Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/2c4731-89d5-4e9b-b4aa-bf09ad32c888/1/sGVRk378luFF4zoevKJEktwSDss.mft
File: sGVRk378luFF4zoevKJEktwSDss.mft (raw, json)
Hash identifier: Y5eySBrujUjStKKd8GBTQI1sPfs6zV+RyMPPB64MkKk=
Subject key identifier: 76:6D:F5:F5:B8:50:2F:36:7F:E1:88:F5:2B:05:2E:C3:78:B7:EE:A8
Authority key identifier: B0:65:51:93:7E:FC:96:E1:45:E3:3A:1E:BC:A2:44:92:DC:12:0E:CB
Certificate issuer: /CN=b06551937efc96e145e33a1ebca24492dc120ecb
Certificate serial: 0194BD4E975C4C73715DC500399C8082248F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sGVRk378luFF4zoevKJEktwSDss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/2c4731-89d5-4e9b-b4aa-bf09ad32c888/1/sGVRk378luFF4zoevKJEktwSDss.mft
Manifest number: 142F
Signing time: Fri 31 Jan 2025 17:00:31 +0000
Manifest this update: Fri 31 Jan 2025 17:00:31 +0000
Manifest next update: Sat 01 Feb 2025 17:00:31 +0000
Files and hashes: 1: CwqvWSmBdm9lt3PehiaP0H6J-oY.roa (hash: gTSav2fMjMmokQJGJr0YwjWXX9H3AhJSgjsJ2wpM5SA=)
2: QdvbepQukFmfMSQYf6HBBLcHcMk.roa (hash: F/Id75RSk4+xz0N0tNwJ7jB7AAssoyiwdWIUCFeT7Qg=)
3: sGVRk378luFF4zoevKJEktwSDss.crl (hash: /BYbPLh5Fj3yVM3EO8ot2lWREdJ4bp63h4qarjCpHsM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:97:5c:4c:73:71:5d:c5:00:39:9c:80:82:24:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b06551937efc96e145e33a1ebca24492dc120ecb
Validity
Not Before: Jan 31 17:00:31 2025 GMT
Not After : Feb 1 17:00:31 2025 GMT
Subject: CN=766df5f5b8502f367fe188f52b052ec378b7eea8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:95:74:f6:13:28:36:47:2e:15:58:61:25:c9:
79:0d:75:f6:10:6d:d0:51:cb:6b:a9:99:5b:21:2c:
64:14:fb:c9:64:0c:8e:86:84:a3:a8:c3:91:61:1d:
2a:ee:a2:15:5e:10:40:f3:e5:86:89:6d:7e:40:fe:
2a:4c:0d:14:95:47:7b:2b:5a:a4:35:76:41:c7:1b:
5b:04:32:6b:2a:59:b0:d1:ba:f5:17:07:b7:0a:e2:
a8:b7:5e:90:af:34:fa:8b:5d:8d:99:d7:b2:5d:93:
73:21:cc:e9:a2:ac:24:7b:ac:cc:85:c1:27:38:bc:
08:76:61:97:bf:44:af:ca:8c:53:cc:f1:df:39:79:
a0:95:f0:7c:4c:e2:97:c3:fa:15:ed:ea:24:df:f1:
d9:90:06:47:f5:58:5e:94:60:c4:4d:78:46:18:33:
ed:f3:60:db:b3:b7:d8:99:19:56:43:d2:94:0c:fc:
9b:13:ab:06:47:46:4b:5f:85:a9:63:a4:b0:7c:a4:
f6:8d:da:bc:2b:e7:ae:41:a3:6a:dc:29:67:7f:07:
4a:55:69:b5:b1:98:48:fa:e2:f5:48:2e:a4:77:90:
ad:16:99:6a:9b:d3:04:d3:ed:da:8c:fc:7c:ef:15:
90:07:9a:1f:50:1f:d3:c5:7d:5c:85:13:5c:8d:11:
be:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:6D:F5:F5:B8:50:2F:36:7F:E1:88:F5:2B:05:2E:C3:78:B7:EE:A8
X509v3 Authority Key Identifier:
keyid:B0:65:51:93:7E:FC:96:E1:45:E3:3A:1E:BC:A2:44:92:DC:12:0E:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sGVRk378luFF4zoevKJEktwSDss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/2c4731-89d5-4e9b-b4aa-bf09ad32c888/1/sGVRk378luFF4zoevKJEktwSDss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/2c4731-89d5-4e9b-b4aa-bf09ad32c888/1/sGVRk378luFF4zoevKJEktwSDss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:32:44:bb:1e:08:34:70:ba:5d:b3:78:60:0d:81:49:cc:63:
4d:e1:0d:e3:f3:9e:d5:59:a1:e5:f1:1a:c6:7c:11:ff:4d:9e:
aa:93:cd:6d:64:cb:75:63:36:78:2b:c4:bd:dd:e2:61:d1:3a:
44:45:50:ae:54:ea:c4:44:62:57:84:4a:43:a0:49:e3:06:db:
51:69:ad:a4:69:6b:44:36:9d:b1:89:ed:6a:b3:b9:97:f7:95:
d3:56:03:0d:5b:d9:f3:df:0c:b6:b2:d8:ae:4d:20:38:5b:a4:
93:d2:03:34:7f:e1:a3:5e:f4:05:4f:12:9e:e3:d3:66:ca:84:
68:ea:40:bb:2d:a1:75:a0:0e:c7:20:bb:9c:b1:ec:21:be:9b:
b6:dd:8e:50:c8:6a:96:2d:e0:9d:e8:ba:1d:e1:5c:2d:66:7e:
b6:b1:5d:4f:97:5f:16:3e:32:30:b0:b3:0c:68:d8:29:04:9a:
24:cc:61:03:e9:53:93:90:d1:2d:2d:25:48:ea:c6:bf:0b:7b:
36:f3:a5:6c:c3:d0:d8:cd:53:43:0a:bb:63:fb:ea:91:f5:94:
77:8a:ed:c7:fd:5f:ba:9f:21:61:70:37:3a:dd:a0:a0:db:24:
75:80:28:ef:d0:ee:fb:8b:a7:da:42:7e:40:9d:1f:9e:d0:1b:
04:05:2d:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:37:28 2025 by rpki-client