Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/f499cd-fad6-4fb0-9be7-4a7904ffc8e1/1/sejPc4YgDf2psGfbnHfTBmDXTNo.mft
File: sejPc4YgDf2psGfbnHfTBmDXTNo.mft (raw, json)
Hash identifier: JQyZi3dAYU1SkaSt+HRxD2uPaWhU79/rW2wPseE0v4w=
Subject key identifier: 6C:AE:69:BA:AC:7E:A1:18:04:CB:6B:72:C4:2A:06:C4:EC:8B:4E:77
Authority key identifier: B1:E8:CF:73:86:20:0D:FD:A9:B0:67:DB:9C:77:D3:06:60:D7:4C:DA
Certificate issuer: /CN=b1e8cf7386200dfda9b067db9c77d30660d74cda
Certificate serial: 0194BD17A9B905250CB83E3C08F32B12DE5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sejPc4YgDf2psGfbnHfTBmDXTNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/f499cd-fad6-4fb0-9be7-4a7904ffc8e1/1/sejPc4YgDf2psGfbnHfTBmDXTNo.mft
Manifest number: 0944
Signing time: Fri 31 Jan 2025 16:00:32 +0000
Manifest this update: Fri 31 Jan 2025 16:00:32 +0000
Manifest next update: Sat 01 Feb 2025 16:00:32 +0000
Files and hashes: 1: AXjvsvQT0QHgjGJCOykWGFNYr-c.roa (hash: 7RT23qfYCEUyYP4ewoJmIzu1W/Zc3geSmO8k80S5/ts=)
2: sejPc4YgDf2psGfbnHfTBmDXTNo.crl (hash: A7NkiKYrZqdPUak0yIuOj2k9vJs4x41q6d1+VA4kNHI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:a9:b9:05:25:0c:b8:3e:3c:08:f3:2b:12:de:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1e8cf7386200dfda9b067db9c77d30660d74cda
Validity
Not Before: Jan 31 16:00:32 2025 GMT
Not After : Feb 1 16:00:32 2025 GMT
Subject: CN=6cae69baac7ea11804cb6b72c42a06c4ec8b4e77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:40:bb:51:3b:d5:d5:d4:65:79:b6:aa:73:0e:
c3:a1:0a:b1:ba:1a:6e:a6:88:b8:4d:d5:0b:e7:a1:
ca:ca:12:32:1b:52:a4:b9:4a:ef:c5:9c:40:36:9d:
2e:a6:ed:41:f3:8d:21:cd:74:0a:98:f4:ff:43:5c:
18:89:ea:12:ba:32:d6:c5:dc:1a:06:b7:a5:40:9f:
32:6c:97:8f:c5:3e:78:9c:88:f2:12:ce:8d:af:c5:
47:23:ca:7c:82:d4:b1:14:4d:56:33:c1:3c:f1:79:
3e:f1:64:35:82:38:3a:9a:50:22:57:64:b7:d5:ce:
72:a4:e6:ac:37:aa:31:73:86:b6:51:a0:14:e1:8f:
bd:25:1e:b7:d2:7e:a1:7d:96:c7:a6:ca:3f:8a:03:
30:77:c3:3d:5f:3c:42:7e:fd:39:cc:53:d7:7e:52:
38:e0:1e:3f:a1:de:4f:28:ef:b9:f0:d1:36:5a:33:
19:5c:1f:51:68:14:74:5a:f4:90:65:fc:c2:2e:e5:
85:7e:cd:0e:38:d4:53:96:fc:c1:d6:85:44:b4:c9:
19:37:92:a9:b9:83:2c:e1:e5:a4:6f:3c:c7:eb:a8:
6c:8a:32:d4:75:ae:e8:e9:3a:8d:d8:99:59:c1:53:
2c:3a:1e:c5:7b:7d:f4:5f:97:23:d1:ef:3b:c6:f3:
ab:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:AE:69:BA:AC:7E:A1:18:04:CB:6B:72:C4:2A:06:C4:EC:8B:4E:77
X509v3 Authority Key Identifier:
keyid:B1:E8:CF:73:86:20:0D:FD:A9:B0:67:DB:9C:77:D3:06:60:D7:4C:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sejPc4YgDf2psGfbnHfTBmDXTNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/f499cd-fad6-4fb0-9be7-4a7904ffc8e1/1/sejPc4YgDf2psGfbnHfTBmDXTNo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/f499cd-fad6-4fb0-9be7-4a7904ffc8e1/1/sejPc4YgDf2psGfbnHfTBmDXTNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:bf:64:ae:83:94:c3:48:b8:61:2d:e6:48:1d:f0:a3:8b:f2:
30:88:d4:0e:d9:b6:c6:63:fe:0e:3c:c6:7b:ca:e2:b8:a4:87:
8c:85:46:3a:22:23:44:02:bb:6a:bf:44:e0:55:5c:64:38:d2:
55:73:4b:9d:a4:55:78:78:83:9a:6a:3d:b4:bc:07:65:4e:a3:
88:31:44:2b:3b:07:28:d8:10:e7:98:62:d8:d6:08:4b:66:41:
9d:a9:0d:4e:40:53:f1:45:86:f0:95:9a:d0:cb:9c:e9:d0:f2:
f0:d4:12:ef:93:c7:08:ea:5a:6a:c4:8b:2d:eb:8b:69:9e:59:
40:03:14:49:50:8b:d7:2e:84:f2:b5:e7:5a:66:3c:ed:c4:49:
13:1b:0a:72:cf:e9:57:ae:a0:63:b3:f4:a1:4f:27:5f:6a:fd:
35:41:87:19:5d:a4:1d:9d:65:0e:d0:ba:91:d6:78:03:a3:42:
ad:51:ce:e8:24:08:2f:9a:30:1a:d3:d5:9a:2e:5b:72:5f:4b:
78:4d:29:3b:ae:ce:99:ba:a1:2a:19:d5:f6:90:bd:4e:bd:d3:
9b:c1:dc:28:fb:0c:42:d3:57:3e:d7:ce:a7:0f:c1:94:d7:0e:
bb:77:2d:a3:b6:18:1a:1a:48:0c:3d:b9:6a:c9:bf:a7:aa:92:
04:c8:85:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:22:15 2025 by rpki-client