Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/172180-8f44-4161-ab7e-020307acbbb9/1/SBaZwQuP-LkauQlAMU7pOyev3NY.mft
File: SBaZwQuP-LkauQlAMU7pOyev3NY.mft (raw, json)
Hash identifier: GrG12HDyDjgFEt8KKSwfw55j7Sp4KHVa5TU44qTHA/E=
Subject key identifier: A7:95:28:E2:8B:D7:44:A7:1F:65:F6:01:0B:61:5A:A3:9B:03:12:F9
Authority key identifier: 48:16:99:C1:0B:8F:F8:B9:1A:B9:09:40:31:4E:E9:3B:27:AF:DC:D6
Certificate issuer: /CN=481699c10b8ff8b91ab90940314ee93b27afdcd6
Certificate serial: 0194BD178AF673444AE55B9E04AA271F427A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SBaZwQuP-LkauQlAMU7pOyev3NY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/172180-8f44-4161-ab7e-020307acbbb9/1/SBaZwQuP-LkauQlAMU7pOyev3NY.mft
Manifest number: 0A6E
Signing time: Fri 31 Jan 2025 16:00:24 +0000
Manifest this update: Fri 31 Jan 2025 16:00:24 +0000
Manifest next update: Sat 01 Feb 2025 16:00:24 +0000
Files and hashes: 1: SBaZwQuP-LkauQlAMU7pOyev3NY.crl (hash: CNQ0G7PGkcsqpnnI2D+qdaLdzBqEpLoBrJ4RdcWctbA=)
2: gREff1tF-BFgfiQMOqwC-JywERY.roa (hash: s5MFDeOQrL+EZevqGRhg/WJb2VH0jOYXkHrjmynZzxk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:8a:f6:73:44:4a:e5:5b:9e:04:aa:27:1f:42:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=481699c10b8ff8b91ab90940314ee93b27afdcd6
Validity
Not Before: Jan 31 16:00:24 2025 GMT
Not After : Feb 1 16:00:24 2025 GMT
Subject: CN=a79528e28bd744a71f65f6010b615aa39b0312f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:4b:cf:61:8c:70:c8:12:89:93:62:8b:9a:8e:
d3:a7:f8:97:7a:f4:2f:09:28:1f:7e:c0:f6:a1:3d:
48:7f:10:65:b9:c6:9b:9c:8d:46:44:c8:43:a6:e8:
7e:5b:8f:ac:83:24:ab:a8:80:7f:51:6f:f9:2d:51:
28:43:8f:88:b8:d6:88:62:28:d8:5c:62:36:62:3f:
24:48:68:95:cd:88:72:bd:c2:05:f3:fd:01:c0:fc:
6d:9e:72:f3:c3:94:59:e0:24:1e:13:d6:05:c8:97:
6c:bc:6c:c2:3e:37:1b:f8:75:23:91:cc:69:c8:c0:
6f:2b:30:5a:1a:ee:73:3f:8e:4c:d0:ea:9b:05:34:
02:36:21:97:5c:4f:20:14:3c:73:97:db:98:f8:92:
11:7f:62:ae:2b:64:f2:95:f6:c8:5e:3e:7e:1c:f6:
78:1e:1f:82:17:36:ff:74:88:cb:49:fb:d7:a8:ab:
c3:0c:1c:13:e4:66:31:36:9d:88:3b:1d:e1:b9:34:
51:82:01:e5:48:38:e9:df:7b:e7:24:05:3b:6a:2d:
bd:64:f3:91:d8:9d:0d:c2:65:19:5f:4c:1a:f6:dd:
db:67:a5:a6:b3:be:80:37:3b:72:8d:df:7f:47:ea:
7b:e5:dd:4d:6e:e3:c6:b5:7d:05:da:a4:67:a6:28:
73:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:95:28:E2:8B:D7:44:A7:1F:65:F6:01:0B:61:5A:A3:9B:03:12:F9
X509v3 Authority Key Identifier:
keyid:48:16:99:C1:0B:8F:F8:B9:1A:B9:09:40:31:4E:E9:3B:27:AF:DC:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SBaZwQuP-LkauQlAMU7pOyev3NY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/172180-8f44-4161-ab7e-020307acbbb9/1/SBaZwQuP-LkauQlAMU7pOyev3NY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/172180-8f44-4161-ab7e-020307acbbb9/1/SBaZwQuP-LkauQlAMU7pOyev3NY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:4e:25:0e:d0:cf:80:20:d0:6b:18:29:a5:c6:e7:f0:f2:91:
07:d9:22:81:4c:e6:f6:f9:f6:92:b8:61:6d:27:f8:09:de:b5:
ca:11:a8:de:1f:08:7a:d1:ba:00:92:cc:20:d3:41:b8:bc:fc:
0c:5c:0f:4a:12:f0:60:fd:c2:61:4f:81:4c:4d:98:76:7c:c0:
4e:e5:86:97:45:ad:99:3d:32:64:f5:93:c6:f4:34:4e:b0:6b:
c7:95:af:e3:be:8f:3f:e7:4c:f7:16:cf:b8:94:78:86:0e:09:
49:59:40:d9:12:05:a7:24:71:4a:90:e6:4e:f7:80:3c:f5:8b:
11:e6:b9:e3:9c:b4:f3:8b:e5:b2:32:30:20:c8:10:5a:68:d1:
14:d1:0d:3a:67:9b:d5:fb:27:7f:ed:86:3e:c1:42:22:7b:86:
cf:a8:68:b3:74:b0:4c:59:63:38:77:3f:80:2f:a4:c5:69:6f:
c4:e1:ad:2f:31:a8:68:9f:db:4f:94:19:9f:ec:85:a2:11:7d:
04:bd:a3:61:d0:18:9c:81:12:3d:b5:8d:d9:3f:b9:08:3f:d5:
12:b8:40:e3:77:65:02:f5:b5:3a:c5:5b:68:52:79:62:d8:ee:
a0:30:71:71:a4:90:b4:ac:7b:a2:03:ab:ec:1d:f5:23:ad:3d:
c2:63:87:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:50:49 2025 by rpki-client