Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/bc4d7b-3cb7-4f33-89e7-2100bf0f140a/1/saibZ8Zt6_Xe0_KIC7SUHTBBElc.mft
File: saibZ8Zt6_Xe0_KIC7SUHTBBElc.mft (raw, json)
Hash identifier: 7lZshRXQeoa3qf+29MQ26W5Wef61LHp+RYWbrGTy14w=
Subject key identifier: FC:C0:F3:06:EA:D0:43:94:B2:79:6D:DC:E0:32:A5:13:71:4D:73:C2
Authority key identifier: B1:A8:9B:67:C6:6D:EB:F5:DE:D3:F2:88:0B:B4:94:1D:30:41:12:57
Certificate issuer: /CN=b1a89b67c66debf5ded3f2880bb4941d30411257
Certificate serial: 0194BD181940CF774580713F27FE159D0B8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saibZ8Zt6_Xe0_KIC7SUHTBBElc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/bc4d7b-3cb7-4f33-89e7-2100bf0f140a/1/saibZ8Zt6_Xe0_KIC7SUHTBBElc.mft
Manifest number: 0C99
Signing time: Fri 31 Jan 2025 16:01:00 +0000
Manifest this update: Fri 31 Jan 2025 16:01:00 +0000
Manifest next update: Sat 01 Feb 2025 16:01:00 +0000
Files and hashes: 1: cAAFdZGeVooBzCSUhqsDEyrnbqI.roa (hash: gbj8YLQEZGk70onIHa1ffFfmO4WgyObojVI+6+is2V4=)
2: saibZ8Zt6_Xe0_KIC7SUHTBBElc.crl (hash: nHm9MX+yAVPNqAZTK41XLBI7rdqTYLXalcbwgGvHAxw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:18:19:40:cf:77:45:80:71:3f:27:fe:15:9d:0b:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a89b67c66debf5ded3f2880bb4941d30411257
Validity
Not Before: Jan 31 16:01:00 2025 GMT
Not After : Feb 1 16:01:00 2025 GMT
Subject: CN=fcc0f306ead04394b2796ddce032a513714d73c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:1a:c7:db:48:7f:7e:f7:46:22:95:68:7c:dd:
f2:fc:15:ea:56:73:9b:96:94:12:7e:44:6e:bc:05:
1e:9c:35:5a:2b:24:8c:04:92:ff:60:84:00:50:8f:
4b:97:3f:8a:52:39:6c:b9:31:4f:6d:32:cc:2e:5b:
31:4f:1d:79:5a:a6:7c:87:b6:ec:d1:fa:8d:7c:48:
14:96:46:99:da:c8:67:5b:23:57:f5:cf:d1:e1:65:
28:42:ad:3d:2f:94:a8:d5:fa:40:04:ec:36:78:55:
75:9c:7a:4b:15:90:52:5b:a1:e7:9f:79:f4:3e:b4:
78:22:4d:8a:24:6c:7f:a3:9d:05:3b:12:79:64:59:
a4:e0:ce:bf:8a:a0:36:fd:b9:dc:7b:ae:c1:c8:8b:
7c:73:ab:a6:80:dd:57:dc:6c:b1:99:35:5d:4c:18:
2c:e7:4b:32:b1:54:8e:b4:c5:95:36:db:39:13:f0:
32:4c:ce:26:f3:0f:f3:33:de:e4:40:80:19:2a:11:
a1:67:41:bc:de:ae:79:d5:dd:c4:45:ca:12:d8:46:
30:5d:e6:89:11:88:eb:58:ff:51:4d:ee:29:26:1c:
1e:f9:8f:42:62:e6:99:2e:24:71:f2:db:80:1f:54:
b1:88:33:5e:1f:6f:12:47:01:52:db:16:c6:37:db:
1f:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:C0:F3:06:EA:D0:43:94:B2:79:6D:DC:E0:32:A5:13:71:4D:73:C2
X509v3 Authority Key Identifier:
keyid:B1:A8:9B:67:C6:6D:EB:F5:DE:D3:F2:88:0B:B4:94:1D:30:41:12:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saibZ8Zt6_Xe0_KIC7SUHTBBElc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/bc4d7b-3cb7-4f33-89e7-2100bf0f140a/1/saibZ8Zt6_Xe0_KIC7SUHTBBElc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/bc4d7b-3cb7-4f33-89e7-2100bf0f140a/1/saibZ8Zt6_Xe0_KIC7SUHTBBElc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dc:88:8a:39:99:20:1f:38:fd:7d:de:7f:0b:ff:d4:4f:45:67:
f9:33:73:4c:8e:42:8e:9f:a4:35:77:79:c8:c6:7a:e7:97:ae:
c9:a2:c0:87:79:e5:4e:40:c8:63:65:40:8f:1a:a3:0c:2e:b8:
85:74:4c:28:c8:2f:f0:81:ee:16:42:d1:8d:95:de:90:3e:a3:
85:14:5f:82:13:17:ac:c2:a3:f8:d4:7c:68:b8:c2:ec:2a:87:
3e:c0:bc:1a:81:d9:d8:0c:69:36:70:c5:ea:f9:7f:98:c4:4a:
b2:81:f0:8a:d2:82:47:10:60:d0:2b:92:2e:fb:c1:0f:08:9d:
97:c5:18:bb:62:71:a4:80:36:b6:86:20:d2:48:d2:f4:46:8f:
9e:fb:0a:4c:c5:bf:eb:92:46:7a:96:34:de:df:fa:a1:fd:25:
8f:01:b6:36:cf:60:d0:27:0f:d0:b8:59:15:df:f6:07:a5:c6:
23:f7:41:89:4c:91:e3:f6:94:8f:c7:52:85:6e:d0:a9:c7:55:
5d:c5:36:25:f6:50:2c:d8:69:4a:7e:32:75:1a:00:14:00:7b:
1f:f8:40:7d:c9:b8:ae:b8:ad:f9:b8:47:be:82:53:07:72:7d:
3c:2d:94:4a:fb:03:41:e0:49:22:67:10:96:9a:a1:f1:1f:f8:
57:92:1a:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:07:41 2025 by rpki-client