Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/11bf2e-b58a-4a31-89c0-155f42dcaa73/1/sj64SeC2lA5P9UfeC0GwA_nhEFw.mft
File: sj64SeC2lA5P9UfeC0GwA_nhEFw.mft (raw, json)
Hash identifier: Tt2vEqf/2ZanQSTzmSOKP9N4nf/bFWbohbUs4CujvDA=
Subject key identifier: 42:7F:D2:5A:37:15:1A:DD:70:6F:03:61:47:C8:A0:7E:36:82:FF:25
Authority key identifier: B2:3E:B8:49:E0:B6:94:0E:4F:F5:47:DE:0B:41:B0:03:F9:E1:10:5C
Certificate issuer: /CN=b23eb849e0b6940e4ff547de0b41b003f9e1105c
Certificate serial: 0194BC7325460E0E815A8C28148C25661216
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sj64SeC2lA5P9UfeC0GwA_nhEFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/11bf2e-b58a-4a31-89c0-155f42dcaa73/1/sj64SeC2lA5P9UfeC0GwA_nhEFw.mft
Manifest number: 0795
Signing time: Fri 31 Jan 2025 13:00:50 +0000
Manifest this update: Fri 31 Jan 2025 13:00:50 +0000
Manifest next update: Sat 01 Feb 2025 13:00:50 +0000
Files and hashes: 1: 9svgo4bGRBf8fMpSXvge7RoyrHM.roa (hash: teVQdkK97LTCrE/CLpJAuLsspKcnHRjqSI/rfD5Q6hA=)
2: fetFKuopmwnkmS4GdVahSkuSTYA.roa (hash: COKnfUPWTvK88/nI2sTAGQJZnRfr5E0q/yyW5/NYsSI=)
3: sj64SeC2lA5P9UfeC0GwA_nhEFw.crl (hash: /f9kiyCefI46xcGAhNIuz1xIHEcQwhXuBJsXRt7rQbk=)
4: tYCsQPIyFJmQyf9thG5Is7jI5NY.roa (hash: b/PwLfTfSmleVVur7ZKT8j1+gDLO4fZy6WoOsM743EE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:25:46:0e:0e:81:5a:8c:28:14:8c:25:66:12:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b23eb849e0b6940e4ff547de0b41b003f9e1105c
Validity
Not Before: Jan 31 13:00:50 2025 GMT
Not After : Feb 1 13:00:50 2025 GMT
Subject: CN=427fd25a37151add706f036147c8a07e3682ff25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:09:5b:bf:c3:d7:6e:10:50:40:f8:71:d9:8f:
95:b4:15:15:6b:43:bc:2a:e9:b2:3e:28:db:5a:05:
0b:a0:8b:c4:3d:4c:61:81:99:88:34:2f:ac:2e:97:
9d:06:97:62:99:00:85:7e:91:4e:cb:25:98:05:ae:
9b:14:25:39:58:12:16:ab:98:82:bc:e0:16:4f:61:
70:79:fe:44:23:43:e0:6d:0d:cc:1a:a3:ce:32:ff:
47:45:70:71:93:bc:35:40:32:eb:32:31:d9:0e:57:
45:6e:54:17:75:e4:58:00:8d:0c:e6:e5:03:45:aa:
b7:6a:8b:81:45:af:c4:da:13:eb:4a:a0:05:35:84:
54:58:e2:69:cf:62:fc:34:6a:4f:89:1a:19:28:50:
99:2b:1c:95:9e:d0:71:29:77:80:52:5b:d3:cf:e7:
cc:28:ac:9a:dd:10:c7:55:fa:15:f8:e1:56:3a:c9:
0a:16:09:65:73:2b:fc:c7:4c:6a:ba:45:6b:97:de:
48:b1:89:57:e7:02:23:84:3e:f4:37:11:a3:b2:f0:
b5:59:a4:a7:34:c0:8b:50:b9:ce:4e:ad:91:11:d4:
5b:59:09:17:22:f2:76:d8:74:d3:c3:80:b2:8c:33:
f8:f4:56:81:bf:53:1a:3c:ea:dd:a1:15:cf:3b:f7:
f1:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:7F:D2:5A:37:15:1A:DD:70:6F:03:61:47:C8:A0:7E:36:82:FF:25
X509v3 Authority Key Identifier:
keyid:B2:3E:B8:49:E0:B6:94:0E:4F:F5:47:DE:0B:41:B0:03:F9:E1:10:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sj64SeC2lA5P9UfeC0GwA_nhEFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/11bf2e-b58a-4a31-89c0-155f42dcaa73/1/sj64SeC2lA5P9UfeC0GwA_nhEFw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/11bf2e-b58a-4a31-89c0-155f42dcaa73/1/sj64SeC2lA5P9UfeC0GwA_nhEFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:39:81:18:03:9d:94:6f:04:d7:65:33:49:88:9c:0a:9a:06:
b0:3d:54:e2:e6:43:24:3a:6f:84:f3:a4:6a:c5:37:91:10:8e:
02:2a:79:78:eb:d5:f3:e5:9a:02:48:36:40:b3:a7:ab:e8:e9:
45:b8:9d:17:cc:f0:14:06:6c:12:af:20:4e:b8:7b:25:09:34:
d3:c0:d1:03:3e:63:28:c7:e3:b5:1a:e0:8e:64:9b:43:96:6e:
ff:d5:15:fb:55:6d:6d:a0:5e:8d:2e:72:02:9a:95:61:d0:61:
ff:cb:fd:c9:f3:3a:35:b4:aa:8e:9f:db:7c:1f:a3:8d:20:61:
99:7a:c0:d4:74:73:95:df:7a:31:7f:ae:8d:a7:e2:c0:79:ce:
9e:af:2a:6e:45:76:ea:fa:61:9a:f3:5d:01:67:dd:4f:00:45:
21:26:c4:cb:a5:f6:3e:28:6f:49:54:17:99:37:49:3f:29:0b:
51:93:85:70:22:b1:a6:4a:d7:b8:77:91:5e:dc:57:01:82:c9:
45:14:3a:2b:de:2e:5b:74:56:d9:fb:16:0c:cf:42:8c:45:49:
b0:fc:c0:d1:4f:ea:69:54:b1:12:0a:90:02:a8:ea:91:1d:09:
90:90:23:10:cc:e5:ae:34:81:a2:4f:1d:46:42:07:18:65:ac:
62:94:57:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:59 2025 by rpki-client