Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/7b8513-f189-4330-b6f0-d0d258e4b435/1/S_P7j_jdr9qJ2zlwX3j2QY79H-0.mft
File: S_P7j_jdr9qJ2zlwX3j2QY79H-0.mft (raw, json)
Hash identifier: 9gWMtKqgPJp7bkhQriFe4FzoAOSX4N6KIJw0xHkJpzA=
Subject key identifier: C6:0A:60:CA:E2:39:7C:16:0A:7B:F4:CF:4C:21:5A:14:0D:AD:7D:12
Authority key identifier: 4B:F3:FB:8F:F8:DD:AF:DA:89:DB:39:70:5F:78:F6:41:8E:FD:1F:ED
Certificate issuer: /CN=4bf3fb8ff8ddafda89db39705f78f6418efd1fed
Certificate serial: 0194BCAA2155605A6437599A8F572BF8CE1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S_P7j_jdr9qJ2zlwX3j2QY79H-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/7b8513-f189-4330-b6f0-d0d258e4b435/1/S_P7j_jdr9qJ2zlwX3j2QY79H-0.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 14:00:53 +0000
Manifest this update: Fri 31 Jan 2025 14:00:53 +0000
Manifest next update: Sat 01 Feb 2025 14:00:53 +0000
Files and hashes: 1: S_P7j_jdr9qJ2zlwX3j2QY79H-0.crl (hash: ztWZUbN3GNs5tvP4LzsqIMZTHGqZ8sQJlkwvIAUrS6I=)
2: gFxIm0EvZb8E8gIGHvo_aeEdfcc.roa (hash: 9yJ9gvi6b9QCclOd8XC4YqzlpMyCr1+KDE8Ku24SaCU=)
3: yQgmgvQc_zoWSzqSU_Jv0P1q3MI.roa (hash: 5+4u/xRZxAnli4CKdBW1paOkXTRYuiJAT5ksmVQ4GNU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:21:55:60:5a:64:37:59:9a:8f:57:2b:f8:ce:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bf3fb8ff8ddafda89db39705f78f6418efd1fed
Validity
Not Before: Jan 31 14:00:53 2025 GMT
Not After : Feb 1 14:00:53 2025 GMT
Subject: CN=c60a60cae2397c160a7bf4cf4c215a140dad7d12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:b4:58:46:df:9e:e5:6c:9f:02:92:02:7a:df:
e1:20:63:a8:0b:cb:9d:60:e3:db:f7:a6:3f:ba:c4:
89:91:1a:b9:07:77:28:ec:32:0d:32:31:cf:c1:e5:
f1:dc:98:e9:e1:ed:f6:9b:68:cd:f7:15:2d:c2:00:
06:ca:74:4a:f2:3c:43:44:cd:2e:ac:cc:e4:8a:ba:
0e:f4:6e:52:d7:38:30:23:1b:2f:93:5a:94:23:57:
4f:c6:d6:a0:4c:9c:c5:d5:45:a8:ee:78:bf:ed:36:
db:73:14:c7:10:44:81:d2:45:e6:31:d3:9a:e4:07:
8c:d5:ac:c6:76:6e:5a:76:4c:78:4e:3a:54:66:ca:
e8:06:43:b4:94:aa:d8:7b:03:c2:87:f5:ea:79:91:
22:f5:53:48:1f:26:e6:c4:fc:08:e0:a1:3e:1e:c8:
a3:fd:2e:0b:0f:67:94:80:99:2f:0a:d6:dc:33:b9:
da:e1:21:4e:4d:a0:28:db:c1:fe:4f:9f:54:03:16:
1e:fb:17:63:d3:9e:0d:1a:3e:11:bf:2d:27:74:b7:
6e:9e:80:1f:3c:c4:fe:b2:65:a0:e1:96:00:1c:0b:
07:83:42:3e:62:7f:fe:80:0d:0e:96:36:ec:d7:be:
32:7b:0d:59:a4:40:ae:37:64:d7:90:16:e3:49:61:
bf:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:0A:60:CA:E2:39:7C:16:0A:7B:F4:CF:4C:21:5A:14:0D:AD:7D:12
X509v3 Authority Key Identifier:
keyid:4B:F3:FB:8F:F8:DD:AF:DA:89:DB:39:70:5F:78:F6:41:8E:FD:1F:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S_P7j_jdr9qJ2zlwX3j2QY79H-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7b8513-f189-4330-b6f0-d0d258e4b435/1/S_P7j_jdr9qJ2zlwX3j2QY79H-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7b8513-f189-4330-b6f0-d0d258e4b435/1/S_P7j_jdr9qJ2zlwX3j2QY79H-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:ed:c9:43:a9:15:ec:81:1d:02:e1:0e:d3:e7:a3:d0:43:35:
80:76:24:fa:2a:fc:a3:3a:43:8a:2a:13:16:22:f1:7b:1c:69:
3d:98:3a:fa:bb:c8:7d:57:23:19:25:54:7f:15:fa:6f:0e:6b:
ed:36:e7:2d:9c:49:70:6b:12:6d:22:eb:01:0e:e1:7f:d8:ca:
b2:a0:df:76:70:dc:4d:69:06:0d:ec:89:70:4c:f1:5b:cc:6f:
64:6b:07:89:76:da:f0:5e:8b:d3:19:35:05:ab:89:65:dd:fe:
a8:54:56:df:f2:08:d7:37:0e:45:75:d2:7d:cf:4e:0c:77:2d:
42:b6:2e:1e:d2:96:6d:5b:dd:c3:24:a8:72:c4:14:d7:15:b9:
ab:86:cf:d3:15:18:ff:56:c5:13:9f:10:07:38:85:a6:e9:0b:
35:ed:ff:50:55:02:9f:9a:47:28:66:6d:54:43:00:c8:de:be:
b5:3b:65:36:aa:c4:7d:67:45:9d:0c:82:0e:20:5d:6d:86:4c:
21:02:ef:72:4c:f1:e8:be:58:2e:25:06:9f:4e:c1:23:9b:37:
94:14:95:6d:65:b8:dc:6b:ce:b5:a6:ac:f4:2a:13:16:ed:45:
79:75:28:ba:bb:16:08:3a:d9:a0:7b:7c:1d:b2:5d:91:79:2b:
be:e1:73:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 21:44:43 2025 by rpki-client