Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/05126d-4ab7-4f99-a012-2b788312151d/1/sWrUSceuS9Isau5fvcCCMEL_-Pw.mft
File: sWrUSceuS9Isau5fvcCCMEL_-Pw.mft (raw, json)
Hash identifier: kzohLqOWwbJfZtg/A8zpAIBu+zLkKh9eY49fEAhJePE=
Subject key identifier: 84:1F:B5:AC:0C:7D:7D:FA:0E:C8:E6:D1:83:FE:05:1F:5F:B7:05:B3
Authority key identifier: B1:6A:D4:49:C7:AE:4B:D2:2C:6A:EE:5F:BD:C0:82:30:42:FF:F8:FC
Certificate issuer: /CN=b16ad449c7ae4bd22c6aee5fbdc0823042fff8fc
Certificate serial: 0194BD85A38C76EBCD37D02EF3F29F518A74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sWrUSceuS9Isau5fvcCCMEL_-Pw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/05126d-4ab7-4f99-a012-2b788312151d/1/sWrUSceuS9Isau5fvcCCMEL_-Pw.mft
Manifest number: 07AA
Signing time: Fri 31 Jan 2025 18:00:39 +0000
Manifest this update: Fri 31 Jan 2025 18:00:39 +0000
Manifest next update: Sat 01 Feb 2025 18:00:39 +0000
Files and hashes: 1: _KRug4UjC_BJD-8BnustHPPdTrM.roa (hash: 9gRSSq2OhYrBQVFH3hvus35c9k0k20JUe3qcgY8xpt0=)
2: sWrUSceuS9Isau5fvcCCMEL_-Pw.crl (hash: B27M15+WMIoo0K9F3uGslhc5bC4vEVzdsKBkEufpv5U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:a3:8c:76:eb:cd:37:d0:2e:f3:f2:9f:51:8a:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b16ad449c7ae4bd22c6aee5fbdc0823042fff8fc
Validity
Not Before: Jan 31 18:00:39 2025 GMT
Not After : Feb 1 18:00:39 2025 GMT
Subject: CN=841fb5ac0c7d7dfa0ec8e6d183fe051f5fb705b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:33:11:eb:70:4f:a9:9c:c3:8e:68:5c:b3:eb:
2c:e0:4c:b1:74:02:7a:b7:46:c9:46:3d:0b:40:4f:
5d:d9:b1:b7:bd:1e:89:18:a6:0c:5d:9e:8b:f6:43:
50:92:5d:53:f8:99:d9:cb:01:bc:11:2a:50:34:c2:
ee:1e:b3:fb:15:f0:d0:9f:20:57:ac:11:ad:d8:63:
c2:b0:13:85:39:ca:83:ad:eb:8a:c6:cd:ca:f9:2e:
61:82:9e:32:d1:27:a8:fd:bc:39:ab:d7:08:c0:ff:
92:de:c7:10:2e:55:34:d6:f5:dc:39:a2:bb:5a:0d:
52:2a:1a:8a:e6:88:8d:4d:47:94:7a:35:81:2e:13:
52:89:ed:6b:d0:15:bb:12:f3:b8:8f:4b:1f:f7:6e:
da:ab:db:8d:8b:2d:7d:6c:1c:c5:23:5d:87:95:31:
eb:59:7f:b4:2d:a6:49:3d:96:db:63:a2:06:97:a1:
cf:de:98:c5:7c:d8:10:1b:04:ff:2c:7e:4d:a3:6a:
c6:cf:cd:61:82:ec:de:34:58:20:8f:53:19:de:3b:
69:33:b0:2f:7e:c9:8a:2d:25:2c:2e:20:74:f2:e8:
6e:85:4c:ae:2f:7a:55:ce:9c:dd:b9:30:cb:b1:85:
36:01:38:85:94:b6:65:d6:0b:d9:13:d7:cb:ad:e6:
61:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:1F:B5:AC:0C:7D:7D:FA:0E:C8:E6:D1:83:FE:05:1F:5F:B7:05:B3
X509v3 Authority Key Identifier:
keyid:B1:6A:D4:49:C7:AE:4B:D2:2C:6A:EE:5F:BD:C0:82:30:42:FF:F8:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sWrUSceuS9Isau5fvcCCMEL_-Pw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/05126d-4ab7-4f99-a012-2b788312151d/1/sWrUSceuS9Isau5fvcCCMEL_-Pw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/05126d-4ab7-4f99-a012-2b788312151d/1/sWrUSceuS9Isau5fvcCCMEL_-Pw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:b3:cd:ea:74:ad:2f:06:a8:f7:86:05:70:b5:98:03:57:0a:
f7:71:5a:ae:f3:bd:7c:06:f2:85:e9:92:91:99:4d:e3:34:a8:
f5:18:44:88:f6:c8:20:49:0a:7c:44:41:58:a0:c0:ee:95:37:
a2:4e:3f:ba:2e:be:9d:5b:4e:c0:14:86:2f:37:6c:ca:36:cc:
dc:46:ae:4c:51:52:84:56:2a:00:0b:5c:0c:ee:a2:29:2d:a4:
37:6b:be:59:bc:95:7a:1c:73:a9:cc:a7:33:f0:3e:7b:53:14:
4f:60:d8:20:b6:0b:46:69:21:74:c0:24:25:ef:8a:9b:f2:4e:
24:8b:2c:b4:dc:3e:4d:b7:5c:be:32:75:2d:0e:5d:96:4c:75:
78:50:f6:00:dd:9d:ff:3b:7e:3b:3c:56:0e:7b:5d:d9:6c:b0:
02:f7:30:a5:b3:9d:57:3d:ce:37:fa:98:19:76:f2:6b:d1:24:
fc:75:d0:b0:3e:92:49:dc:14:42:b0:ab:aa:a3:b2:ed:50:75:
2a:82:16:4c:c8:78:18:57:b2:ab:72:79:fd:4e:15:56:6b:09:
61:f5:43:6f:66:30:87:b0:df:62:d5:d1:18:e8:57:b1:fa:30:
be:54:fc:f0:0c:ab:09:3c:37:ac:31:7e:ae:48:b5:1f:a6:ad:
63:ec:a8:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:44:45 2025 by rpki-client