Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/5f6566-8160-4394-875f-a7ead8ab1273/1/sUZY_Ks3Ay3-qW7wrmjcne_21wU.mft
File: sUZY_Ks3Ay3-qW7wrmjcne_21wU.mft (raw, json)
Hash identifier: DtW2BnCX+ozfDrxjj23hT1w7a40pdokl3D2uZ90tgos=
Subject key identifier: 1F:1A:63:B1:CA:F8:11:B6:09:96:3A:ED:C7:5D:9E:4C:77:E3:47:BF
Authority key identifier: B1:46:58:FC:AB:37:03:2D:FE:A9:6E:F0:AE:68:DC:9D:EF:F6:D7:05
Certificate issuer: /CN=b14658fcab37032dfea96ef0ae68dc9deff6d705
Certificate serial: 0194BD17A0B030103FA6E9011BCE8314C6B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sUZY_Ks3Ay3-qW7wrmjcne_21wU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/5f6566-8160-4394-875f-a7ead8ab1273/1/sUZY_Ks3Ay3-qW7wrmjcne_21wU.mft
Manifest number: 13AB
Signing time: Fri 31 Jan 2025 16:00:29 +0000
Manifest this update: Fri 31 Jan 2025 16:00:29 +0000
Manifest next update: Sat 01 Feb 2025 16:00:29 +0000
Files and hashes: 1: F8n_Svao3XVMTZ9Sm-3QBaNvm1s.roa (hash: jXQFrBti/A7a3NKEgrbBnXx/tbixG/ctP16QJsp1XeE=)
2: sUZY_Ks3Ay3-qW7wrmjcne_21wU.crl (hash: bli6MnshWRoOpYTtRIv4W6Q5cPO2B3L+ANvEOM8KuyI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:a0:b0:30:10:3f:a6:e9:01:1b:ce:83:14:c6:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b14658fcab37032dfea96ef0ae68dc9deff6d705
Validity
Not Before: Jan 31 16:00:29 2025 GMT
Not After : Feb 1 16:00:29 2025 GMT
Subject: CN=1f1a63b1caf811b609963aedc75d9e4c77e347bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:44:0b:80:47:36:bb:22:8a:49:3b:da:56:19:
a3:68:c7:8c:2d:ff:4a:18:ef:6f:d2:3e:a8:92:7d:
ea:a2:e4:c4:f8:e3:8f:9c:94:44:5e:8b:8e:3a:55:
7a:dd:a3:d5:59:84:8c:8f:ab:fb:38:69:cf:19:79:
4a:80:c1:f8:8c:c2:fb:f1:b6:4c:a1:2c:a6:b0:33:
db:15:2f:91:3f:56:b4:7b:85:2d:32:7e:4d:42:40:
64:02:20:c1:d7:cb:e8:45:29:70:c7:15:fa:48:00:
55:f9:ce:54:a6:07:45:a0:a1:f2:4c:fe:8c:53:6f:
03:38:70:91:f0:95:1b:e3:56:ad:64:a1:57:d7:5c:
20:11:b7:c8:6a:e4:80:e9:30:34:85:32:df:96:b4:
af:6a:53:12:44:9d:f6:e5:bd:1c:7e:9b:d1:89:64:
9c:4a:aa:9b:44:9f:fc:64:d0:dd:be:10:7f:55:69:
33:53:3a:ae:f4:48:3f:5e:8b:ad:b7:a6:46:08:4b:
be:74:87:04:97:66:33:31:77:73:5b:9b:8e:8e:23:
c9:28:47:20:46:d2:56:b0:30:e9:5f:67:39:e3:7f:
58:9c:16:00:39:65:ce:8f:05:8d:e7:ce:94:5c:b9:
cd:6a:1d:9f:a6:e1:fb:7b:c9:db:45:42:c0:d5:e4:
0e:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:1A:63:B1:CA:F8:11:B6:09:96:3A:ED:C7:5D:9E:4C:77:E3:47:BF
X509v3 Authority Key Identifier:
keyid:B1:46:58:FC:AB:37:03:2D:FE:A9:6E:F0:AE:68:DC:9D:EF:F6:D7:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sUZY_Ks3Ay3-qW7wrmjcne_21wU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/5f6566-8160-4394-875f-a7ead8ab1273/1/sUZY_Ks3Ay3-qW7wrmjcne_21wU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/5f6566-8160-4394-875f-a7ead8ab1273/1/sUZY_Ks3Ay3-qW7wrmjcne_21wU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:99:03:7a:37:0e:c4:8d:c0:73:7f:a2:11:b7:4c:8d:c2:1a:
61:3b:39:40:66:f0:2d:42:67:98:44:66:1e:dc:67:2f:4d:3a:
54:bf:cf:04:10:1e:b4:03:38:e8:e9:7f:95:a3:2f:47:da:a6:
ce:dd:95:d9:dd:c2:f5:72:e5:9b:9b:98:25:a9:eb:16:f8:6b:
62:d6:7d:78:bc:19:8d:b8:3e:cc:a4:ce:c7:31:d6:91:35:3a:
0b:ca:84:40:08:5e:71:f1:67:e8:a6:cc:59:02:6b:15:34:60:
3a:3a:10:fb:e8:a7:58:80:c3:4c:c9:14:5e:77:69:8e:94:b5:
1e:87:47:e7:46:4f:42:aa:27:4d:05:aa:53:8b:3d:21:5a:fa:
84:a4:0d:3b:ee:2e:83:35:22:0e:e0:eb:c8:3d:8a:d0:e0:28:
47:0b:e3:65:7a:8d:69:3d:c6:c9:7d:18:e4:34:d9:12:c6:4c:
54:3c:fd:95:92:42:65:b1:2c:93:70:af:ec:35:77:bc:74:92:
ca:77:b6:a3:e2:a4:9f:35:b7:fa:38:d4:bd:5d:98:72:8a:2b:
10:ef:98:24:ef:d7:fb:2c:0b:95:10:20:6d:b7:24:25:b7:9f:
74:18:77:2c:3b:ca:58:bd:fa:6a:c5:c7:28:0c:17:d8:c0:f4:
c2:e2:8c:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:45 2025 by rpki-client