:c5:57:c9:e3:7c:e3:37:98:1a:f3:82:
c9:15:78:a4:c5:fd:67:60:85:67:33:99:ef:4a:d7:
3d:e2:cf:6a:12:4a:bc:88:f0:e9:03:d0:c2:8c:48:
28:67:ce:85:fc:ec:13:a2:f7:19:34:c9:9d:5a:d4:
63:f8:dc:3e:32:ee:ee:83:24:47:70:70:02:48:50:
5e:3b:7e:f4:b8:5d:b5:8f:5f:ca:e5:41:74:f4:fd:
46:16:08:37:2a:31:ed:6b:e3:f0:4f:d0:b9:24:13:
dd:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:67:13:06:5B:AB:BB:8E:86:D8:32:99:CC:40:CB:C7:E5:E8:38:09
X509v3 Authority Key Identifier:
keyid:4B:72:06:6D:7E:6C:A8:AD:2F:FA:62:A6:9B:06:79:23:A4:2D:F9:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S3IGbX5sqK0v-mKmmwZ5I6Qt-W8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a64b09-64df-470c-a64d-1f6991877b26/1/S3IGbX5sqK0v-mKmmwZ5I6Qt-W8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a64b09-64df-470c-a64d-1f6991877b26/1/S3IGbX5sqK0v-mKmmwZ5I6Qt-W8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:37:49:46:2f:30:ac:52:43:c7:15:06:33:9a:f5:39:66:63:
a5:d5:29:bd:49:0d:2d:5b:af:df:d6:3d:f4:c6:3c:f4:5b:b4:
77:18:10:6e:bc:e1:2e:93:60:1a:35:e9:97:15:c4:fa:a5:92:
88:f5:2a:fb:1a:03:80:b4:fd:ff:6f:14:7e:7a:62:65:a4:ae:
0f:bf:40:82:c7:03:11:14:63:19:ee:b7:d4:e4:0a:82:7f:54:
34:8b:79:62:a7:30:bd:fd:01:17:b4:f8:3e:d0:fe:e7:47:cd:
72:fe:57:b5:9b:66:82:ce:61:42:49:73:8b:8e:58:fa:b4:1b:
ba:7b:65:6b:a7:04:dc:fc:73:d3:ad:be:2d:b5:d7:3f:21:90:
63:d1:8c:92:50:a0:c8:aa:fb:e6:de:f9:e2:2a:2b:cc:9b:91:
23:2a:30:ad:5c:60:e1:75:79:4a:e5:06:dd:a0:61:82:7a:4f:
da:e9:9e:ca:e2:44:ec:95:5e:12:79:f1:da:61:cb:c9:04:19:
fd:49:11:d1:44:54:18:c9:9f:e4:5d:9e:fd:99:dd:38:d3:85:
32:3a:be:31:ab:72:dd:2c:6a:e1:51:5d:b8:6f:14:a6:d2:c1:
93:47:6d:4f:a1:0f:44:d5:25:75:94:86:40:3a:21:f6:63:92:
61:18:03:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:29:33 2025 by rpki-client