Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/5d6f6c-b006-4563-91ad-428a111ac5e0/1/Sv7PZkKkULU7B21EZILZwaid7XQ.mft
File: Sv7PZkKkULU7B21EZILZwaid7XQ.mft (raw, json)
Hash identifier: MunOnQlTtVjJc0SQcdu2fZWdqJ0sPJkmBgjS7eYAHbI=
Subject key identifier: 4E:F2:3E:40:55:BB:69:D8:EB:76:43:FD:B1:92:36:E4:7F:91:5A:2E
Authority key identifier: 4A:FE:CF:66:42:A4:50:B5:3B:07:6D:44:64:82:D9:C1:A8:9D:ED:74
Certificate issuer: /CN=4afecf6642a450b53b076d446482d9c1a89ded74
Certificate serial: 0194BD17C3DC085870D8BD3E797662BCD39B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sv7PZkKkULU7B21EZILZwaid7XQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/5d6f6c-b006-4563-91ad-428a111ac5e0/1/Sv7PZkKkULU7B21EZILZwaid7XQ.mft
Manifest number: 13BD
Signing time: Fri 31 Jan 2025 16:00:38 +0000
Manifest this update: Fri 31 Jan 2025 16:00:38 +0000
Manifest next update: Sat 01 Feb 2025 16:00:38 +0000
Files and hashes: 1: Sv7PZkKkULU7B21EZILZwaid7XQ.crl (hash: z2tR/t4nzbXhVSvnzVgUVfFLS+cHkmHlG/bdePgjyPQ=)
2: p61VML8uLf1Dr4htLC12P2Sv8GU.roa (hash: RPd5GMtMlOZE/03iU2ovXiDZPGo3A/MLaIBoa6BmxD0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:c3:dc:08:58:70:d8:bd:3e:79:76:62:bc:d3:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4afecf6642a450b53b076d446482d9c1a89ded74
Validity
Not Before: Jan 31 16:00:38 2025 GMT
Not After : Feb 1 16:00:38 2025 GMT
Subject: CN=4ef23e4055bb69d8eb7643fdb19236e47f915a2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f5:66:25:d9:9c:f4:55:a1:9d:3e:c0:b3:51:
f7:80:6f:88:82:a7:ab:cd:2c:cc:da:db:c4:89:34:
db:99:77:e2:af:36:bd:bb:97:ac:d9:4a:bf:10:7c:
f2:3f:7e:a9:bb:22:bf:a6:bc:de:bd:20:54:3a:38:
0e:8e:4e:73:c4:fd:e7:af:ed:c3:07:f6:59:55:af:
46:97:94:bb:08:e7:f6:a4:82:d1:b3:fa:23:16:b0:
ea:0e:7c:11:45:2c:46:a7:0d:45:c1:85:f2:77:09:
67:81:3b:e9:5c:c1:1b:ee:d0:37:36:95:f9:82:ba:
f4:86:a9:2d:65:00:4a:f6:e7:4e:b7:67:c9:cb:7a:
eb:3b:fa:10:a2:3a:e6:52:54:92:33:72:32:80:8e:
29:09:97:f5:7e:75:44:b7:1e:b0:6a:fb:c4:1b:14:
a0:2e:2e:67:4a:da:29:dc:85:1e:d1:c3:07:f9:48:
e0:7f:71:5a:ff:3a:67:ed:bf:57:73:0e:4e:0f:c3:
0c:47:63:67:d3:d7:21:ff:44:48:ec:bb:a4:bd:34:
e2:23:9e:fc:05:19:c1:6b:f9:c2:53:46:3e:f7:9a:
20:0f:37:ee:cf:13:d3:a1:7d:b2:79:8d:ae:3f:dc:
a8:46:ba:f3:01:78:c0:eb:4c:66:96:95:d9:8a:aa:
52:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:F2:3E:40:55:BB:69:D8:EB:76:43:FD:B1:92:36:E4:7F:91:5A:2E
X509v3 Authority Key Identifier:
keyid:4A:FE:CF:66:42:A4:50:B5:3B:07:6D:44:64:82:D9:C1:A8:9D:ED:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sv7PZkKkULU7B21EZILZwaid7XQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/5d6f6c-b006-4563-91ad-428a111ac5e0/1/Sv7PZkKkULU7B21EZILZwaid7XQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/5d6f6c-b006-4563-91ad-428a111ac5e0/1/Sv7PZkKkULU7B21EZILZwaid7XQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:53:01:44:c8:e6:10:ab:67:c4:fb:3d:4c:e4:c8:0c:f0:df:
c6:b8:50:73:ba:64:03:a5:dc:66:68:81:da:d0:ac:9f:cd:e3:
a4:fd:73:50:b7:b4:dd:e8:7b:63:99:47:e0:5b:0d:2a:25:15:
a2:0f:cc:1c:64:5c:49:17:98:03:36:be:92:56:cc:64:0f:d9:
d4:5c:d3:25:60:f9:4c:dc:7d:ae:27:dc:d6:8c:b2:a3:f5:5b:
01:5c:0b:bb:ae:a0:92:13:3f:53:fa:52:c4:26:f7:fc:08:19:
91:c3:e6:e1:63:b3:69:64:0c:72:c6:e7:77:e4:8f:1f:25:4d:
6a:83:37:35:70:e1:d6:89:a5:5c:e7:b3:7d:06:dd:6c:d6:db:
cf:e3:4f:73:e1:da:e1:88:64:f5:61:b7:f0:cd:c6:3a:e1:5d:
2c:5d:d7:32:b3:b0:c7:34:cb:af:82:43:1e:27:5b:e4:1c:b8:
91:88:c9:a2:f7:e2:2d:70:79:c4:30:9a:77:44:de:94:b2:a9:
70:cc:f3:5d:2e:6e:ec:65:72:db:a2:cf:71:de:54:52:49:20:
85:af:54:2b:00:76:e4:c1:41:6a:b2:ad:9a:02:68:53:b2:1c:
47:88:b0:23:c1:28:6e:7b:f6:2a:13:bb:5f:90:20:fd:8a:32:
ad:d6:68:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:03 2025 by rpki-client