Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/322450-21ca-41af-9b65-cbe084872174/1/Snz-iBFothWgvUEcwxS9BApNJ_Y.mft
File: Snz-iBFothWgvUEcwxS9BApNJ_Y.mft (raw, json)
Hash identifier: CG2slvbWqRtkHRXuZrSRuQ6rAdQaRf5jMhcmZnF2EMw=
Subject key identifier: 13:14:B3:C2:52:8A:21:8B:4D:88:43:2A:19:D8:23:08:53:F2:6E:29
Authority key identifier: 4A:7C:FE:88:11:68:B6:15:A0:BD:41:1C:C3:14:BD:04:0A:4D:27:F6
Certificate issuer: /CN=4a7cfe881168b615a0bd411cc314bd040a4d27f6
Certificate serial: 0194BCE078AF6F2783F12C5F3D7B232DF437
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Snz-iBFothWgvUEcwxS9BApNJ_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/322450-21ca-41af-9b65-cbe084872174/1/Snz-iBFothWgvUEcwxS9BApNJ_Y.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 15:00:15 +0000
Manifest this update: Fri 31 Jan 2025 15:00:15 +0000
Manifest next update: Sat 01 Feb 2025 15:00:15 +0000
Files and hashes: 1: Snz-iBFothWgvUEcwxS9BApNJ_Y.crl (hash: J/Nuj7/W5dLT2UwPzzmjAJFXbgF6U2epc2d/ii8PAvs=)
2: h_GYODiIwy0tVyLDmKAyNCK7Ui8.roa (hash: EVyFdfHvchtGYnioVymnJTf1ceZLIXds+uNSkp7sgG8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:78:af:6f:27:83:f1:2c:5f:3d:7b:23:2d:f4:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a7cfe881168b615a0bd411cc314bd040a4d27f6
Validity
Not Before: Jan 31 15:00:15 2025 GMT
Not After : Feb 1 15:00:15 2025 GMT
Subject: CN=1314b3c2528a218b4d88432a19d8230853f26e29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:3e:0f:fb:26:ed:3e:50:be:14:0b:d6:90:10:
c8:c6:aa:35:81:f6:15:4d:11:e4:ac:b3:58:85:47:
5e:e7:41:7d:75:b6:97:ab:75:d1:08:8f:ee:7d:55:
0c:b6:db:c7:8b:7a:72:4b:4f:12:28:cb:12:25:9b:
43:5b:c3:a4:51:54:0c:23:d1:20:3e:e5:dc:a7:3b:
f5:6a:0c:4b:7b:d2:9b:06:bf:5b:be:ab:7a:80:24:
5f:6d:02:9b:72:51:e6:c6:b1:86:55:06:4f:64:28:
69:ee:68:58:e2:84:ba:a0:bd:d9:32:06:9b:97:97:
ce:dc:96:59:57:b7:64:92:f1:51:1a:4a:70:dd:64:
92:00:49:cb:54:61:63:b5:3e:83:ba:e4:7c:bb:e4:
ca:d0:a9:79:b4:5b:ea:cc:cf:e9:78:27:d1:10:b4:
f1:58:0a:7b:23:19:f1:c6:96:47:04:03:74:d3:df:
50:22:d6:06:2b:ab:94:81:42:75:fc:c5:3a:7c:c4:
44:41:0c:db:11:18:02:b6:1f:50:3b:fa:c7:ff:f8:
1b:61:ef:19:1a:7f:82:77:15:d6:86:6a:6a:bf:5b:
a5:43:d6:c5:c2:bf:5c:5a:2a:65:96:76:02:33:a0:
c4:1e:a3:af:fe:ae:34:13:b5:33:60:e5:62:f4:0f:
0b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:14:B3:C2:52:8A:21:8B:4D:88:43:2A:19:D8:23:08:53:F2:6E:29
X509v3 Authority Key Identifier:
keyid:4A:7C:FE:88:11:68:B6:15:A0:BD:41:1C:C3:14:BD:04:0A:4D:27:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Snz-iBFothWgvUEcwxS9BApNJ_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/322450-21ca-41af-9b65-cbe084872174/1/Snz-iBFothWgvUEcwxS9BApNJ_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/322450-21ca-41af-9b65-cbe084872174/1/Snz-iBFothWgvUEcwxS9BApNJ_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:2c:7f:29:50:e2:4c:fd:08:8d:2f:bd:0f:79:b8:ec:76:9a:
8c:91:e7:a1:3a:8e:31:1e:4f:80:73:e8:c6:df:df:13:49:aa:
c8:a5:7b:be:63:f9:99:2f:84:4c:1c:f8:14:d8:79:27:d2:ae:
d6:7b:d0:f7:95:6b:79:d0:8d:84:31:aa:1b:16:f1:59:b2:5a:
b8:3b:f1:d8:61:fd:57:bb:55:bc:32:3a:db:43:7c:4f:19:3f:
98:cc:56:96:8b:65:75:2c:53:81:8f:ae:50:f7:9a:8a:0a:7a:
81:e0:31:51:9c:b8:86:cd:5f:54:ff:1d:5b:5e:3a:6e:03:2b:
d5:08:0c:59:a3:83:1b:fd:4b:73:7f:0b:aa:ee:9b:8d:68:cf:
1a:df:71:78:18:28:5c:15:20:01:4d:74:7d:b6:a5:75:30:98:
79:6f:b1:85:58:41:a8:4c:a9:24:b1:39:08:b4:f9:06:c5:02:
ed:8b:fd:e2:7b:7f:8b:7c:b1:eb:96:2d:be:be:4b:53:f9:c6:
f2:0a:1e:4e:fe:9a:89:94:20:f5:cd:4e:19:b7:73:5b:86:ed:
8d:cc:13:c8:02:f3:ed:b5:04:30:49:58:36:f4:c6:11:81:12:
67:09:56:d5:c3:e9:7e:ed:5b:7c:9e:43:f9:c2:c2:4e:d5:e9:
0a:f1:3e:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:37 2025 by rpki-client