Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/3fd6e9-17d3-4019-8669-9666d976285d/1/sKVpmgjHv9cHz7BtMhP1ysvyglc.mft
File: sKVpmgjHv9cHz7BtMhP1ysvyglc.mft (raw, json)
Hash identifier: l1cbNzkmEpc6H70A7kalhIeddVRnTNnBIeFSD0Oe3mw=
Subject key identifier: 45:98:6E:0A:1A:E7:15:0E:1B:4E:41:02:06:CB:81:91:22:06:D6:A3
Authority key identifier: B0:A5:69:9A:08:C7:BF:D7:07:CF:B0:6D:32:13:F5:CA:CB:F2:82:57
Certificate issuer: /CN=b0a5699a08c7bfd707cfb06d3213f5cacbf28257
Certificate serial: 0194BCA99663A0F167D24A78C601455E85D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sKVpmgjHv9cHz7BtMhP1ysvyglc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/3fd6e9-17d3-4019-8669-9666d976285d/1/sKVpmgjHv9cHz7BtMhP1ysvyglc.mft
Manifest number: 0459
Signing time: Fri 31 Jan 2025 14:00:18 +0000
Manifest this update: Fri 31 Jan 2025 14:00:18 +0000
Manifest next update: Sat 01 Feb 2025 14:00:18 +0000
Files and hashes: 1: 0Z-sHAnSl4bp7AfPwuyFGmDsZbs.roa (hash: Qd7UsFgJxINuR8Lxz3kq3vgAmJnbsTZmvzg3tBE1gSg=)
2: PLGff91PpnIaKhW2uDOuQAHfxZI.roa (hash: tVtdUbnR9K0LDd3rO9R8lG1IenCOkCUAxrqcCPMKhz8=)
3: sKVpmgjHv9cHz7BtMhP1ysvyglc.crl (hash: Grexsf+KHh1qTpmSL6IQ3RKBxqh54l3aEqXWjTIT5q4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:96:63:a0:f1:67:d2:4a:78:c6:01:45:5e:85:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0a5699a08c7bfd707cfb06d3213f5cacbf28257
Validity
Not Before: Jan 31 14:00:18 2025 GMT
Not After : Feb 1 14:00:18 2025 GMT
Subject: CN=45986e0a1ae7150e1b4e410206cb81912206d6a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ae:ea:3f:c5:76:87:a0:1b:99:70:c2:88:80:
f6:0a:07:e6:40:49:b9:c1:29:bc:24:91:9b:04:bc:
e4:a1:85:5f:9f:b5:3c:8a:8b:ca:4c:14:ff:8d:3b:
6e:ae:24:04:d4:05:fe:97:56:87:66:b6:fe:cc:eb:
30:bf:ef:f3:55:37:5d:6a:9f:38:c4:f6:91:1e:af:
91:2d:00:be:89:2e:fb:0e:79:fc:5c:74:81:05:c7:
8c:23:e6:2f:d4:44:80:3e:e5:7d:d0:ed:c5:40:9b:
86:b8:5f:bb:81:48:f3:63:34:ff:b1:c6:f5:74:83:
0e:2e:19:7c:02:18:cd:4d:5d:1c:a5:96:9e:11:2e:
27:0b:53:78:71:41:ab:d1:93:40:c0:4b:6d:8a:e5:
b6:9e:cf:61:0b:c1:b3:fa:4f:80:09:3c:39:50:8b:
d9:7f:41:cb:b2:c2:1c:95:9c:aa:5e:c4:6c:e8:cb:
87:ef:27:d0:94:a6:2c:d8:b3:b5:3e:82:3c:71:22:
f0:fb:cf:93:c5:bf:51:37:37:4c:41:12:94:e5:7d:
40:ee:ff:fa:dc:82:72:21:cc:0b:85:c7:ad:a8:1c:
fe:68:37:4b:65:a0:68:a0:20:8f:43:55:d8:7a:35:
bb:93:4f:17:4f:16:95:ea:a1:d0:5d:42:68:6a:f1:
e1:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:98:6E:0A:1A:E7:15:0E:1B:4E:41:02:06:CB:81:91:22:06:D6:A3
X509v3 Authority Key Identifier:
keyid:B0:A5:69:9A:08:C7:BF:D7:07:CF:B0:6D:32:13:F5:CA:CB:F2:82:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sKVpmgjHv9cHz7BtMhP1ysvyglc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/3fd6e9-17d3-4019-8669-9666d976285d/1/sKVpmgjHv9cHz7BtMhP1ysvyglc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/3fd6e9-17d3-4019-8669-9666d976285d/1/sKVpmgjHv9cHz7BtMhP1ysvyglc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:10:0d:ec:e1:01:02:a8:59:5a:ff:2d:c4:54:2c:72:b8:95:
61:49:e3:c7:96:55:62:d3:25:47:2d:3e:76:7d:82:70:96:49:
4a:ce:50:57:81:22:8a:9a:a5:5f:bc:58:44:5f:81:eb:67:65:
5d:46:0c:7c:0a:30:4b:5c:1e:88:90:ab:c6:39:e0:1a:01:04:
b3:c9:fe:9c:7a:eb:f4:b6:64:c5:32:c0:f5:10:09:c0:3e:de:
cf:8e:f9:76:8d:57:a6:3b:98:59:d5:d6:22:d3:d1:09:a8:6c:
bd:e6:3f:17:a9:c4:93:55:e8:18:e3:5e:9f:3b:32:cf:7d:7c:
d6:d4:84:1a:61:4d:82:70:d6:0b:e7:2c:39:6e:ec:a9:0c:ef:
eb:cd:79:ad:31:fe:0d:13:44:6c:05:ad:2c:87:57:2c:6d:67:
2f:40:d3:58:d8:ed:2a:96:e3:d8:7b:f9:9b:3e:6d:74:6a:d3:
b1:5d:c6:c6:7a:0d:16:6d:ed:ed:af:16:30:80:27:90:58:44:
6e:ba:29:ae:fa:89:df:17:ac:f0:bd:cc:ab:37:bb:18:c6:91:
d2:28:45:98:e6:04:17:61:c1:ea:ea:eb:25:08:7e:48:d2:2d:
55:30:8a:3b:69:8d:82:80:65:09:97:c0:fc:cf:a2:89:f8:79:
c3:10:a4:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:34:17 2025 by rpki-client