Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/071eeb-154a-45f0-8d7b-63873e884413/1/sHWOiMIHAhMbkXpN_bI3S8NlVYc.mft
File: sHWOiMIHAhMbkXpN_bI3S8NlVYc.mft (raw, json)
Hash identifier: sW4HUG/LL1lS+Bi1DBj7GSeRWo9LPFfvnc6FKhRpZgE=
Subject key identifier: 41:D5:BF:0A:B8:E1:6D:58:9D:4D:62:3D:B2:C7:B7:DD:C2:60:D5:E3
Authority key identifier: B0:75:8E:88:C2:07:02:13:1B:91:7A:4D:FD:B2:37:4B:C3:65:55:87
Certificate issuer: /CN=b0758e88c20702131b917a4dfdb2374bc3655587
Certificate serial: 0194BC72FD2EC37885E489F21399EC75A124
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sHWOiMIHAhMbkXpN_bI3S8NlVYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/071eeb-154a-45f0-8d7b-63873e884413/1/sHWOiMIHAhMbkXpN_bI3S8NlVYc.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 13:00:39 +0000
Manifest this update: Fri 31 Jan 2025 13:00:39 +0000
Manifest next update: Sat 01 Feb 2025 13:00:39 +0000
Files and hashes: 1: SjIkpyQ7a466hqkgdpcQ1k2IFnM.roa (hash: Ka4bOW3Lwex81O0FRlMpa0sWUNlOOrrrXHeIztmbIBM=)
2: sHWOiMIHAhMbkXpN_bI3S8NlVYc.crl (hash: vFs4NWBl106xKckCQW0ohWYK9x9oEcVCMRtJSD9/6xw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:fd:2e:c3:78:85:e4:89:f2:13:99:ec:75:a1:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0758e88c20702131b917a4dfdb2374bc3655587
Validity
Not Before: Jan 31 13:00:39 2025 GMT
Not After : Feb 1 13:00:39 2025 GMT
Subject: CN=41d5bf0ab8e16d589d4d623db2c7b7ddc260d5e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:98:8a:89:df:d0:b5:85:5a:54:c1:99:f4:75:
5b:bf:69:bc:bc:4a:aa:5f:b1:55:c5:7b:ba:c5:a7:
74:31:3d:d8:bd:02:04:e7:7e:8b:75:38:9b:1c:d9:
c6:58:02:e7:5a:15:bc:10:2f:10:5c:c4:66:2b:df:
49:80:4d:7d:59:e7:70:97:73:23:56:76:43:56:1f:
84:ea:74:69:31:60:c0:f3:42:6a:c1:f7:bf:01:60:
4b:c3:52:56:45:13:03:75:ec:f1:75:0e:0e:c5:22:
bd:f4:6b:d4:39:b9:f8:dd:ae:38:c9:a1:b4:9e:e5:
e4:bb:41:0a:bb:39:b5:bb:98:66:fc:b8:e3:e2:d6:
b8:b8:42:07:07:05:40:7a:a3:17:77:1c:c1:34:19:
52:bc:78:bc:b1:11:f4:2b:d0:6c:b0:03:a1:be:18:
16:70:01:45:98:6a:7e:53:79:14:90:94:0c:36:df:
a1:30:a2:af:ef:2b:6e:b3:bc:8b:c3:f3:63:d2:8a:
06:62:6c:95:f7:fe:6f:64:3a:6b:8d:72:93:00:aa:
bc:64:fb:cd:cd:79:52:e3:60:76:81:73:dc:98:02:
40:fc:82:01:fb:6c:b1:6f:b5:79:ce:94:2b:6b:51:
b0:c0:6e:10:5e:f8:a6:1e:3d:4a:b2:bc:bd:c0:4c:
fc:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:D5:BF:0A:B8:E1:6D:58:9D:4D:62:3D:B2:C7:B7:DD:C2:60:D5:E3
X509v3 Authority Key Identifier:
keyid:B0:75:8E:88:C2:07:02:13:1B:91:7A:4D:FD:B2:37:4B:C3:65:55:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sHWOiMIHAhMbkXpN_bI3S8NlVYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/071eeb-154a-45f0-8d7b-63873e884413/1/sHWOiMIHAhMbkXpN_bI3S8NlVYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/071eeb-154a-45f0-8d7b-63873e884413/1/sHWOiMIHAhMbkXpN_bI3S8NlVYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:35:cb:06:cf:23:5b:83:c1:ad:54:26:c5:1d:51:3c:e7:b1:
6d:6c:2f:26:ce:48:76:f4:87:f1:58:08:ec:2c:d4:59:28:ed:
23:ee:3d:9b:87:e2:47:64:52:d6:88:f2:bb:7c:d6:64:c2:c7:
11:fa:80:64:cc:ad:09:60:b8:26:29:42:db:67:a8:0a:cf:b3:
b5:6f:39:09:f8:b2:c3:97:91:5f:1e:4b:1a:36:80:b5:cc:a5:
da:3f:39:61:f5:d7:ff:6b:e3:9d:2e:e9:02:92:9b:9e:23:1d:
44:fc:0f:1b:6c:02:07:22:2d:ee:af:3d:fa:fb:f1:c0:cf:93:
06:5f:28:14:ab:7a:f4:ed:79:0e:85:1c:dd:9d:a0:62:70:ba:
dd:57:0a:fd:40:35:80:e5:b9:90:d8:54:80:65:34:11:78:2c:
3e:b4:f7:f7:07:20:0b:56:24:66:5e:a4:71:80:a4:bd:f2:f8:
35:8e:72:da:eb:f5:99:be:b8:d6:44:77:02:61:fd:4a:b6:d5:
37:2d:73:6b:0a:c3:de:75:bb:8c:66:e7:41:45:c1:d8:b9:f7:
a9:3a:e1:39:fe:2c:47:d3:2f:76:fe:ff:83:00:a1:99:8c:5d:
83:3e:8a:73:9a:1f:af:e3:bb:64:cd:71:2b:6b:df:02:38:21:
e2:9c:f3:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:50:02 2025 by rpki-client