Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/55e138-56da-4492-a1f2-db04f21390a0/1/SBcWctU_34slN3ZPU342Wlknva8.mft
File: SBcWctU_34slN3ZPU342Wlknva8.mft (raw, json)
Hash identifier: hJqg5JISF8biX/uCWu4Vh06GjGJAbOkmyWO+xIQqPiU=
Subject key identifier: A6:F1:55:0D:EA:FC:47:A3:38:16:CF:C9:18:96:7E:4E:F0:3E:C2:1E
Authority key identifier: 48:17:16:72:D5:3F:DF:8B:25:37:76:4F:53:7E:36:5A:59:27:BD:AF
Certificate issuer: /CN=48171672d53fdf8b2537764f537e365a5927bdaf
Certificate serial: 0194BC7299F910509ACBAC1387875E88C291
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SBcWctU_34slN3ZPU342Wlknva8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/55e138-56da-4492-a1f2-db04f21390a0/1/SBcWctU_34slN3ZPU342Wlknva8.mft
Manifest number: 12F5
Signing time: Fri 31 Jan 2025 13:00:14 +0000
Manifest this update: Fri 31 Jan 2025 13:00:14 +0000
Manifest next update: Sat 01 Feb 2025 13:00:14 +0000
Files and hashes: 1: SBcWctU_34slN3ZPU342Wlknva8.crl (hash: PYYlJbQR19ZF7dXm/YHO3jtvP9LT8az+5WfuoA//9To=)
2: yCFTDAjAsaJLNl8E_LJGSjy8D0Y.roa (hash: 8ak/iE1MogNbSCZ97ilFzI246ohpoM35OGkp4ZMBEY4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:99:f9:10:50:9a:cb:ac:13:87:87:5e:88:c2:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48171672d53fdf8b2537764f537e365a5927bdaf
Validity
Not Before: Jan 31 13:00:14 2025 GMT
Not After : Feb 1 13:00:14 2025 GMT
Subject: CN=a6f1550deafc47a33816cfc918967e4ef03ec21e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:d6:72:4e:6e:48:2d:6f:67:49:67:2f:7f:a9:
d4:bb:c9:68:b7:98:78:f1:25:31:0f:7f:81:40:7b:
2e:da:65:7a:ff:57:66:34:42:01:06:a0:d0:35:3f:
dc:d2:16:25:7d:48:83:fa:76:b2:aa:a3:29:05:8c:
4a:5d:e7:cd:e5:35:c2:0b:5f:ee:c0:73:ab:4d:91:
69:43:54:ef:45:4a:c6:00:70:e9:45:1a:b8:ef:3f:
9b:bc:1a:bf:1b:4e:62:58:c4:52:c9:b7:e1:90:d4:
52:19:53:82:93:fa:09:d4:20:61:77:e2:a3:6b:ba:
ac:b8:e1:fc:e7:33:26:71:fe:04:e2:87:58:22:ba:
c1:35:cd:d7:71:37:6c:6f:31:17:0b:15:f9:57:9d:
0d:92:4a:5a:b7:5c:c1:1d:ba:16:9b:b9:ae:e5:b2:
c9:d3:bf:91:36:9b:29:56:f9:25:22:93:4d:53:a0:
98:cc:b4:54:61:1e:43:ef:ed:8c:25:04:cf:19:c5:
7a:ae:53:4a:e4:63:73:d5:22:b9:c6:8c:16:54:2f:
bc:1d:55:e7:b6:cd:93:38:6d:94:94:2f:e5:9b:50:
cd:8f:34:5f:22:43:0d:1a:84:85:00:00:93:f7:05:
cb:8a:9c:a1:9f:53:a5:25:f6:bb:2b:34:35:d1:67:
ee:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:F1:55:0D:EA:FC:47:A3:38:16:CF:C9:18:96:7E:4E:F0:3E:C2:1E
X509v3 Authority Key Identifier:
keyid:48:17:16:72:D5:3F:DF:8B:25:37:76:4F:53:7E:36:5A:59:27:BD:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SBcWctU_34slN3ZPU342Wlknva8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/55e138-56da-4492-a1f2-db04f21390a0/1/SBcWctU_34slN3ZPU342Wlknva8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/55e138-56da-4492-a1f2-db04f21390a0/1/SBcWctU_34slN3ZPU342Wlknva8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:2a:3e:5a:51:89:d4:6e:a8:6a:de:b2:70:9b:73:4a:1d:7e:
ac:a9:79:b8:f1:62:7d:1f:e8:52:85:6e:8d:2b:86:8c:f0:6d:
dc:a0:d0:56:48:b4:a7:13:90:30:84:49:24:bb:7f:d8:5d:4a:
b3:e2:e3:90:a7:13:42:78:3c:db:a3:35:9f:ef:07:f3:69:8e:
59:a5:72:a1:81:d6:5d:23:15:45:0d:7d:00:97:e0:b9:f4:e8:
8f:84:59:b3:35:7d:23:3d:55:1b:93:8a:0c:93:23:7c:eb:02:
76:9b:d4:0d:ac:c4:bd:12:60:2a:a2:35:d0:df:ed:9e:44:07:
6d:49:b9:a7:2e:63:8b:b0:91:86:6e:c4:4f:e2:c4:75:f4:b6:
c4:0c:e5:74:0e:63:de:f6:3a:f6:fc:29:ea:96:69:55:e1:49:
4b:a9:03:fe:94:09:7d:44:e7:1b:b6:fc:67:1e:1b:97:08:4e:
25:87:3d:e4:de:ff:f7:c1:a3:87:95:f0:26:96:2b:93:34:13:
22:0e:ca:04:d2:47:56:f5:34:eb:d8:63:54:e4:7a:24:c5:c1:
25:93:6e:d9:b3:1b:fe:30:6e:f4:70:2b:ef:aa:e9:d9:6b:24:
aa:e9:5b:8a:22:4c:13:41:40:ad:2a:95:53:34:3b:02:b9:0d:
ad:e8:90:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:53:00 2025 by rpki-client