Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/s90R00a2O7HrIqB8JswSkaKgaJU.mft
File: s90R00a2O7HrIqB8JswSkaKgaJU.mft (raw, json)
Hash identifier: B/mgn/NTDT2u+/Mzhept23M5uauppnABiN876ZRoS0Y=
Subject key identifier: E6:45:91:69:9E:17:8A:08:F5:98:3C:CC:05:6A:61:8B:C6:AE:2D:15
Authority key identifier: B3:DD:11:D3:46:B6:3B:B1:EB:22:A0:7C:26:CC:12:91:A2:A0:68:95
Certificate issuer: /CN=b3dd11d346b63bb1eb22a07c26cc1291a2a06895
Certificate serial: 0194BD176511011D5FD6436F18FFB9D22DDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s90R00a2O7HrIqB8JswSkaKgaJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/s90R00a2O7HrIqB8JswSkaKgaJU.mft
Manifest number: 0C36
Signing time: Fri 31 Jan 2025 16:00:14 +0000
Manifest this update: Fri 31 Jan 2025 16:00:14 +0000
Manifest next update: Sat 01 Feb 2025 16:00:14 +0000
Files and hashes: 1: DUVtp5rmZWhjlPTwXejQEd3V8J4.roa (hash: qTcPo/VJaQTji8d15MDDjiWvnKJ389xtHOegN0VgXp0=)
2: s90R00a2O7HrIqB8JswSkaKgaJU.crl (hash: iuR8R3pyo6sVUUhhiscGntGQwbubNoFnFsX3HUqZ5MU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:65:11:01:1d:5f:d6:43:6f:18:ff:b9:d2:2d:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3dd11d346b63bb1eb22a07c26cc1291a2a06895
Validity
Not Before: Jan 31 16:00:14 2025 GMT
Not After : Feb 1 16:00:14 2025 GMT
Subject: CN=e64591699e178a08f5983ccc056a618bc6ae2d15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:c3:7b:58:ad:0d:81:a0:47:f6:d0:47:4b:69:
df:b1:8b:bd:a2:65:26:6b:27:c5:ed:94:a6:70:dd:
97:25:ce:65:d9:6c:b0:16:d0:d7:26:71:86:1e:94:
cb:be:37:1a:26:c3:e4:ee:fe:1b:e2:cd:e8:a4:cd:
4c:7a:c9:97:9d:db:ae:84:34:82:4a:cd:dc:50:7c:
22:1a:e8:a0:93:d8:97:ae:09:47:f5:da:bb:2d:d2:
00:22:5e:15:7f:e7:9a:d2:2c:75:3d:92:f9:79:b3:
b0:2f:4d:04:3e:1c:78:7b:8e:41:85:d6:f8:f5:f8:
d3:55:6a:0b:99:bd:30:65:8a:53:27:6e:3d:a5:c5:
f1:22:e8:f4:fe:71:97:49:2f:ab:35:82:e4:ba:da:
93:58:ce:6f:4a:92:72:7c:6e:bf:c8:9d:e4:f8:47:
63:bd:54:79:f5:20:45:87:39:59:d3:ef:9a:c1:08:
54:54:3f:85:5f:c5:d4:c1:ca:c0:f4:03:8a:9d:06:
92:07:4a:34:40:62:c2:96:37:61:78:15:92:ee:6c:
b3:94:d3:d1:a0:0d:6c:c6:80:93:ce:66:13:3d:65:
4f:a2:c7:a0:2f:4c:8a:7e:30:c3:53:c0:0d:5f:a1:
10:cf:a0:3e:6b:72:5c:25:a3:d6:6f:bc:9f:f4:65:
c8:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:45:91:69:9E:17:8A:08:F5:98:3C:CC:05:6A:61:8B:C6:AE:2D:15
X509v3 Authority Key Identifier:
keyid:B3:DD:11:D3:46:B6:3B:B1:EB:22:A0:7C:26:CC:12:91:A2:A0:68:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s90R00a2O7HrIqB8JswSkaKgaJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/s90R00a2O7HrIqB8JswSkaKgaJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/s90R00a2O7HrIqB8JswSkaKgaJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:f9:1d:e2:ea:d3:27:02:a0:a2:35:a1:19:3d:47:38:eb:a7:
17:ef:0f:ef:ed:4b:fc:e0:a3:d9:f6:a9:1c:87:ee:ae:fb:32:
4a:55:ee:c6:60:0f:b1:01:25:79:53:a4:56:f2:5e:58:58:1c:
00:99:01:db:13:0b:d7:a7:7a:97:98:94:8f:ea:bb:11:b0:38:
90:1d:95:26:66:d5:4f:34:17:c4:44:1e:cf:ff:e9:96:7c:a0:
d5:44:81:fc:06:7e:b8:af:1d:b3:1a:2c:2f:d2:da:c1:b3:ca:
23:13:96:4c:2f:df:03:2b:55:d7:5f:d4:cb:fc:62:a2:f7:7e:
80:e7:51:72:db:2e:56:7a:50:d6:2f:70:f2:64:83:1e:ff:53:
f6:c1:ef:63:09:4b:52:fc:d4:f6:a4:f4:5b:11:92:6e:90:3e:
de:8e:55:bd:9a:ff:d6:0d:a4:be:8b:f6:63:4c:ef:8a:18:3c:
02:16:8a:0d:80:84:b5:81:4b:61:3a:72:0e:93:9a:bf:83:62:
e7:f0:c2:b5:63:dc:a1:00:5c:07:61:3c:75:66:3f:04:22:e7:
9b:c4:0c:78:15:a2:21:af:69:8c:3a:e5:48:79:4f:a0:71:56:
fe:c6:cc:d5:3a:b3:f2:7e:c7:f8:b6:fb:80:10:69:0f:71:fd:
c3:dc:bd:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:39:15 2025 by rpki-client