Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/bb3b62-3302-45aa-968a-ecbb3fc0a725/1/sXLI1PyYbeufzrHw0MrifBwxNcM.mft
File: sXLI1PyYbeufzrHw0MrifBwxNcM.mft (raw, json)
Hash identifier: X1v/RwoOwPf5zAbSB1fW3nTyPbh2P7go/7vJhtrDbAg=
Subject key identifier: 9A:16:9D:30:9C:5B:30:C6:F8:25:3F:4B:0D:DF:52:E6:0B:F4:19:FC
Authority key identifier: B1:72:C8:D4:FC:98:6D:EB:9F:CE:B1:F0:D0:CA:E2:7C:1C:31:35:C3
Certificate issuer: /CN=b172c8d4fc986deb9fceb1f0d0cae27c1c3135c3
Certificate serial: 0194BD4E9396EB50E6738DD30B2A71F05795
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXLI1PyYbeufzrHw0MrifBwxNcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/bb3b62-3302-45aa-968a-ecbb3fc0a725/1/sXLI1PyYbeufzrHw0MrifBwxNcM.mft
Manifest number: 0921
Signing time: Fri 31 Jan 2025 17:00:30 +0000
Manifest this update: Fri 31 Jan 2025 17:00:30 +0000
Manifest next update: Sat 01 Feb 2025 17:00:30 +0000
Files and hashes: 1: Fe5Gqx1aovGtXf8G6dbhghP8Zjc.roa (hash: BUPkFvlzjudVBF56jR+MbrRifodIklIIzIddNH6FiAc=)
2: sXLI1PyYbeufzrHw0MrifBwxNcM.crl (hash: xDQdjJGbNco1RrqMbKdvGetamjW6C9S756xiIixuwgg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:93:96:eb:50:e6:73:8d:d3:0b:2a:71:f0:57:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b172c8d4fc986deb9fceb1f0d0cae27c1c3135c3
Validity
Not Before: Jan 31 17:00:30 2025 GMT
Not After : Feb 1 17:00:30 2025 GMT
Subject: CN=9a169d309c5b30c6f8253f4b0ddf52e60bf419fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b1:f1:b2:dd:10:50:8c:66:42:86:99:4f:e2:
d3:c8:45:1d:c6:b2:35:8b:56:b9:f4:f6:e2:ef:4c:
92:8f:60:00:c8:60:b3:a4:44:a1:08:98:b0:bb:b9:
5d:a8:ea:cc:03:a0:41:a4:5c:8b:81:c1:05:f7:1a:
fc:a8:30:e1:33:f4:85:48:8e:82:fd:e2:37:fb:a9:
d9:12:b0:b8:a5:b0:7c:a0:63:db:bc:aa:c0:c2:2d:
7e:08:be:f0:43:2a:e9:94:08:6b:41:f5:78:3f:81:
b4:e3:c7:1b:78:7e:56:9b:b3:3b:c0:0a:81:84:79:
1e:05:f7:27:00:2a:4b:06:e1:e3:c1:15:ed:32:ac:
4d:2a:28:7d:fc:96:58:17:05:e5:e7:51:23:d9:c5:
90:40:dd:d9:49:50:65:e8:f1:22:de:47:a4:f3:c0:
68:4a:4d:15:11:b3:01:93:41:94:c0:2a:6e:ee:f1:
20:ce:5e:81:c5:d6:fe:65:09:60:98:ac:3d:bd:dc:
8e:1a:1b:5e:90:69:6d:72:0e:05:d2:38:82:e0:0b:
48:10:9d:9e:96:e8:4c:61:b3:bc:4a:74:89:3e:56:
b6:f2:15:b8:21:cd:8d:81:72:ee:30:2d:a4:50:95:
07:22:6b:75:15:6a:1e:81:18:8b:47:aa:1b:d5:0d:
1d:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:16:9D:30:9C:5B:30:C6:F8:25:3F:4B:0D:DF:52:E6:0B:F4:19:FC
X509v3 Authority Key Identifier:
keyid:B1:72:C8:D4:FC:98:6D:EB:9F:CE:B1:F0:D0:CA:E2:7C:1C:31:35:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXLI1PyYbeufzrHw0MrifBwxNcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/bb3b62-3302-45aa-968a-ecbb3fc0a725/1/sXLI1PyYbeufzrHw0MrifBwxNcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/bb3b62-3302-45aa-968a-ecbb3fc0a725/1/sXLI1PyYbeufzrHw0MrifBwxNcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:25:b0:55:6f:1f:71:4e:4d:f1:b1:c3:8f:2e:ab:33:f9:99:
37:37:fe:75:2e:dd:79:d3:f9:04:6d:29:fd:42:63:12:76:34:
97:e9:19:e8:43:05:60:d5:cd:85:b2:1e:4a:81:cc:fe:e0:6a:
f6:6c:e8:03:2a:9a:36:a0:f6:94:17:13:f0:77:a7:7e:39:03:
67:e9:76:fa:d6:ae:c6:ba:a1:75:0d:c8:a2:22:47:19:2a:c7:
ef:8b:20:ab:1a:20:da:eb:82:2b:90:49:e3:a9:c7:2d:73:e9:
e7:94:da:e5:25:2f:65:34:ff:e7:e4:09:9d:f6:e9:30:7d:0d:
9f:60:fa:82:ef:85:ce:bb:aa:39:72:38:bc:27:50:83:34:ab:
10:7b:df:8f:98:53:a3:e2:1e:5e:ce:4f:f6:1f:56:38:c6:68:
2e:69:b0:04:ab:93:80:27:1c:83:13:e0:6b:ec:97:48:57:36:
90:62:f0:6d:0e:86:c2:8a:0d:cd:1a:7f:7a:a9:92:45:44:fe:
f3:b2:6d:c6:e7:98:73:0c:e7:ed:b4:c1:97:70:40:75:99:67:
c6:fc:bf:f4:2c:8e:f5:7b:c7:6b:dc:d8:9b:e5:ef:3c:ec:60:
52:39:d1:19:97:3b:0b:e7:62:c8:17:a7:be:3b:5d:5a:98:a3:
8f:8a:47:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:40:19 2025 by rpki-client