Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/fd53f7-8315-40d2-915b-cd0f59c28d2d/1/Sy7AqbnmDoZSFoymnZI58nMHw3I.mft
File: Sy7AqbnmDoZSFoymnZI58nMHw3I.mft (raw, json)
Hash identifier: UvOUbQRyUHiZXqdtBF7z+IQWHdJ980RqD4bX1SO1GXE=
Subject key identifier: E3:66:51:3E:80:46:A5:20:C9:8C:2C:50:91:70:3B:9A:22:AB:F6:97
Authority key identifier: 4B:2E:C0:A9:B9:E6:0E:86:52:16:8C:A6:9D:92:39:F2:73:07:C3:72
Certificate issuer: /CN=4b2ec0a9b9e60e8652168ca69d9239f27307c372
Certificate serial: 0194BC729814B1CB4C10182EFEB74C7B4794
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sy7AqbnmDoZSFoymnZI58nMHw3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/fd53f7-8315-40d2-915b-cd0f59c28d2d/1/Sy7AqbnmDoZSFoymnZI58nMHw3I.mft
Manifest number: 138F
Signing time: Fri 31 Jan 2025 13:00:14 +0000
Manifest this update: Fri 31 Jan 2025 13:00:14 +0000
Manifest next update: Sat 01 Feb 2025 13:00:14 +0000
Files and hashes: 1: I0uKuQxKXFKWPHV3tWp8USg1X-E.roa (hash: WXxoeNxUFy+lmF1DwKWF+FMyVOrtNM4sTEwb6rXBq/g=)
2: Sy7AqbnmDoZSFoymnZI58nMHw3I.crl (hash: 6+KXT1rE/pXwDDH461HEfyGbIllI/jdnpr/3OsZrp/c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:98:14:b1:cb:4c:10:18:2e:fe:b7:4c:7b:47:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b2ec0a9b9e60e8652168ca69d9239f27307c372
Validity
Not Before: Jan 31 13:00:14 2025 GMT
Not After : Feb 1 13:00:14 2025 GMT
Subject: CN=e366513e8046a520c98c2c5091703b9a22abf697
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:5b:7e:9b:82:c3:ff:a9:fa:9d:30:08:93:2d:
77:d7:e3:d4:34:33:e7:92:5b:ae:08:3b:b8:b4:19:
84:b2:d2:1c:6d:4e:12:6c:29:33:48:3d:e0:72:ec:
b3:2e:1f:c7:d8:b1:a9:c4:3f:eb:a1:1e:52:b9:d2:
9c:55:4b:34:08:90:1e:dc:6f:48:52:ed:cd:b3:87:
75:2e:46:21:e5:da:50:98:6c:8d:28:f3:18:41:70:
a8:b3:38:bc:52:ad:92:93:ae:51:97:08:21:97:8c:
05:11:df:d0:61:59:4a:0a:cc:c7:6f:71:b0:31:b2:
b2:a8:f0:c2:82:44:9d:f7:1c:d5:d0:96:46:80:df:
7e:a6:bb:76:a6:ab:3a:1b:fe:51:e9:9e:5f:6f:03:
cf:7f:a3:f5:9e:12:d1:5a:84:d5:2d:7d:d1:56:03:
a2:53:c3:81:62:b3:6d:36:73:ef:96:29:e2:83:f6:
8c:16:e2:8f:59:b7:91:70:62:11:3e:c8:05:26:5b:
5b:42:b1:a1:fd:e7:34:a7:fb:d6:be:ec:a8:da:dd:
75:bf:5f:2a:e3:3d:62:6a:0c:87:b1:17:8d:24:46:
ce:0b:b0:89:71:4f:ab:1c:6a:1f:b1:62:79:cc:ec:
3e:77:1f:c8:b8:f4:8b:b5:94:1f:e0:d4:f7:42:4c:
23:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:66:51:3E:80:46:A5:20:C9:8C:2C:50:91:70:3B:9A:22:AB:F6:97
X509v3 Authority Key Identifier:
keyid:4B:2E:C0:A9:B9:E6:0E:86:52:16:8C:A6:9D:92:39:F2:73:07:C3:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sy7AqbnmDoZSFoymnZI58nMHw3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/fd53f7-8315-40d2-915b-cd0f59c28d2d/1/Sy7AqbnmDoZSFoymnZI58nMHw3I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/fd53f7-8315-40d2-915b-cd0f59c28d2d/1/Sy7AqbnmDoZSFoymnZI58nMHw3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:c5:17:5f:56:fa:20:65:df:94:02:b0:cd:80:53:5e:59:14:
8b:db:91:19:7a:09:17:7d:18:15:a0:62:07:d4:61:53:ef:8e:
46:2e:e6:4a:44:05:fb:39:f9:82:b8:e4:de:af:0b:58:90:ed:
76:08:06:c3:82:43:74:f0:04:52:54:40:7b:7f:f4:7e:9d:92:
bb:ad:b2:15:34:60:9b:9c:2e:c2:6e:0a:38:8f:30:cd:be:fd:
94:90:2e:18:83:19:97:c0:e4:4f:72:4b:2c:f8:a9:74:43:7f:
c9:fe:ca:d0:2b:c9:9e:55:74:c7:38:f2:d0:11:1b:83:00:73:
84:97:4a:c2:66:7f:6f:d1:cc:95:5e:4f:10:7f:00:c7:67:58:
2c:8c:84:56:a2:f0:7d:da:15:55:7e:ae:aa:fc:85:52:91:53:
b9:82:11:d9:d2:f0:89:17:66:ef:70:02:c7:dc:40:60:4f:19:
ad:52:f0:90:fa:15:55:9f:17:49:bc:e3:d2:b8:fc:ac:1a:42:
a8:80:39:aa:ee:39:32:e5:33:1c:a0:42:67:ba:f2:95:5e:a7:
ab:e5:51:57:9f:de:0e:54:29:a8:94:3d:03:76:18:cc:ab:e2:
bd:ff:95:eb:26:43:8c:18:1b:42:ce:99:28:40:88:8b:a2:13:
26:81:9c:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:52:01 2025 by rpki-client