Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/e82d2a-4041-4811-87a5-783469269b35/1/SvrK0nmIVvDwZaJloQlwaUGsqOo.mft
File: SvrK0nmIVvDwZaJloQlwaUGsqOo.mft (raw, json)
Hash identifier: ZbXHpDMd/XTBA/qpPeVyvE+W2MwqXBbA1yo1Q6tfapU=
Subject key identifier: 2F:F4:47:89:C8:88:BB:50:0A:28:72:2C:E2:4B:0C:70:AF:93:48:13
Authority key identifier: 4A:FA:CA:D2:79:88:56:F0:F0:65:A2:65:A1:09:70:69:41:AC:A8:EA
Certificate issuer: /CN=4afacad2798856f0f065a265a109706941aca8ea
Certificate serial: 0194BBCE0FBC953ED491045A8F8920E59C4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SvrK0nmIVvDwZaJloQlwaUGsqOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/e82d2a-4041-4811-87a5-783469269b35/1/SvrK0nmIVvDwZaJloQlwaUGsqOo.mft
Manifest number: 0FC3
Signing time: Fri 31 Jan 2025 10:00:31 +0000
Manifest this update: Fri 31 Jan 2025 10:00:31 +0000
Manifest next update: Sat 01 Feb 2025 10:00:31 +0000
Files and hashes: 1: SvrK0nmIVvDwZaJloQlwaUGsqOo.crl (hash: DmjNItEgOAh3hYdbu4X2a3IgiQb6mLhY7NNahEcWzqI=)
2: rKZbB3iW2mhQrV3B7dzkdgnj7Hg.roa (hash: bzWIX1UDDDSaemHwck5e4pimDCRd9S56ZPwPBB+GA2A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:0f:bc:95:3e:d4:91:04:5a:8f:89:20:e5:9c:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4afacad2798856f0f065a265a109706941aca8ea
Validity
Not Before: Jan 31 10:00:31 2025 GMT
Not After : Feb 1 10:00:31 2025 GMT
Subject: CN=2ff44789c888bb500a28722ce24b0c70af934813
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c4:cd:37:3b:f1:65:82:af:22:f1:72:4f:36:
a9:25:41:7a:50:81:41:58:93:90:de:06:3b:a9:2d:
c3:d1:0e:25:2e:c4:3e:bb:60:1b:66:fe:ee:6d:d7:
53:9f:85:64:4f:52:95:8f:ed:3c:05:28:f9:85:40:
74:e7:9d:55:15:57:d9:6e:df:e2:f1:7f:d2:0a:06:
bf:ec:c4:43:28:dc:81:fd:3f:5f:c2:c6:91:5d:68:
6e:52:24:ea:89:6c:76:f1:2e:58:f5:91:db:7e:c1:
33:65:2a:69:34:50:60:78:ce:a4:7b:2c:96:96:77:
62:9e:2d:42:42:dc:98:4b:3e:e4:e1:e9:7d:7e:ba:
3a:8b:a5:18:08:be:45:14:07:62:d6:6c:83:d8:f6:
41:2e:ab:fc:df:e1:13:c7:4a:83:0a:2e:a9:f6:15:
79:34:92:15:41:72:f1:52:b6:30:7c:48:84:10:4d:
c4:40:6c:d4:e9:6b:de:60:c7:f7:16:20:cf:0a:0d:
58:77:f4:1d:5a:e2:0c:9e:b6:8d:bb:0d:13:5c:52:
6b:0a:8c:a9:da:db:02:30:26:2d:39:1f:50:ea:80:
1f:85:06:07:74:9b:36:1e:91:d7:f8:54:ae:bc:11:
94:6b:4e:f6:5f:fb:ee:88:7a:1c:29:90:0e:a9:50:
c1:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:F4:47:89:C8:88:BB:50:0A:28:72:2C:E2:4B:0C:70:AF:93:48:13
X509v3 Authority Key Identifier:
keyid:4A:FA:CA:D2:79:88:56:F0:F0:65:A2:65:A1:09:70:69:41:AC:A8:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SvrK0nmIVvDwZaJloQlwaUGsqOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/e82d2a-4041-4811-87a5-783469269b35/1/SvrK0nmIVvDwZaJloQlwaUGsqOo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/e82d2a-4041-4811-87a5-783469269b35/1/SvrK0nmIVvDwZaJloQlwaUGsqOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:13:99:6a:36:06:8c:e5:0c:03:ba:f5:9a:ce:fa:34:07:18:
1d:cf:d0:88:05:43:22:e8:37:51:b6:28:b4:02:f3:e1:b9:1e:
fa:56:b0:93:26:6a:d6:ea:99:02:38:e1:ca:d3:a2:ba:3c:19:
10:e7:b3:b5:9c:5b:0d:07:18:ca:8b:4e:07:96:40:e9:19:da:
50:21:ec:eb:66:23:00:be:27:b5:d1:a1:0b:f5:cd:45:dd:0d:
9b:04:4d:7b:bc:b3:0c:aa:a5:93:39:f3:b6:fe:64:fa:76:ae:
0f:e8:4a:c8:5e:72:7c:d9:27:bc:5a:a8:62:48:38:6b:f7:6c:
9e:c2:b7:5e:15:c0:01:2a:6d:ff:00:6f:90:78:9a:47:ea:0c:
d0:bf:ca:dc:18:79:f6:c3:68:52:37:b8:24:e5:3d:a2:75:a8:
36:44:ed:5e:09:c9:59:03:01:68:83:19:7f:71:7b:97:66:04:
02:43:e6:3c:5a:39:a1:6d:5f:67:e4:53:c1:bb:10:b2:c3:de:
8a:b6:27:84:5d:e9:ae:b1:01:d9:8e:e0:8e:0f:b1:b1:6e:01:
cc:b5:22:53:d3:98:c0:e7:9a:04:63:37:c9:97:03:b5:e0:7a:
ad:f9:40:cb:94:09:4c:6b:c1:d7:cc:31:60:c6:59:2f:74:7e:
49:50:9f:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:24:48 2025 by rpki-client