Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/f5210d-0590-43a3-9eed-6a83563b655b/1/sDQCUfGCY0f06WRfaCTTuT9H5d4.mft
File: sDQCUfGCY0f06WRfaCTTuT9H5d4.mft (raw, json)
Hash identifier: QWjYLSrH4QmT6rqfViWXz8Tdma2FOrZrljhIr6WcS+Y=
Subject key identifier: 6C:87:04:3C:6E:2E:DA:10:DD:9A:5C:BA:25:0D:E5:68:78:E7:B3:5E
Authority key identifier: B0:34:02:51:F1:82:63:47:F4:E9:64:5F:68:24:D3:B9:3F:47:E5:DE
Certificate issuer: /CN=b0340251f1826347f4e9645f6824d3b93f47e5de
Certificate serial: 0194BC72B8C4DE55CFC4BD092A44DAAFBB75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sDQCUfGCY0f06WRfaCTTuT9H5d4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/f5210d-0590-43a3-9eed-6a83563b655b/1/sDQCUfGCY0f06WRfaCTTuT9H5d4.mft
Manifest number: 0A2E
Signing time: Fri 31 Jan 2025 13:00:22 +0000
Manifest this update: Fri 31 Jan 2025 13:00:22 +0000
Manifest next update: Sat 01 Feb 2025 13:00:22 +0000
Files and hashes: 1: qrqtK-ZhNnqsmvUdjEvFxU-EYdM.roa (hash: w1CKR1mGTdMnfdWKUqyIUV2nyHBupF+j5wpw/8wUJ44=)
2: sDQCUfGCY0f06WRfaCTTuT9H5d4.crl (hash: WnwElX7XPodEu8KDGFSIAWV/ganN2mVSC4SbCwTu4Is=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:b8:c4:de:55:cf:c4:bd:09:2a:44:da:af:bb:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0340251f1826347f4e9645f6824d3b93f47e5de
Validity
Not Before: Jan 31 13:00:22 2025 GMT
Not After : Feb 1 13:00:22 2025 GMT
Subject: CN=6c87043c6e2eda10dd9a5cba250de56878e7b35e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:14:d0:36:28:72:61:27:07:ec:18:1f:1b:78:
6b:77:b2:b2:0a:ee:31:fe:0e:2e:3f:21:a0:66:93:
35:12:8c:ce:e5:56:9b:62:38:60:eb:2c:b5:ff:fa:
e9:a0:1f:3f:33:79:c0:37:41:f2:7b:60:89:f6:ae:
2b:df:93:f6:40:2a:e5:fd:a2:54:96:5f:41:0a:69:
1f:7e:4f:1b:8a:2b:28:bf:3d:83:2e:41:89:0b:35:
2e:df:ff:b1:50:ce:63:48:f0:de:57:d0:ed:2d:fc:
37:dc:61:f6:38:48:65:b1:c6:01:a3:f6:6f:f8:bd:
6d:8c:de:1e:9e:dd:74:64:11:2c:c6:33:6d:f1:94:
7b:4d:bc:ca:0b:ea:13:81:e2:cc:51:15:bc:20:f2:
b3:4f:c9:dd:33:4f:66:64:c6:d7:a7:81:7d:46:d2:
79:6e:f2:7c:bb:47:ad:1f:cc:6a:1e:75:ca:f4:c6:
93:2c:81:1e:bf:e3:ae:cd:fc:4a:84:6c:7c:9c:dc:
bb:df:f0:6b:94:05:af:f4:59:0b:b8:57:98:ca:ff:
23:1a:d7:0d:f2:cf:a4:82:17:c4:15:5c:52:d5:95:
24:29:49:31:1d:47:61:fe:8c:0e:b1:6c:68:a9:cc:
8b:8b:f7:2e:7f:18:5e:15:b8:66:63:93:18:b8:f6:
0c:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:87:04:3C:6E:2E:DA:10:DD:9A:5C:BA:25:0D:E5:68:78:E7:B3:5E
X509v3 Authority Key Identifier:
keyid:B0:34:02:51:F1:82:63:47:F4:E9:64:5F:68:24:D3:B9:3F:47:E5:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sDQCUfGCY0f06WRfaCTTuT9H5d4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/f5210d-0590-43a3-9eed-6a83563b655b/1/sDQCUfGCY0f06WRfaCTTuT9H5d4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/f5210d-0590-43a3-9eed-6a83563b655b/1/sDQCUfGCY0f06WRfaCTTuT9H5d4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:e0:60:af:d9:08:cf:5f:ce:90:6a:ca:f9:d0:b2:50:a5:72:
c6:0a:23:a3:b1:52:9e:53:00:3a:fd:f9:55:7b:58:44:11:bd:
eb:b5:a5:08:58:ab:be:b8:af:40:80:77:49:41:95:95:1a:f7:
68:49:2c:d2:e2:90:a8:62:70:d8:00:88:45:f4:6e:f3:79:c3:
05:3a:89:ad:a7:aa:1a:11:40:79:f7:8d:c8:c1:fb:b0:df:79:
3b:06:66:43:7c:0b:7a:81:1c:10:36:4f:8d:ea:57:ce:89:55:
fb:b0:71:13:e6:8c:82:13:29:fd:95:b7:21:10:7c:a5:84:2d:
91:aa:ca:96:2f:80:ec:d1:87:9e:09:17:11:11:4a:33:b6:50:
e6:14:fc:2e:7a:d8:d2:82:ec:e7:21:cb:49:80:9e:2d:01:c0:
50:f4:be:0c:37:a7:79:94:82:e1:04:b0:5a:8a:b0:e7:da:91:
29:a6:99:1c:b1:9f:07:a2:31:2e:b7:75:15:99:96:94:bc:b2:
03:b1:2f:76:ee:7a:1a:0b:8c:99:40:08:70:54:16:c4:fb:6e:
50:20:04:76:9a:52:e6:ff:b0:98:df:7c:e2:32:2e:59:ef:8a:
eb:bc:08:a7:87:6b:bd:f6:67:94:5f:c5:b6:7b:f2:01:42:a7:
14:b0:61:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:05:07 2025 by rpki-client