Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/23cbdd-139f-468d-88c3-f7942ca328f9/1/_SqYOFjGha4w7gNeigMFQkiMXws.mft
File: _SqYOFjGha4w7gNeigMFQkiMXws.mft (raw, json)
Hash identifier: +wq+L2RQ8nAsZFSh26Uoi5XBURewZgdXm0ntmXlmdHg=
Subject key identifier: 6A:E7:89:4B:00:31:65:5E:3A:54:76:55:DF:5C:9F:FD:02:0A:38:72
Authority key identifier: FD:2A:98:38:58:C6:85:AE:30:EE:03:5E:8A:03:05:42:48:8C:5F:0B
Certificate issuer: /CN=fd2a983858c685ae30ee035e8a030542488c5f0b
Certificate serial: 0194BC3C03B60C426286A1FC5E3EA531A0EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_SqYOFjGha4w7gNeigMFQkiMXws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/23cbdd-139f-468d-88c3-f7942ca328f9/1/_SqYOFjGha4w7gNeigMFQkiMXws.mft
Manifest number: 0272
Signing time: Fri 31 Jan 2025 12:00:37 +0000
Manifest this update: Fri 31 Jan 2025 12:00:37 +0000
Manifest next update: Sat 01 Feb 2025 12:00:37 +0000
Files and hashes: 1: _SqYOFjGha4w7gNeigMFQkiMXws.crl (hash: v+B+PYz3bjP+egy3FEcFSKlS/pRAy9UbXiJ0A//52kY=)
2: mcWI4GIqipBUvrnwIHMQKmS2RCg.roa (hash: RNQDLaE2tgJjxnmWK+M407e+BB24q00+oDFiCmR/ZNI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:03:b6:0c:42:62:86:a1:fc:5e:3e:a5:31:a0:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd2a983858c685ae30ee035e8a030542488c5f0b
Validity
Not Before: Jan 31 12:00:37 2025 GMT
Not After : Feb 1 12:00:37 2025 GMT
Subject: CN=6ae7894b0031655e3a547655df5c9ffd020a3872
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:3c:85:28:3c:b0:6e:04:09:98:b3:ad:4b:6c:
57:de:de:41:42:ce:69:e2:43:46:9f:26:ee:43:d4:
98:58:1b:db:74:14:b3:e6:2b:fa:9a:58:3b:e2:eb:
0c:b8:b2:2b:e5:42:67:05:9d:7e:ca:bb:b9:e2:f5:
06:f4:00:b3:32:1a:74:eb:f6:02:57:8c:8b:ae:2b:
31:92:5a:17:06:a5:4f:00:da:d0:57:5a:9d:1d:77:
95:38:7b:21:09:2e:46:3f:47:7a:f7:c2:3c:29:bb:
a7:12:20:4f:f4:d8:27:6e:55:13:a4:84:97:de:2e:
42:1b:5b:37:30:b6:35:4f:45:fe:d9:a9:c4:a5:8d:
be:7d:9e:aa:a8:b1:43:b5:fd:28:c9:31:23:d8:2e:
cd:e1:56:76:ea:dc:82:43:4a:6d:15:61:b8:ec:f8:
4f:35:cd:70:e1:9c:83:85:18:3d:68:64:8b:5a:98:
bb:bb:a8:a2:78:4b:60:72:6c:82:31:88:c3:1e:7f:
2e:03:7d:31:40:f9:5c:15:d5:c4:67:6c:27:0d:db:
8f:12:0a:1f:70:cc:07:67:a1:00:1c:51:49:21:d0:
71:25:80:b4:66:ee:dd:45:45:0c:df:40:94:fc:a3:
c9:eb:b0:57:cf:4a:05:dc:ee:5a:62:94:27:d8:05:
2f:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:E7:89:4B:00:31:65:5E:3A:54:76:55:DF:5C:9F:FD:02:0A:38:72
X509v3 Authority Key Identifier:
keyid:FD:2A:98:38:58:C6:85:AE:30:EE:03:5E:8A:03:05:42:48:8C:5F:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_SqYOFjGha4w7gNeigMFQkiMXws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/23cbdd-139f-468d-88c3-f7942ca328f9/1/_SqYOFjGha4w7gNeigMFQkiMXws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/23cbdd-139f-468d-88c3-f7942ca328f9/1/_SqYOFjGha4w7gNeigMFQkiMXws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:b0:42:a5:57:84:b1:a3:76:63:db:57:39:72:b6:e0:03:e0:
a6:cc:fd:77:62:f8:6b:40:be:8a:7a:d9:21:c3:70:46:be:e5:
77:07:ff:d0:79:58:26:18:0f:e3:16:df:dc:ae:57:c4:e2:3c:
aa:2b:13:44:15:2e:67:93:dd:6b:4d:47:83:19:38:37:9f:e0:
79:b0:42:88:57:74:e7:6b:01:c4:a7:a5:c8:9c:9f:a1:41:71:
a8:ac:42:38:6e:84:35:e0:a3:d0:ea:c3:40:5f:47:a6:9b:a1:
fd:a3:57:9a:f3:5d:0c:36:65:52:80:71:d4:33:12:0c:b0:ef:
d1:62:86:9f:2d:de:02:80:2c:0a:64:09:aa:91:5d:d3:ce:9c:
7d:07:45:03:91:cf:92:8a:a2:2f:2a:42:19:d9:d7:8d:14:7c:
ff:9c:13:c9:27:e0:48:ee:2d:40:96:13:2c:a8:30:5a:b3:ef:
2d:8d:aa:74:87:9c:21:b6:ab:b0:53:90:41:86:e4:12:be:b9:
5c:69:d4:fe:91:cb:92:55:84:94:8d:02:08:72:59:1c:a9:1f:
61:fb:e7:3d:3e:66:9c:62:99:8c:fc:53:4e:d1:98:02:ab:e7:
45:5e:ca:30:60:7e:ed:98:89:d9:33:ef:13:bd:89:57:2d:c6:
8c:13:9e:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:03:22 2025 by rpki-client