Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/008d7e-19a5-42b9-808c-bdb64929983f/1/S6ydJvegW02SUkmAV6OBSsr30a4.mft
File: S6ydJvegW02SUkmAV6OBSsr30a4.mft (raw, json)
Hash identifier: i2S1o5D1x6tEXZU5CWy/2iHUBfCAo95Y60d+ceHpKug=
Subject key identifier: 5C:07:EC:D6:ED:F9:54:34:26:E0:D7:95:EC:9C:D2:F0:DC:95:5B:46
Authority key identifier: 4B:AC:9D:26:F7:A0:5B:4D:92:52:49:80:57:A3:81:4A:CA:F7:D1:AE
Certificate issuer: /CN=4bac9d26f7a05b4d9252498057a3814acaf7d1ae
Certificate serial: 0194BBCE03E16FCC9A184F75D1C76A444DCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S6ydJvegW02SUkmAV6OBSsr30a4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/008d7e-19a5-42b9-808c-bdb64929983f/1/S6ydJvegW02SUkmAV6OBSsr30a4.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 10:00:28 +0000
Manifest this update: Fri 31 Jan 2025 10:00:28 +0000
Manifest next update: Sat 01 Feb 2025 10:00:28 +0000
Files and hashes: 1: S6ydJvegW02SUkmAV6OBSsr30a4.crl (hash: U3+3Tf8ExvL0KosdToP/mPmjgrHq7w1jUdzsEPkR2Ck=)
2: f3uE1VDv54J39oNndZpR1jGOB3k.roa (hash: VxNR3ak8y3zHWEe06TEiHqAXTE53GXjV8ny9xJNog8Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:03:e1:6f:cc:9a:18:4f:75:d1:c7:6a:44:4d:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bac9d26f7a05b4d9252498057a3814acaf7d1ae
Validity
Not Before: Jan 31 10:00:28 2025 GMT
Not After : Feb 1 10:00:28 2025 GMT
Subject: CN=5c07ecd6edf9543426e0d795ec9cd2f0dc955b46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:cb:2f:fa:2e:ae:b5:dd:f4:e2:d0:05:cb:4d:
32:a7:60:b7:01:53:56:a4:69:91:99:f8:b0:a4:d6:
01:b2:c9:60:64:1d:3c:d2:2a:a3:a0:e0:2d:0f:2d:
b7:44:9d:9f:df:79:a3:7b:96:38:f8:8f:a2:a7:18:
73:41:48:64:7c:ad:e6:f7:f1:f0:4d:92:38:75:db:
0b:59:a1:ab:62:74:70:ed:ff:b0:1b:c0:ac:ce:75:
48:e7:7c:98:22:20:ef:66:0c:cc:5b:7a:05:10:6f:
16:b6:92:f0:8b:0e:c5:45:0f:6a:d0:86:69:ac:51:
8f:1b:b6:57:17:35:67:7a:18:f7:fa:ab:49:60:2e:
3e:ce:55:a5:d8:78:c3:9c:80:39:a0:3d:78:d5:98:
23:09:1e:34:3b:69:94:8a:8b:1c:99:3e:8f:53:bf:
1c:e7:b4:33:18:d0:5e:69:d4:13:31:a0:99:86:b0:
51:6a:5d:2b:d3:00:a6:b1:1f:0a:34:5a:38:9a:43:
10:18:66:3a:e9:ca:83:50:d9:8b:05:8d:1c:1f:fa:
3e:ea:5c:96:73:ce:5e:09:12:18:93:36:3e:17:d6:
f6:ec:ae:bf:63:5d:c0:f2:3f:24:ad:c8:33:f8:f7:
32:6a:d8:e0:81:ec:d5:bd:b0:6c:55:88:42:99:67:
5b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:07:EC:D6:ED:F9:54:34:26:E0:D7:95:EC:9C:D2:F0:DC:95:5B:46
X509v3 Authority Key Identifier:
keyid:4B:AC:9D:26:F7:A0:5B:4D:92:52:49:80:57:A3:81:4A:CA:F7:D1:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S6ydJvegW02SUkmAV6OBSsr30a4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/008d7e-19a5-42b9-808c-bdb64929983f/1/S6ydJvegW02SUkmAV6OBSsr30a4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/008d7e-19a5-42b9-808c-bdb64929983f/1/S6ydJvegW02SUkmAV6OBSsr30a4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:8d:e4:f0:df:95:4b:20:5d:a9:7e:8a:eb:03:b5:0a:d8:e0:
6a:84:22:de:5c:d3:72:ba:eb:51:0a:ce:b7:7a:fb:2a:e4:28:
d6:f3:ae:3e:d2:1b:25:0a:e4:1a:f6:0e:d8:92:c4:b6:6a:86:
a4:08:97:4b:21:44:c6:6e:03:c5:8c:14:59:20:a6:ff:b1:e5:
49:6d:21:70:26:1a:b5:5e:10:a6:bc:92:c3:bc:63:44:31:17:
22:7c:f3:8e:9d:98:ee:83:72:ab:3f:17:47:22:58:b5:72:c8:
1b:e9:18:d2:00:09:f3:c7:24:21:53:d5:ab:fc:d8:21:db:88:
c2:94:c1:60:c9:08:00:d7:dc:1a:81:e1:4d:74:fc:08:7c:2e:
54:43:f4:42:41:c1:c3:a6:c9:f9:ae:21:24:d8:e3:1b:77:31:
8c:9d:4a:d7:be:bf:e0:c4:fc:ba:d1:43:50:07:ca:c9:6d:e0:
df:af:91:44:8e:f2:71:f0:53:e0:32:28:b2:df:32:86:11:22:
25:8b:d4:8a:a9:6b:62:81:96:23:f7:d7:a1:dc:be:35:23:6a:
c5:f0:5a:24:b8:dc:82:c7:76:9a:c6:f5:9d:75:b6:a5:b8:e7:
8a:9a:9e:c2:74:2b:98:42:8b:94:d6:f7:93:6a:23:2c:11:b6:
37:83:29:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:42:05 2025 by rpki-client