Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/af1f72-ce8e-42b1-be5a-a283c9048f0f/1/sZVJ1oMF4p37AAaaUtPU4fLFYEw.mft
File: sZVJ1oMF4p37AAaaUtPU4fLFYEw.mft (raw, json)
Hash identifier: WBHfAhA0yEH6ZUwwoAokYFx/YxjfD3hLSo29sW0ZUMs=
Subject key identifier: D1:DE:45:6D:27:20:4D:BA:3A:FE:A2:12:A8:66:FA:AA:B6:40:8F:7B
Authority key identifier: B1:95:49:D6:83:05:E2:9D:FB:00:06:9A:52:D3:D4:E1:F2:C5:60:4C
Certificate issuer: /CN=b19549d68305e29dfb00069a52d3d4e1f2c5604c
Certificate serial: 0194BC052D496FF5C9A5A8242D15B845E297
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sZVJ1oMF4p37AAaaUtPU4fLFYEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/af1f72-ce8e-42b1-be5a-a283c9048f0f/1/sZVJ1oMF4p37AAaaUtPU4fLFYEw.mft
Manifest number: 08A6
Signing time: Fri 31 Jan 2025 11:00:43 +0000
Manifest this update: Fri 31 Jan 2025 11:00:43 +0000
Manifest next update: Sat 01 Feb 2025 11:00:43 +0000
Files and hashes: 1: pp7YHiA9bCcV4n9KXbmtGvXw0Hw.roa (hash: xXtqKC6cCm9cF/kgqDQZlMKjBn2ULr5S39vUn/a3JHc=)
2: sZVJ1oMF4p37AAaaUtPU4fLFYEw.crl (hash: bdJZmghU4m9SBl/yyxYpGBGPKUuJOs9549/hCK487kU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:2d:49:6f:f5:c9:a5:a8:24:2d:15:b8:45:e2:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b19549d68305e29dfb00069a52d3d4e1f2c5604c
Validity
Not Before: Jan 31 11:00:43 2025 GMT
Not After : Feb 1 11:00:43 2025 GMT
Subject: CN=d1de456d27204dba3afea212a866faaab6408f7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:84:43:d8:99:ee:a3:f1:78:06:bd:0c:7c:cd:
ce:0e:fb:70:6b:9c:b2:71:14:7f:1f:af:9c:19:39:
cd:2c:b4:2c:25:bb:e3:13:5c:bc:ad:0c:5b:81:6d:
2f:64:3e:89:78:82:5c:bb:99:7f:12:9d:98:56:28:
60:01:a1:8c:3f:49:f1:9c:1c:5d:d0:24:c8:82:92:
91:2e:2c:9f:6c:bf:90:91:7f:47:4a:58:93:dd:18:
57:a5:2e:d1:fc:3d:ab:99:b6:f4:31:47:ce:0a:2c:
98:40:c7:7d:69:d7:c8:d1:1f:aa:01:26:fe:76:6d:
a5:da:66:66:f3:bc:9d:13:84:a2:71:21:f1:e8:d4:
72:42:29:b5:45:cb:79:19:0c:57:5b:41:5f:50:0e:
ac:a5:ab:b3:77:45:16:08:da:87:ea:1d:0d:a1:07:
6f:de:d3:83:bc:59:68:be:b7:dd:5b:17:cc:26:01:
ec:36:31:47:a5:79:52:09:df:53:48:dc:5c:96:80:
29:ef:48:df:c9:bc:9a:86:96:72:fb:b8:57:f0:4d:
91:1d:6b:dd:61:04:74:85:a8:e3:6c:85:71:52:22:
d1:d9:9c:30:5d:a0:cd:b2:31:b2:36:c9:04:6d:53:
16:75:88:44:67:69:d5:23:24:89:61:e6:eb:86:55:
cd:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:DE:45:6D:27:20:4D:BA:3A:FE:A2:12:A8:66:FA:AA:B6:40:8F:7B
X509v3 Authority Key Identifier:
keyid:B1:95:49:D6:83:05:E2:9D:FB:00:06:9A:52:D3:D4:E1:F2:C5:60:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sZVJ1oMF4p37AAaaUtPU4fLFYEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/af1f72-ce8e-42b1-be5a-a283c9048f0f/1/sZVJ1oMF4p37AAaaUtPU4fLFYEw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/af1f72-ce8e-42b1-be5a-a283c9048f0f/1/sZVJ1oMF4p37AAaaUtPU4fLFYEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:bc:ce:f7:b4:21:95:dd:dc:ff:48:64:34:82:e4:a8:76:9c:
b0:21:c1:bd:be:c3:6f:ad:7e:04:af:65:e6:07:a9:05:73:2a:
dd:d6:04:44:40:ae:6a:6f:53:eb:a9:46:39:59:b7:e3:e5:4a:
ec:c9:82:bc:c5:3d:b1:88:04:e4:d8:d7:63:fc:09:fb:a7:a0:
e2:89:d0:01:61:84:60:54:98:f9:16:c0:5e:de:de:cb:20:2f:
48:6d:3c:be:38:50:0d:cb:cc:8b:0c:9b:ad:2a:39:ca:61:4e:
38:31:07:67:a9:91:91:97:e7:f4:d1:01:ec:c6:df:b8:1b:19:
4c:48:26:59:4b:be:2e:26:60:54:01:49:e1:81:71:bb:c4:0a:
f6:ac:73:2c:aa:bd:b4:c8:93:fa:cb:b8:8b:0b:6e:f4:8a:fd:
96:b4:0c:96:2f:ca:3b:37:8a:6a:8d:70:79:ba:f1:c8:07:5f:
99:47:c8:81:64:5c:b1:e7:21:2d:01:80:51:b1:0b:d8:35:1a:
f7:55:4d:7c:02:a7:85:63:20:bc:ca:d0:0c:02:1d:96:1e:62:
33:c8:5c:d0:f3:d4:e9:71:6d:f7:c6:07:aa:17:9b:80:14:f3:
8e:b4:a1:30:77:fb:a1:e8:35:3b:32:2f:57:76:bf:aa:11:9e:
cb:ca:31:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:44:28 2025 by rpki-client