Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/sxxM5mPh7CRedHzYRvGmnduDSzs.mft
File: sxxM5mPh7CRedHzYRvGmnduDSzs.mft (raw, json)
Hash identifier: WQQJDpJ5gIGBz+m/rLwjR8zjsNLHtKSxg1m/rSsbyJc=
Subject key identifier: 82:A1:4A:25:75:41:A8:05:81:7E:A9:B1:FB:21:15:31:2D:3F:77:36
Authority key identifier: B3:1C:4C:E6:63:E1:EC:24:5E:74:7C:D8:46:F1:A6:9D:DB:83:4B:3B
Certificate issuer: /CN=b31c4ce663e1ec245e747cd846f1a69ddb834b3b
Certificate serial: 0194BC72A289A142ABD79C733431B54553B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sxxM5mPh7CRedHzYRvGmnduDSzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/sxxM5mPh7CRedHzYRvGmnduDSzs.mft
Manifest number: 0218
Signing time: Fri 31 Jan 2025 13:00:16 +0000
Manifest this update: Fri 31 Jan 2025 13:00:16 +0000
Manifest next update: Sat 01 Feb 2025 13:00:16 +0000
Files and hashes: 1: 1xCDoin_l-PXV5xiYDlMclvenpw.roa (hash: aganIe3IICFmPVBAxFe5fWkBEv9iHKSkpJ9j78Dp3+A=)
2: mHdbhQxgyf7CV9jCGJvliFVilXc.roa (hash: 4CdqTf57TkDxaRHOcnXl2aFyjkgmNRswPmW9ZMUYxw8=)
3: sxxM5mPh7CRedHzYRvGmnduDSzs.crl (hash: /qvCmcOkM3BcACA7NhCSxjFZt2Xv8fEL3OsNMJA1+Vk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:a2:89:a1:42:ab:d7:9c:73:34:31:b5:45:53:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b31c4ce663e1ec245e747cd846f1a69ddb834b3b
Validity
Not Before: Jan 31 13:00:16 2025 GMT
Not After : Feb 1 13:00:16 2025 GMT
Subject: CN=82a14a257541a805817ea9b1fb2115312d3f7736
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:66:b8:3a:d0:05:30:ec:38:36:2d:19:01:fd:
2e:89:4a:e5:a4:1c:ef:01:4b:75:95:90:69:40:a5:
10:5e:30:91:41:ea:d1:55:de:aa:c4:d1:35:71:14:
b7:cb:fd:42:13:34:ed:04:c6:c6:19:00:b7:0b:5f:
5c:20:45:e1:1f:6c:23:23:10:80:a8:fe:54:e8:9f:
77:4f:bf:a6:d4:4a:d9:80:6a:2c:54:27:b8:8f:5b:
16:54:b6:f1:89:f2:51:68:f4:72:ff:c3:63:2a:0a:
67:5a:a4:fc:23:6e:f1:18:b4:c4:da:0e:56:76:6b:
78:46:c6:dc:59:79:a0:fc:1a:4e:3d:20:38:48:d7:
5b:84:26:1e:23:bb:c5:97:fa:54:2e:fb:fc:2e:2d:
c1:37:9c:3c:17:2c:b7:0e:8f:cf:d0:29:af:7c:41:
a4:8d:08:84:35:07:89:96:7d:7b:1e:6b:1c:8e:6e:
f4:04:67:8a:1a:80:94:35:02:94:90:f8:e9:82:72:
f9:af:cc:3a:04:08:77:5a:26:25:57:9d:61:3d:d0:
cc:64:85:ef:74:6b:ae:19:91:0e:1c:ac:b4:95:19:
0d:97:c5:c2:4d:0d:d4:7e:19:8f:e5:48:37:e7:49:
7f:b3:82:f0:76:5b:43:86:25:59:87:83:15:4b:0d:
38:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:A1:4A:25:75:41:A8:05:81:7E:A9:B1:FB:21:15:31:2D:3F:77:36
X509v3 Authority Key Identifier:
keyid:B3:1C:4C:E6:63:E1:EC:24:5E:74:7C:D8:46:F1:A6:9D:DB:83:4B:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sxxM5mPh7CRedHzYRvGmnduDSzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/sxxM5mPh7CRedHzYRvGmnduDSzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/sxxM5mPh7CRedHzYRvGmnduDSzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:6c:e2:ef:af:07:4f:1a:70:57:d9:dd:c4:78:57:73:b8:44:
96:fe:2f:c7:9f:8b:ce:b2:22:a2:cd:02:f0:69:31:8e:a2:30:
7f:6e:d3:6f:ec:08:35:3f:3c:4f:7a:32:f0:98:dd:ef:71:b7:
d1:01:b2:22:6e:48:f5:05:0f:0a:f4:55:f0:c6:fd:8d:37:37:
d8:63:b6:08:76:5b:c2:b8:2d:ae:9f:1d:32:ac:f4:dc:99:47:
e4:79:7a:2b:2f:34:4e:65:1f:40:0a:35:a0:5e:a2:43:5b:28:
2b:da:f9:76:77:de:d0:e7:a8:54:84:d2:a1:b7:64:c1:6f:76:
b6:32:cc:17:68:f8:23:7b:de:f0:42:ce:5c:86:d2:d4:7b:10:
64:1a:be:8a:0b:62:ee:47:25:83:07:da:63:d0:27:b0:7a:b7:
3c:61:b2:b7:70:c8:01:55:81:81:0f:d5:5d:1c:7d:0a:72:42:
71:b3:96:16:6f:63:4d:9f:60:10:ab:98:1c:19:45:ba:f7:64:
19:a6:90:7d:12:d3:53:23:b6:9f:67:ca:53:2c:c9:c5:d2:e0:
6b:6d:31:12:09:00:de:34:1b:75:c0:e4:93:fd:48:92:2b:ff:
5b:ae:c9:e4:2e:a0:3f:6c:7f:ab:e4:1b:dc:38:fe:08:3e:13:
1e:e2:b3:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:44 2025 by rpki-client