Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/811463-39ff-48fa-b3c5-e83689433dc0/1/sRiuJMlM1AJ0s4B7q_yLm8zqizY.mft
File: sRiuJMlM1AJ0s4B7q_yLm8zqizY.mft (raw, json)
Hash identifier: aGSOk8kexreCB07BWxORDm5CACf9dnNX6WpGM49Zsh4=
Subject key identifier: 6A:8C:4A:61:77:2A:9D:BB:23:03:22:A4:D2:6D:E2:DD:C1:C2:6D:7D
Authority key identifier: B1:18:AE:24:C9:4C:D4:02:74:B3:80:7B:AB:FC:8B:9B:CC:EA:8B:36
Certificate issuer: /CN=b118ae24c94cd40274b3807babfc8b9bccea8b36
Certificate serial: 0194BC050E41B02A1449216DBB0120C64E67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sRiuJMlM1AJ0s4B7q_yLm8zqizY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/811463-39ff-48fa-b3c5-e83689433dc0/1/sRiuJMlM1AJ0s4B7q_yLm8zqizY.mft
Manifest number: 0D96
Signing time: Fri 31 Jan 2025 11:00:35 +0000
Manifest this update: Fri 31 Jan 2025 11:00:35 +0000
Manifest next update: Sat 01 Feb 2025 11:00:35 +0000
Files and hashes: 1: 3VLZ851VUhXxIG7ryQ-8eGekA3s.roa (hash: WkKK7D8YH2zVVECR2pK95SMukGQlzInUKX5HdUYAXRs=)
2: sRiuJMlM1AJ0s4B7q_yLm8zqizY.crl (hash: rKJNjrv/VBPP9MCmLCJqmyiPMb2zDDhewircMm8N1rQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:0e:41:b0:2a:14:49:21:6d:bb:01:20:c6:4e:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b118ae24c94cd40274b3807babfc8b9bccea8b36
Validity
Not Before: Jan 31 11:00:35 2025 GMT
Not After : Feb 1 11:00:35 2025 GMT
Subject: CN=6a8c4a61772a9dbb230322a4d26de2ddc1c26d7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:2d:cd:51:06:23:cb:da:63:73:c2:ed:0b:d7:
c1:86:0d:40:ec:da:9e:8e:aa:cc:cf:cd:4e:bf:04:
4c:77:22:11:d2:99:39:0d:2f:bc:ec:52:89:27:f4:
9e:1d:27:8c:f1:d2:3a:34:1e:d1:ea:01:95:00:97:
2e:b5:90:e0:90:5e:34:a1:a6:c3:34:e0:3f:a5:e4:
23:56:1d:ca:f8:99:eb:dc:40:a6:a6:1e:9a:62:62:
5d:d5:31:0a:cf:28:c5:e4:68:c3:10:a7:56:3c:ab:
d8:27:64:2d:24:65:69:e5:64:ef:cd:27:33:62:8f:
12:09:90:70:56:88:75:20:56:4e:e1:5a:1e:c2:39:
16:1d:1d:ed:9b:30:70:d0:58:d7:69:52:29:3c:8f:
a0:30:73:ee:03:6c:11:66:e7:5d:7d:35:0f:5e:d6:
3f:56:2b:2f:7e:ce:2e:5b:ee:99:50:e8:c7:a0:c3:
16:7b:00:5a:d9:ff:0d:57:a5:f3:ee:13:c0:33:ea:
21:23:a5:3a:56:07:de:25:7f:d3:5e:42:ae:83:60:
21:e4:29:03:c7:a5:9b:4b:60:1f:d4:6d:19:61:45:
dd:e8:a4:fd:68:53:53:8c:0d:2b:40:8a:06:1e:d1:
5d:2d:56:80:e0:5f:06:35:88:f9:f5:1c:e8:e9:10:
82:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:8C:4A:61:77:2A:9D:BB:23:03:22:A4:D2:6D:E2:DD:C1:C2:6D:7D
X509v3 Authority Key Identifier:
keyid:B1:18:AE:24:C9:4C:D4:02:74:B3:80:7B:AB:FC:8B:9B:CC:EA:8B:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sRiuJMlM1AJ0s4B7q_yLm8zqizY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/811463-39ff-48fa-b3c5-e83689433dc0/1/sRiuJMlM1AJ0s4B7q_yLm8zqizY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/811463-39ff-48fa-b3c5-e83689433dc0/1/sRiuJMlM1AJ0s4B7q_yLm8zqizY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:0d:6b:82:51:76:8f:7e:d1:9a:ce:9b:e0:3c:48:67:f6:3a:
42:9a:29:c6:25:8d:49:b0:72:65:62:ad:1e:69:b7:c8:73:35:
ba:a4:f6:51:ae:89:e9:31:36:ec:89:96:9d:25:25:24:90:03:
fd:37:1b:e0:e3:b7:68:e8:39:d0:a2:c1:6d:f2:b9:62:88:34:
48:9a:94:f0:5c:b5:87:75:b7:d0:8a:11:2f:03:c4:0e:96:10:
35:d9:75:45:ff:41:97:2b:08:d7:41:f2:3c:1f:dc:47:d6:4f:
e6:d3:f6:94:ec:67:f6:fb:cd:ec:c3:69:aa:c4:25:39:c0:c4:
6e:b8:de:e0:6d:94:5f:fa:2a:aa:d3:9d:f9:2e:02:7b:44:6e:
11:1d:99:a8:26:14:37:60:da:cc:73:1a:23:ad:14:d6:09:45:
e2:46:ea:bb:c9:7c:a8:b5:50:86:ac:3d:01:70:89:5b:5b:62:
0d:e6:76:85:d3:ee:3b:82:6e:3b:d6:ab:e0:2d:e4:64:1f:cc:
b7:8a:36:18:61:72:e3:d5:d1:f0:6e:de:c7:1c:47:b5:47:c9:
9e:d0:d6:57:76:6a:f8:8b:16:8a:a2:dd:53:a4:0e:91:9d:de:
50:20:68:6d:c2:20:63:b3:5b:60:19:4b:80:99:5e:31:f5:77:
ff:2e:3a:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:07 2025 by rpki-client