Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/3b2c00-94b6-434d-b362-96a34b022f89/1/15-SXhc4vDUrxrXPX_lRs9gTrjk.mft
File: 15-SXhc4vDUrxrXPX_lRs9gTrjk.mft (raw, json)
Hash identifier: X9ji9pnFjJumhVKnbuzAzF/bjgCDDnBsPVtCV3XcjgU=
Subject key identifier: 12:8F:F4:8D:64:AA:8D:0D:28:84:57:51:A1:2B:A8:35:E5:F9:EF:62
Authority key identifier: D7:9F:92:5E:17:38:BC:35:2B:C6:B5:CF:5F:F9:51:B3:D8:13:AE:39
Certificate issuer: /CN=d79f925e1738bc352bc6b5cf5ff951b3d813ae39
Certificate serial: 0194BC73155BFB9D10E9F8B2340F569DF6D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/15-SXhc4vDUrxrXPX_lRs9gTrjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/3b2c00-94b6-434d-b362-96a34b022f89/1/15-SXhc4vDUrxrXPX_lRs9gTrjk.mft
Manifest number: 04AB
Signing time: Fri 31 Jan 2025 13:00:46 +0000
Manifest this update: Fri 31 Jan 2025 13:00:46 +0000
Manifest next update: Sat 01 Feb 2025 13:00:46 +0000
Files and hashes: 1: 15-SXhc4vDUrxrXPX_lRs9gTrjk.crl (hash: TT3YfpahfTzM4lMBrMSiFyMw8f8F2cDrXlDjsVkol+Y=)
2: qNoTgo75uHZdX7Pw5KIkSMbCuIk.roa (hash: Wp90B7y4b1beWFho9S7pJxCTTLLhfUdptb3Ax7iQwmA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:15:5b:fb:9d:10:e9:f8:b2:34:0f:56:9d:f6:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d79f925e1738bc352bc6b5cf5ff951b3d813ae39
Validity
Not Before: Jan 31 13:00:46 2025 GMT
Not After : Feb 1 13:00:46 2025 GMT
Subject: CN=128ff48d64aa8d0d28845751a12ba835e5f9ef62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:c3:22:9b:b1:93:aa:b7:92:43:cc:82:b2:03:
74:a6:d6:e9:a5:32:11:f0:1d:5b:c4:05:7d:78:ee:
ad:5a:9f:5c:28:f3:f4:8c:1f:91:4e:3d:93:d2:ae:
cc:3b:46:71:38:95:fb:0f:ad:57:9f:80:b7:eb:f1:
0f:99:b3:59:88:87:27:ec:53:54:e7:b5:8d:01:aa:
01:96:2b:90:7c:81:5c:2d:54:f0:a8:47:15:ae:c7:
83:b0:03:d9:fe:8a:57:38:2d:97:a1:e6:18:8e:43:
fd:5a:88:83:b7:cb:07:4a:c0:77:42:80:41:db:86:
14:98:1b:95:82:05:fc:17:54:9a:27:a4:25:95:3c:
97:59:15:87:a4:25:5b:49:55:76:ed:48:cb:67:7b:
f6:0c:92:e7:e1:99:f7:7a:4e:1c:4d:c8:3c:60:ef:
64:5f:72:59:2c:5e:9b:04:06:46:09:85:1e:d4:f4:
df:f5:55:a7:15:83:ce:67:1d:01:a1:b6:02:07:fc:
d2:df:ca:f2:5e:1f:a1:a3:91:3a:53:49:ef:1b:b6:
ad:7d:dc:b3:2d:6d:f9:da:67:e2:82:90:9a:d1:66:
54:b7:14:d5:91:f0:0f:f1:0b:81:49:27:b9:c2:6b:
b5:fa:f8:3d:bf:15:55:79:70:cb:35:c1:8b:a3:e1:
ad:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:8F:F4:8D:64:AA:8D:0D:28:84:57:51:A1:2B:A8:35:E5:F9:EF:62
X509v3 Authority Key Identifier:
keyid:D7:9F:92:5E:17:38:BC:35:2B:C6:B5:CF:5F:F9:51:B3:D8:13:AE:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/15-SXhc4vDUrxrXPX_lRs9gTrjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3b2c00-94b6-434d-b362-96a34b022f89/1/15-SXhc4vDUrxrXPX_lRs9gTrjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3b2c00-94b6-434d-b362-96a34b022f89/1/15-SXhc4vDUrxrXPX_lRs9gTrjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:79:da:bb:54:c4:01:13:53:3a:3b:f8:7f:5a:ab:b2:d8:78:
e5:7e:db:fe:2e:35:55:a9:d0:40:24:13:ad:61:cb:e2:23:18:
80:67:41:6f:ff:a0:d7:38:81:7e:3f:2f:2f:80:68:b0:0b:ac:
15:88:bd:9a:e6:c8:07:22:30:b6:d6:01:04:26:48:da:c2:33:
a0:4e:d6:1e:a4:c4:91:d6:c8:67:46:70:ac:97:6e:e5:a1:3d:
72:5f:1f:34:45:40:05:26:72:66:d0:f9:ff:8b:c4:4b:f1:72:
18:19:a2:22:9d:5c:e4:37:43:26:86:75:9d:c9:fc:16:5a:3e:
86:8d:b5:b0:b2:16:5b:0b:31:02:98:c6:5b:ef:4c:5e:e5:b0:
2f:49:1d:31:14:21:24:fa:75:a7:1e:9e:6e:36:2f:df:3c:5a:
4d:f3:0d:6b:9f:1e:91:4a:61:24:f5:d6:fb:14:33:3d:85:c3:
08:3e:39:fc:fd:1f:13:42:d1:83:3a:06:e0:80:d3:4e:21:2a:
bc:6b:af:b7:c5:bc:88:48:eb:0d:40:1d:d9:3b:79:85:c5:8d:
da:22:68:71:42:9d:5e:9c:ae:69:80:27:29:54:b0:c4:b7:68:
97:6c:d5:ee:86:f3:2a:08:cc:99:5f:09:c4:0c:e1:8c:35:e2:
f5:3d:b3:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:22 2025 by rpki-client