Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/c9035d-e57b-43f3-93d1-c27d1a85569b/1/SP7Bry8yGx0bgoeh_QVRPOZuTP0.mft
File: SP7Bry8yGx0bgoeh_QVRPOZuTP0.mft (raw, json)
Hash identifier: YMcKjNB0Fg5gwfjtOXttLFMWyingADeyywp0Zh/VmFY=
Subject key identifier: 60:6B:07:91:D2:9A:B2:9E:00:74:7D:C0:41:D9:C5:B3:43:22:D1:6A
Authority key identifier: 48:FE:C1:AF:2F:32:1B:1D:1B:82:87:A1:FD:05:51:3C:E6:6E:4C:FD
Certificate issuer: /CN=48fec1af2f321b1d1b8287a1fd05513ce66e4cfd
Certificate serial: 0194BD1792C79ADD31631BC1E90016A15BAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SP7Bry8yGx0bgoeh_QVRPOZuTP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/c9035d-e57b-43f3-93d1-c27d1a85569b/1/SP7Bry8yGx0bgoeh_QVRPOZuTP0.mft
Manifest number: 136C
Signing time: Fri 31 Jan 2025 16:00:26 +0000
Manifest this update: Fri 31 Jan 2025 16:00:26 +0000
Manifest next update: Sat 01 Feb 2025 16:00:26 +0000
Files and hashes: 1: 5ZSiu_Jf4uuM2tr9eexam4PdUnQ.roa (hash: 4s92BezBLCr6XDiFpPfCSDr/ke7pRUF4VnT2G98F0hQ=)
2: SP7Bry8yGx0bgoeh_QVRPOZuTP0.crl (hash: vTnrvuvG+dHlSEecBs3gRgkR1euzqk0eegrwGAbv5lw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:92:c7:9a:dd:31:63:1b:c1:e9:00:16:a1:5b:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48fec1af2f321b1d1b8287a1fd05513ce66e4cfd
Validity
Not Before: Jan 31 16:00:26 2025 GMT
Not After : Feb 1 16:00:26 2025 GMT
Subject: CN=606b0791d29ab29e00747dc041d9c5b34322d16a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:2c:b7:61:c8:b8:0c:0f:07:02:39:50:08:a7:
66:99:22:7a:7b:8f:1b:23:d9:b7:66:78:13:f8:b7:
a8:78:7a:a1:ac:8d:a4:19:0a:74:18:71:e3:7a:72:
e6:4d:95:37:ec:8d:29:f0:eb:9c:3d:e3:fc:a8:37:
0a:f5:91:1d:5e:cb:af:18:e7:73:77:7a:f9:54:2d:
de:32:07:f4:d5:22:64:92:48:35:96:6a:ec:ca:e7:
43:9d:36:c1:c1:e3:ec:fa:2f:5f:fb:0b:b1:0d:09:
ae:3f:28:cd:51:17:a3:5d:5a:d1:b4:42:9c:b1:a0:
2e:9e:23:8a:d7:78:63:57:da:78:2a:88:89:70:71:
f6:1c:b2:66:f9:a6:b8:88:0d:90:42:bc:0b:41:f4:
de:49:2a:a9:e2:42:e3:44:a0:37:08:fe:df:0a:73:
ad:7a:6b:9b:1c:a5:b0:af:bb:75:2f:92:f8:55:e6:
48:e4:b2:09:24:8b:02:7a:e7:08:0f:a6:ce:84:29:
27:44:61:ad:5c:6e:9c:51:9b:28:b1:2c:20:d7:06:
b9:7c:da:c1:28:37:90:ae:59:f9:41:b4:2e:74:22:
e5:1e:7f:8b:e9:ce:1f:73:b9:30:e5:80:f8:d2:4c:
fd:ab:f6:fd:eb:30:3e:94:97:e5:3c:aa:2a:d8:14:
7e:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:6B:07:91:D2:9A:B2:9E:00:74:7D:C0:41:D9:C5:B3:43:22:D1:6A
X509v3 Authority Key Identifier:
keyid:48:FE:C1:AF:2F:32:1B:1D:1B:82:87:A1:FD:05:51:3C:E6:6E:4C:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SP7Bry8yGx0bgoeh_QVRPOZuTP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c9035d-e57b-43f3-93d1-c27d1a85569b/1/SP7Bry8yGx0bgoeh_QVRPOZuTP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c9035d-e57b-43f3-93d1-c27d1a85569b/1/SP7Bry8yGx0bgoeh_QVRPOZuTP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:ec:c3:fe:1e:aa:3c:94:3d:17:e7:86:61:88:fc:8b:4a:8b:
c6:16:4d:d0:31:c2:ef:fe:a0:bd:24:d0:a2:1a:71:2e:7d:68:
72:78:20:44:49:f4:8d:a9:07:1f:09:b9:9c:4a:4a:a4:0f:89:
33:88:78:64:c6:77:a9:96:04:2c:ff:52:92:97:0c:c9:0d:63:
19:a2:f8:de:75:73:96:66:49:e5:6f:a7:b2:b3:7e:c8:7f:c6:
3b:e5:41:a4:2d:95:c6:85:91:e7:c0:5c:86:af:4e:fe:e5:90:
90:d0:00:47:9d:95:84:0e:3f:7f:08:2a:e8:2e:6f:61:ca:de:
14:1e:6f:c6:a2:55:31:19:df:ab:8e:1c:7f:d3:8f:f7:f0:84:
ec:a4:a8:3d:a3:b8:cb:39:9d:e3:39:6a:35:5e:e6:4c:f2:a4:
b6:b6:15:e8:5c:11:8b:9c:be:4c:4c:bc:2c:fd:b3:ff:85:bc:
36:34:56:66:06:da:f8:44:d2:97:f6:47:80:51:f6:c6:9b:c2:
1d:b7:46:41:48:c0:88:0f:de:d7:9a:e0:f5:14:37:be:23:27:
f2:7e:d2:fc:75:73:52:45:d7:c9:55:5d:eb:a9:7f:e6:2f:a5:
bc:8e:48:dc:30:df:d0:ba:a1:5f:01:e0:d0:73:ea:f1:ea:a2:
c2:89:87:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:02 2025 by rpki-client