Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/0a7bbf-bf20-4114-972c-3e6956ed2c6a/1/sMmblRxqb2rcyGjYhalArfAFGhk.mft
File: sMmblRxqb2rcyGjYhalArfAFGhk.mft (raw, json)
Hash identifier: iKgJ/3AXq0to+ER69+SLJbqxFTv4nFgSfxke+b3+CEM=
Subject key identifier: 49:63:E5:FD:7F:8A:0B:B2:CE:84:B9:CA:D7:16:BE:9B:25:0E:49:E2
Authority key identifier: B0:C9:9B:95:1C:6A:6F:6A:DC:C8:68:D8:85:A9:40:AD:F0:05:1A:19
Certificate issuer: /CN=b0c99b951c6a6f6adcc868d885a940adf0051a19
Certificate serial: 0194BCE0851C21355DDCD0E3E29BE7A3A019
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sMmblRxqb2rcyGjYhalArfAFGhk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/0a7bbf-bf20-4114-972c-3e6956ed2c6a/1/sMmblRxqb2rcyGjYhalArfAFGhk.mft
Manifest number: 0ABC
Signing time: Fri 31 Jan 2025 15:00:18 +0000
Manifest this update: Fri 31 Jan 2025 15:00:18 +0000
Manifest next update: Sat 01 Feb 2025 15:00:18 +0000
Files and hashes: 1: S5idv9RUVm_2J5GgNAX09HgvY7U.roa (hash: 4OYpTkc09pdm5hRENjZ+uPkWTS9n8ZtkwbMJqCtcIGQ=)
2: sMmblRxqb2rcyGjYhalArfAFGhk.crl (hash: ZM+HMq8YfCRs4oxbAyitoFsqEPQ98PGXNRMBHM0bsdY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:85:1c:21:35:5d:dc:d0:e3:e2:9b:e7:a3:a0:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0c99b951c6a6f6adcc868d885a940adf0051a19
Validity
Not Before: Jan 31 15:00:18 2025 GMT
Not After : Feb 1 15:00:18 2025 GMT
Subject: CN=4963e5fd7f8a0bb2ce84b9cad716be9b250e49e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:fa:05:78:97:75:bb:ac:18:06:15:6f:45:2d:
92:1a:8b:bf:d1:05:b7:7f:74:73:a3:64:82:f4:89:
39:e6:66:bd:22:15:e7:75:3d:92:35:1b:33:91:ac:
63:4c:62:f1:21:e7:78:2f:a5:a9:f7:09:cb:42:81:
08:15:89:08:b0:f5:59:5f:27:e7:b0:e2:2a:0d:c5:
c2:ff:d5:ee:61:75:80:69:ac:20:5d:c5:79:c0:2e:
3d:6e:be:be:a5:8a:db:aa:ae:2a:e5:db:36:92:71:
6e:4a:c3:19:1a:a1:4a:0f:f7:82:bf:38:99:e1:69:
ed:41:42:57:3a:3e:7c:49:d6:47:a8:07:32:b0:2a:
72:72:7a:00:6b:dd:26:1e:92:5b:db:13:54:fd:70:
0c:47:16:fe:13:f6:45:3f:a7:1e:6e:0c:41:88:5b:
9e:76:a3:08:c8:76:97:a9:01:ce:3e:81:d9:88:3b:
55:5e:be:5b:07:f7:37:37:71:3f:50:e8:f5:6b:c7:
fb:e3:a0:6f:76:3c:1b:ab:c4:36:83:0a:18:d3:cc:
3f:9e:fd:ba:60:b7:d7:17:67:36:94:ad:13:dd:ee:
58:9c:02:87:64:17:13:05:f4:11:cc:2f:dd:25:90:
f6:b6:10:a6:d5:a6:e7:0e:78:d9:78:32:94:c8:d6:
7b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:63:E5:FD:7F:8A:0B:B2:CE:84:B9:CA:D7:16:BE:9B:25:0E:49:E2
X509v3 Authority Key Identifier:
keyid:B0:C9:9B:95:1C:6A:6F:6A:DC:C8:68:D8:85:A9:40:AD:F0:05:1A:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sMmblRxqb2rcyGjYhalArfAFGhk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/0a7bbf-bf20-4114-972c-3e6956ed2c6a/1/sMmblRxqb2rcyGjYhalArfAFGhk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/0a7bbf-bf20-4114-972c-3e6956ed2c6a/1/sMmblRxqb2rcyGjYhalArfAFGhk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:a3:7b:dd:dd:d6:76:85:80:49:c5:42:40:57:67:af:0c:e8:
47:90:2a:7d:f4:4d:45:8c:03:17:4f:f8:7d:a0:37:ad:7c:69:
32:5f:14:9e:ef:14:40:74:5e:5c:b9:12:33:b7:96:2e:6d:d8:
e7:35:f7:2c:e8:ef:b9:35:3a:ca:35:7a:1b:cc:09:61:1d:3a:
36:dd:e5:e8:f2:a1:99:e3:a7:bc:1a:a8:69:de:66:09:3b:82:
f0:5b:5d:16:78:8e:33:48:8a:aa:97:ad:9f:2b:be:6f:3d:fd:
97:8f:77:93:5f:82:7e:b7:88:c9:ef:b5:4b:a1:52:d7:80:c6:
35:87:f3:05:1f:b1:19:33:95:e5:d8:d2:64:0a:0c:3c:8a:24:
be:8a:12:9b:c0:b2:c9:c4:85:cb:27:05:6d:c0:04:c2:34:17:
c3:57:58:5c:97:50:04:80:d2:43:dd:55:84:21:02:d7:a9:b9:
20:77:a6:ae:d9:02:4f:ab:1e:2b:4b:d3:ec:30:8b:d3:ef:ed:
ef:37:ac:ae:d2:3e:31:37:ff:78:fc:85:53:2f:a4:b1:53:b9:
79:22:d2:67:1f:3e:65:63:5e:e3:77:ff:ad:83:75:bd:0b:17:
6f:14:26:ad:af:af:01:7b:54:4a:7f:60:ec:3d:3b:37:c1:29:
87:cd:e8:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:40:17 2025 by rpki-client