Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/4af898-21cb-4d8d-a63f-1dc967d56409/1/SVbzCE2TEO-hvAfvMfk0spQfED4.mft
File: SVbzCE2TEO-hvAfvMfk0spQfED4.mft (raw, json)
Hash identifier: 5N4KakGZo0cQ9jQZEDbZ7+SjqVWaCRR/B9kKD2OiS/c=
Subject key identifier: A8:9C:D0:8D:38:BA:83:CE:64:BC:8F:02:7E:06:AE:5B:98:C0:FD:36
Authority key identifier: 49:56:F3:08:4D:93:10:EF:A1:BC:07:EF:31:F9:34:B2:94:1F:10:3E
Certificate issuer: /CN=4956f3084d9310efa1bc07ef31f934b2941f103e
Certificate serial: 0194BD85896DE5EA800B5CB38A3E7C6ECE42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SVbzCE2TEO-hvAfvMfk0spQfED4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/4af898-21cb-4d8d-a63f-1dc967d56409/1/SVbzCE2TEO-hvAfvMfk0spQfED4.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 18:00:32 +0000
Manifest this update: Fri 31 Jan 2025 18:00:32 +0000
Manifest next update: Sat 01 Feb 2025 18:00:32 +0000
Files and hashes: 1: QocjuYoGfozpr0QiTXkGPfsUrcg.roa (hash: Y8oC4kwoV9mXXZSXGd1lAHQDlPdz5kxQi4KnTi7EYOM=)
2: SVbzCE2TEO-hvAfvMfk0spQfED4.crl (hash: NMdHQQY2jq6N92/qoM2tIX4Ne+b0HtPiSYuBmYGI50E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:89:6d:e5:ea:80:0b:5c:b3:8a:3e:7c:6e:ce:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4956f3084d9310efa1bc07ef31f934b2941f103e
Validity
Not Before: Jan 31 18:00:32 2025 GMT
Not After : Feb 1 18:00:32 2025 GMT
Subject: CN=a89cd08d38ba83ce64bc8f027e06ae5b98c0fd36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c7:7d:df:24:7a:e1:96:cd:3d:c9:7f:9c:2d:
ee:d3:0c:85:37:10:65:a1:81:33:0a:03:28:31:0c:
33:e3:0a:3d:ae:fb:4f:41:91:70:ac:05:da:a0:88:
67:4b:63:c7:dc:9f:d1:3d:6e:e0:bb:17:c7:a3:fb:
48:ef:e2:f6:da:88:8a:ad:e9:a5:53:d6:d1:2b:57:
d8:03:7b:a6:e4:95:23:96:a5:79:77:ff:79:58:da:
7c:85:8c:79:65:6c:97:bf:0e:94:ab:30:52:5c:9a:
f7:aa:7d:43:e8:1a:50:51:a7:7e:da:f7:a2:45:04:
b4:ea:bd:d6:de:83:9f:7c:e3:3e:15:dd:eb:c2:eb:
c0:49:f8:ca:11:f1:ef:1d:43:47:9b:0f:d2:d3:b6:
67:07:7f:7e:e0:f1:6e:c1:36:40:ed:fd:54:3b:ba:
9e:68:88:47:f9:cb:07:2b:d1:3d:58:d4:c2:24:7b:
8f:24:da:1a:83:fa:72:cf:94:89:f8:a2:fb:6c:cc:
27:15:aa:47:1c:95:dc:01:24:10:8b:87:8a:86:bc:
4a:42:dc:7c:59:5a:09:88:07:3b:27:68:10:8e:bb:
9e:78:0f:55:9f:a1:6b:80:7c:5a:35:49:5c:b2:7f:
2e:46:84:31:7a:37:7e:5b:a2:c8:5d:d1:07:20:f5:
fa:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:9C:D0:8D:38:BA:83:CE:64:BC:8F:02:7E:06:AE:5B:98:C0:FD:36
X509v3 Authority Key Identifier:
keyid:49:56:F3:08:4D:93:10:EF:A1:BC:07:EF:31:F9:34:B2:94:1F:10:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SVbzCE2TEO-hvAfvMfk0spQfED4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/4af898-21cb-4d8d-a63f-1dc967d56409/1/SVbzCE2TEO-hvAfvMfk0spQfED4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/4af898-21cb-4d8d-a63f-1dc967d56409/1/SVbzCE2TEO-hvAfvMfk0spQfED4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:93:7f:83:c6:3d:77:54:43:f8:0b:a4:45:41:7f:3f:ec:f0:
ac:b0:0d:34:6d:60:69:7d:13:d0:18:ca:3f:23:4e:a2:ed:8b:
0d:72:f8:69:af:e5:18:13:0d:16:17:03:bc:8a:52:7b:c5:88:
6c:dc:9d:14:f7:a9:77:96:30:50:33:3d:6d:87:55:cc:4f:60:
bd:a3:1f:b1:ff:df:c0:54:6f:90:92:0c:05:56:1a:9c:c1:4a:
14:eb:9b:da:3f:05:bf:e7:e5:83:80:d9:f2:dc:bc:64:a4:46:
82:0e:3d:b4:9d:be:81:ad:08:be:fd:e9:8f:65:ad:66:15:da:
3f:99:cb:11:28:53:65:82:b2:39:df:2c:54:82:91:26:90:cd:
a4:2c:1c:c5:9f:70:e2:7c:4d:c8:03:11:9c:7b:2c:b7:68:08:
b3:40:60:e5:2f:2c:5c:dc:fe:f9:c9:5c:6d:a8:b6:77:e3:5f:
19:e3:25:c0:17:0e:7e:98:31:ae:07:ec:6c:e3:91:8d:9a:c7:
60:f9:71:a1:86:a4:4b:12:0f:ac:53:9f:21:bc:ac:8b:10:fc:
9e:ff:97:5a:e9:ca:7a:93:f0:b3:f6:93:dd:b0:3b:88:a1:8f:
5c:ba:51:bc:23:f2:5c:1d:9e:fd:e3:41:e0:c5:0f:60:e1:8b:
a4:22:f4:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 13:22:43 2025 by rpki-client