Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/1e2316-1b5b-4ba5-937d-02864c58519c/1/snjtj5eA8p2voi-f3wM3TaSYDpQ.mft
File: snjtj5eA8p2voi-f3wM3TaSYDpQ.mft (raw, json)
Hash identifier: ZhB2d4/ACXZt0JFf2oKbPJZhNiZUL8I/RnOFgpMPgSE=
Subject key identifier: BC:F8:60:FF:84:4F:0C:A3:E5:B5:33:90:28:D9:1B:31:1C:F5:50:7B
Authority key identifier: B2:78:ED:8F:97:80:F2:9D:AF:A2:2F:9F:DF:03:37:4D:A4:98:0E:94
Certificate issuer: /CN=b278ed8f9780f29dafa22f9fdf03374da4980e94
Certificate serial: 0194BD85AE0E72FC4B4E8BF13B4B7950A664
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/snjtj5eA8p2voi-f3wM3TaSYDpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/1e2316-1b5b-4ba5-937d-02864c58519c/1/snjtj5eA8p2voi-f3wM3TaSYDpQ.mft
Manifest number: 0E83
Signing time: Fri 31 Jan 2025 18:00:42 +0000
Manifest this update: Fri 31 Jan 2025 18:00:42 +0000
Manifest next update: Sat 01 Feb 2025 18:00:42 +0000
Files and hashes: 1: Q2ddpl6C3V4vYBl0I3228luG5oU.roa (hash: gKtH3NhXGtSIchcMlB2GM3eSMYDb2zE1qytNooqyMO0=)
2: snjtj5eA8p2voi-f3wM3TaSYDpQ.crl (hash: zBWuCShwfSpn+bIfiVZ2rl7xEdLhn51axs2zPOWageI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:ae:0e:72:fc:4b:4e:8b:f1:3b:4b:79:50:a6:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b278ed8f9780f29dafa22f9fdf03374da4980e94
Validity
Not Before: Jan 31 18:00:42 2025 GMT
Not After : Feb 1 18:00:42 2025 GMT
Subject: CN=bcf860ff844f0ca3e5b5339028d91b311cf5507b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:8a:d0:d0:6c:be:09:7f:e4:fa:58:91:41:9e:
a5:7b:ed:b6:7b:70:4d:65:f5:1a:ef:ba:11:22:bc:
bd:49:fd:09:f5:33:df:e7:c0:c9:5b:a7:76:65:c6:
fa:06:b3:cb:a1:2b:df:d8:b8:e4:95:d9:52:08:ad:
4f:ec:92:02:c1:d0:a7:fa:69:c1:eb:82:4e:6a:87:
bb:c6:0e:8d:4a:2d:7f:35:37:27:78:e2:37:7a:91:
01:7e:df:33:d3:80:ce:2c:e4:9f:04:e3:a0:d4:94:
5d:4e:43:1c:cd:c0:6d:80:5c:b6:56:63:ac:ed:18:
2a:0d:98:35:f0:a0:60:09:53:c2:df:83:7d:17:10:
f0:69:31:8c:56:5c:90:75:47:9e:b7:ed:f9:87:32:
27:d4:37:cd:09:d8:cd:49:8e:1d:26:bd:8e:a2:32:
9b:03:ad:77:2e:9f:8a:fd:95:f2:47:e8:96:02:51:
71:29:15:10:35:60:10:ea:68:16:d1:2f:c3:ea:10:
df:f0:e9:48:8d:2d:a9:7b:47:ca:d7:0d:7b:f1:b1:
af:19:ad:97:23:fc:d9:c5:73:75:04:26:4d:9d:b2:
c6:06:aa:d1:20:32:fb:4a:b1:6e:c3:96:2d:a4:64:
74:88:71:14:3f:24:92:aa:98:26:0c:1e:dc:1c:3c:
4a:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:F8:60:FF:84:4F:0C:A3:E5:B5:33:90:28:D9:1B:31:1C:F5:50:7B
X509v3 Authority Key Identifier:
keyid:B2:78:ED:8F:97:80:F2:9D:AF:A2:2F:9F:DF:03:37:4D:A4:98:0E:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/snjtj5eA8p2voi-f3wM3TaSYDpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/1e2316-1b5b-4ba5-937d-02864c58519c/1/snjtj5eA8p2voi-f3wM3TaSYDpQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/1e2316-1b5b-4ba5-937d-02864c58519c/1/snjtj5eA8p2voi-f3wM3TaSYDpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:d6:fe:4e:72:3f:65:82:68:34:5c:4e:07:07:99:b1:0d:97:
80:b8:8a:5c:97:fb:0d:43:13:a9:ab:94:2e:88:a9:83:35:5c:
f0:3f:dd:3f:ab:6a:30:3e:56:8b:b7:ab:7f:cf:dc:ee:17:2e:
ae:c1:a4:13:2f:63:d3:f1:d1:ac:94:11:c2:05:32:55:1d:56:
fa:94:2b:4d:46:4f:1b:5b:6c:bb:75:c6:dc:62:a8:62:e0:a1:
ba:92:4b:e3:73:fd:aa:ae:9a:1c:9b:72:a9:e6:ee:1d:cb:63:
c7:73:23:e8:f3:93:60:8f:8d:e3:2c:43:2f:ca:39:7c:11:d3:
29:1a:63:55:00:51:d1:c1:dd:25:ca:ab:71:2f:6b:1c:02:3c:
71:fd:9f:be:d9:7c:b2:c6:f4:1e:bd:9e:9b:bd:2d:97:06:f6:
91:e6:94:1b:ec:5d:dc:74:3c:36:6a:12:40:78:84:37:16:85:
30:e5:76:06:49:b5:5c:ce:88:fd:b1:e0:dd:bd:26:fd:32:80:
e9:e7:54:46:10:5e:ae:cc:32:d8:ff:cc:79:b3:a6:55:8e:c4:
7a:cc:a0:cb:b1:cd:d3:b0:01:60:83:33:7d:5d:3f:57:11:51:
55:be:e6:99:83:95:ee:4f:32:be:13:c4:93:40:07:f9:51:0a:
44:74:c9:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:39:21 2025 by rpki-client