Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/72281a-d688-415d-a2c6-17f4e0f6cdeb/1/sYfM7EmqX2aqAmSNkbSi7o_3veY.mft
File: sYfM7EmqX2aqAmSNkbSi7o_3veY.mft (raw, json)
Hash identifier: l7blrt2BUkricTz/ukvwvs5VxBj8sevvnsdZ1tYpIHg=
Subject key identifier: 8F:90:80:89:09:95:66:49:28:A6:B0:F0:A3:8B:A4:EE:CB:42:59:14
Authority key identifier: B1:87:CC:EC:49:AA:5F:66:AA:02:64:8D:91:B4:A2:EE:8F:F7:BD:E6
Certificate issuer: /CN=b187ccec49aa5f66aa02648d91b4a2ee8ff7bde6
Certificate serial: 0194BD4E39ADD26E144905D5B10D0FC6AF55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sYfM7EmqX2aqAmSNkbSi7o_3veY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/72281a-d688-415d-a2c6-17f4e0f6cdeb/1/sYfM7EmqX2aqAmSNkbSi7o_3veY.mft
Manifest number: 0159
Signing time: Fri 31 Jan 2025 17:00:07 +0000
Manifest this update: Fri 31 Jan 2025 17:00:07 +0000
Manifest next update: Sat 01 Feb 2025 17:00:07 +0000
Files and hashes: 1: OfdMOcUbbc7oEojb1zo08qkIRuQ.roa (hash: IicrU+y2VcBYbd4QyyTDfZZRjrYA59p1rvePkvFgFRg=)
2: sYfM7EmqX2aqAmSNkbSi7o_3veY.crl (hash: FgIAyHFiRlk77Uef3a1JwwDwXXvxgUWH9ogCyOGxflE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:39:ad:d2:6e:14:49:05:d5:b1:0d:0f:c6:af:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b187ccec49aa5f66aa02648d91b4a2ee8ff7bde6
Validity
Not Before: Jan 31 17:00:07 2025 GMT
Not After : Feb 1 17:00:07 2025 GMT
Subject: CN=8f9080890995664928a6b0f0a38ba4eecb425914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:10:21:1e:0d:e6:d5:7e:86:60:d6:74:05:a6:
74:07:f8:3b:c3:26:f9:ea:e0:56:75:57:7e:d1:43:
4a:c7:45:cb:40:0a:05:3b:de:a5:f4:ca:ef:05:c7:
44:78:65:1d:84:ae:9e:55:fe:11:b8:6f:6e:05:8b:
44:43:9b:86:d3:fb:eb:0b:3e:b6:5c:2c:3e:7e:72:
16:0a:21:01:da:dc:ae:67:3e:e5:26:c8:e1:da:d2:
76:23:70:36:5c:f1:6e:8f:b9:4f:5f:ac:e0:08:da:
e3:93:27:01:2c:ec:60:25:87:79:c1:5a:b5:d4:1a:
4f:41:bb:d2:6c:eb:72:1a:34:c1:e8:27:c0:23:5e:
05:22:bd:26:d0:0d:36:7c:16:af:33:ce:71:4a:ce:
05:f6:81:11:c2:71:7b:d8:a6:32:16:9f:01:69:32:
8d:57:91:05:b8:f0:0e:8c:22:9a:9b:09:02:13:6b:
32:8c:6a:3c:4b:4b:64:dd:95:91:37:34:37:d6:a3:
1a:db:72:9a:11:0b:1c:d8:31:20:4e:b5:68:f0:ce:
f3:3f:88:71:12:40:5f:59:e2:ed:d8:76:06:93:bf:
89:58:86:b0:10:d6:63:83:b0:8f:d7:bf:85:a9:fa:
5c:53:bc:ac:29:9a:05:d5:8c:47:88:d3:af:43:a6:
40:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:90:80:89:09:95:66:49:28:A6:B0:F0:A3:8B:A4:EE:CB:42:59:14
X509v3 Authority Key Identifier:
keyid:B1:87:CC:EC:49:AA:5F:66:AA:02:64:8D:91:B4:A2:EE:8F:F7:BD:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sYfM7EmqX2aqAmSNkbSi7o_3veY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/72281a-d688-415d-a2c6-17f4e0f6cdeb/1/sYfM7EmqX2aqAmSNkbSi7o_3veY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/72281a-d688-415d-a2c6-17f4e0f6cdeb/1/sYfM7EmqX2aqAmSNkbSi7o_3veY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:94:4a:25:9b:77:22:6e:36:2a:e3:62:46:be:2a:c9:d3:b4:
53:a1:95:a7:55:7f:a4:0b:d0:6c:0b:45:01:4c:52:5e:52:d9:
4e:49:1b:e4:6f:2b:b3:46:de:c4:93:05:95:1b:84:9f:3f:1e:
05:b4:a6:71:69:ed:3e:37:cd:48:8e:f1:3e:1b:cb:70:0c:8b:
d3:50:bb:8b:d8:44:9a:89:06:82:dd:6c:b3:c3:28:a1:b4:05:
7a:b5:9c:77:4b:c7:cd:32:84:32:af:27:ea:70:88:93:1b:60:
48:a2:59:ae:28:29:b1:74:39:0e:ba:91:b2:49:0d:00:fe:54:
79:4e:a7:fa:43:39:7b:90:5d:41:be:a1:61:18:07:f3:cf:2f:
f6:22:51:43:45:a6:eb:26:d9:bd:6f:31:0b:5f:e7:6f:4b:ad:
e8:13:e4:60:30:22:c2:af:b0:c2:a5:0b:01:b7:c0:70:eb:4f:
5e:a2:2b:07:61:d3:01:7e:a7:06:70:30:ce:14:0e:08:85:99:
11:c9:40:e4:07:d6:5c:51:34:68:d6:4e:2e:6c:47:26:3f:8e:
92:78:cf:34:af:f8:85:71:89:94:61:94:c8:5b:29:8b:b9:76:
c3:96:53:9a:50:33:9f:bc:a7:15:6a:36:86:81:78:a5:1d:67:
e2:9a:64:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:26 2025 by rpki-client