Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/3fa007-f344-467e-b712-1cce5b58f8e3/1/sx9k3lYY91wZ31E5U_ZGmHngh3M.mft
File: sx9k3lYY91wZ31E5U_ZGmHngh3M.mft (raw, json)
Hash identifier: jFB+WXXvcNIGPyivh0VFxkQcXNW6A98LJOtlbuOqDK4=
Subject key identifier: B1:F1:88:10:F2:7F:9E:90:D0:FC:BE:2C:46:53:05:1A:6E:3B:1F:D1
Authority key identifier: B3:1F:64:DE:56:18:F7:5C:19:DF:51:39:53:F6:46:98:79:E0:87:73
Certificate issuer: /CN=b31f64de5618f75c19df513953f6469879e08773
Certificate serial: 0194BC04F907868340DD32A0F70617FD4CFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sx9k3lYY91wZ31E5U_ZGmHngh3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/3fa007-f344-467e-b712-1cce5b58f8e3/1/sx9k3lYY91wZ31E5U_ZGmHngh3M.mft
Manifest number: 0215
Signing time: Fri 31 Jan 2025 11:00:29 +0000
Manifest this update: Fri 31 Jan 2025 11:00:29 +0000
Manifest next update: Sat 01 Feb 2025 11:00:29 +0000
Files and hashes: 1: UakAn5yyBqPOSEIfTXfDNciKFEs.roa (hash: btkptULyCnT6MWQIHbySDipzPG0rdTy55cYQICbq99M=)
2: sx9k3lYY91wZ31E5U_ZGmHngh3M.crl (hash: I0bdsP6xhqx9mOryd+ADU1SqwURA4q8c4l4ZW7Ke0AM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:f9:07:86:83:40:dd:32:a0:f7:06:17:fd:4c:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b31f64de5618f75c19df513953f6469879e08773
Validity
Not Before: Jan 31 11:00:29 2025 GMT
Not After : Feb 1 11:00:29 2025 GMT
Subject: CN=b1f18810f27f9e90d0fcbe2c4653051a6e3b1fd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:00:dc:51:fe:d4:6b:25:7b:da:3a:70:d9:32:
24:44:b8:db:f8:b8:e3:4a:f6:df:1b:2e:9e:25:f4:
16:d3:db:a3:7c:b4:13:64:23:87:93:9c:46:23:57:
de:c8:17:f0:41:28:2f:64:aa:cb:03:e3:68:6f:61:
ed:78:98:0b:07:11:51:03:1e:e8:61:10:5d:f8:d3:
70:63:7b:c1:69:a3:2d:0d:ab:3e:a5:6d:9a:30:a9:
cc:2b:68:d8:4f:75:c1:a5:70:86:91:ea:46:b1:11:
a7:07:bc:89:ef:b5:b3:9b:72:2c:c1:d5:ff:1b:fc:
7f:f0:4d:41:07:77:6f:0d:f9:ae:1d:c9:4b:80:90:
2c:d0:3f:a7:85:da:41:19:a2:a5:56:45:ab:94:db:
39:34:7b:39:70:2a:7a:0e:33:c9:74:2c:12:20:d8:
3b:ef:d1:0f:ae:b8:31:7a:95:e7:7e:4f:99:01:b0:
15:4d:ac:77:a6:17:af:b5:18:f7:65:2f:07:b3:40:
bf:c4:8d:64:f5:29:9f:00:de:17:fd:38:f5:55:ad:
ce:f9:84:bf:75:33:5c:2c:21:07:60:a3:3c:35:6a:
47:f2:f6:51:9f:e0:81:fa:92:b0:a9:e4:77:8d:88:
be:5a:ef:33:d6:cf:7e:50:b6:f5:5e:33:f1:b7:16:
da:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:F1:88:10:F2:7F:9E:90:D0:FC:BE:2C:46:53:05:1A:6E:3B:1F:D1
X509v3 Authority Key Identifier:
keyid:B3:1F:64:DE:56:18:F7:5C:19:DF:51:39:53:F6:46:98:79:E0:87:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sx9k3lYY91wZ31E5U_ZGmHngh3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3fa007-f344-467e-b712-1cce5b58f8e3/1/sx9k3lYY91wZ31E5U_ZGmHngh3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3fa007-f344-467e-b712-1cce5b58f8e3/1/sx9k3lYY91wZ31E5U_ZGmHngh3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:96:23:1a:b4:13:9e:7f:09:c9:fd:8b:f7:0b:e5:a5:12:04:
a8:3e:91:a5:b6:34:28:da:19:97:3a:2b:09:83:47:49:37:f1:
a1:a7:ea:7c:49:27:6b:48:50:4a:f8:42:eb:7d:0b:eb:66:8e:
a9:dd:80:d0:07:13:93:bc:41:b6:5d:b7:0a:aa:cc:3d:6a:c9:
61:ed:10:27:e7:30:6d:ea:18:8b:9d:bc:e4:15:7c:44:11:70:
1c:5c:e6:bc:47:dc:c2:60:92:dd:17:8d:1e:bd:a8:17:a9:8e:
e5:19:1a:ad:d7:f2:81:1a:78:db:39:05:ec:b7:a0:3b:9e:9d:
cb:49:af:c4:63:4e:f5:cf:1c:8e:8c:51:6c:9f:7c:44:b4:fd:
d3:2a:f4:20:c0:03:fb:18:76:9f:d4:c3:0a:d8:13:f0:0a:a8:
66:6a:a5:13:59:80:43:d4:a8:24:12:e3:56:c0:a2:92:a6:74:
d3:b0:12:3f:4a:3e:17:ea:94:0a:3d:9f:09:4d:cc:d5:ba:e3:
32:91:97:36:ec:bb:1e:df:4e:25:13:c3:ef:7f:5c:a0:41:a3:
0e:48:81:4a:bb:f4:15:42:c6:29:db:3c:f1:7d:30:2c:ef:27:
89:5c:da:f3:f6:83:09:a6:75:a0:71:f9:78:21:6a:33:69:b4:
b0:a7:73:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:09:34 2025 by rpki-client