Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/7a8e3c-cc02-4255-9892-c47184fdac39/1/SiyGN2LOnZltKrq27eGSnM7ctjI.mft
File: SiyGN2LOnZltKrq27eGSnM7ctjI.mft (raw, json)
Hash identifier: fKV6NrHKQLpo3tcuFfsPqq6Gf1QvaNt9koHirA3IKX0=
Subject key identifier: B9:A8:CD:2E:9E:00:AE:D1:78:62:46:7C:8F:8C:E6:1F:71:13:63:A3
Authority key identifier: 4A:2C:86:37:62:CE:9D:99:6D:2A:BA:B6:ED:E1:92:9C:CE:DC:B6:32
Certificate issuer: /CN=4a2c863762ce9d996d2abab6ede1929ccedcb632
Certificate serial: 0194BBCEFEB0DF2E3C2B5E5DBAEDBDCE4F1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SiyGN2LOnZltKrq27eGSnM7ctjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/7a8e3c-cc02-4255-9892-c47184fdac39/1/SiyGN2LOnZltKrq27eGSnM7ctjI.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 10:01:32 +0000
Manifest this update: Fri 31 Jan 2025 10:01:32 +0000
Manifest next update: Sat 01 Feb 2025 10:01:32 +0000
Files and hashes: 1: HSzy_sdTpMM9eJp_2_sbD1IEYy0.roa (hash: ieQeEh5XwIx3cGbKm9ddEXjqNduJq3qUmYGe9bdZpCY=)
2: SiyGN2LOnZltKrq27eGSnM7ctjI.crl (hash: 8HDWONTr9UsvXqMZ2GotfHku41FQ7k3pV3IuScF43lc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:fe:b0:df:2e:3c:2b:5e:5d:ba:ed:bd:ce:4f:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a2c863762ce9d996d2abab6ede1929ccedcb632
Validity
Not Before: Jan 31 10:01:32 2025 GMT
Not After : Feb 1 10:01:32 2025 GMT
Subject: CN=b9a8cd2e9e00aed17862467c8f8ce61f711363a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ff:1a:11:9d:fe:f6:26:d2:5c:bf:b1:40:73:
ea:02:52:23:42:db:91:9a:92:ee:c1:5b:e7:e0:0f:
67:75:e5:e9:4a:8a:32:b8:a5:dd:fb:fe:b3:8b:4a:
35:c8:f3:ac:bd:a9:8a:13:24:c0:7d:d1:b6:db:27:
0f:af:9d:e9:51:1e:df:8a:6d:6d:94:57:99:c7:fb:
3d:47:06:24:c6:ab:71:28:76:39:8f:a5:b9:4c:43:
7a:08:3e:b5:f7:3e:c7:11:be:ec:4a:31:80:f6:cf:
94:ad:a7:01:e5:50:5f:2b:12:7d:fa:92:4b:2b:04:
d6:17:ae:3b:87:71:5f:85:c0:a9:4c:d4:79:fd:7c:
89:b5:b1:a5:6c:2e:99:d0:a7:c6:ff:2f:86:58:98:
40:62:84:81:9d:4e:7a:05:7b:95:40:86:62:78:5a:
41:4f:05:d0:14:95:a5:9d:a8:3f:90:26:fd:3c:e5:
1c:50:8b:53:04:57:c2:2b:4f:85:0c:ac:1b:a2:37:
a7:59:cc:60:72:0d:e8:6a:d8:3a:9c:97:3b:94:b4:
b9:22:af:bf:7a:55:04:32:9c:00:55:f9:67:26:95:
6d:33:5f:aa:17:fd:98:6a:69:95:f2:9c:c5:df:24:
b6:b7:74:11:e7:09:25:3b:ab:51:ca:a4:b6:01:55:
fe:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:A8:CD:2E:9E:00:AE:D1:78:62:46:7C:8F:8C:E6:1F:71:13:63:A3
X509v3 Authority Key Identifier:
keyid:4A:2C:86:37:62:CE:9D:99:6D:2A:BA:B6:ED:E1:92:9C:CE:DC:B6:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SiyGN2LOnZltKrq27eGSnM7ctjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7a8e3c-cc02-4255-9892-c47184fdac39/1/SiyGN2LOnZltKrq27eGSnM7ctjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7a8e3c-cc02-4255-9892-c47184fdac39/1/SiyGN2LOnZltKrq27eGSnM7ctjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:f7:a3:2e:fb:db:89:87:46:cd:dc:65:ed:05:d8:c8:5d:96:
61:ae:ed:f1:ed:f4:94:5f:25:3c:bc:02:91:43:0c:27:00:db:
0d:c1:b4:55:d0:47:0a:79:3b:83:87:2a:1f:3f:e3:bd:d5:16:
d7:65:70:48:3f:80:aa:03:30:92:38:4d:2e:0f:7d:f8:b8:09:
25:f7:e5:f8:ae:1d:9f:87:a3:66:a5:56:43:a4:48:ae:46:bc:
23:85:3c:de:57:23:06:00:8b:33:15:d6:04:bb:b4:84:3b:fc:
44:51:57:ad:c3:f7:cd:d1:4b:e0:e2:43:d1:11:9c:7e:b5:f2:
7d:cb:07:d1:1e:80:bc:c0:08:79:03:fd:95:3f:c7:8e:9f:31:
6c:f6:eb:71:df:be:37:63:88:9e:1b:cb:66:33:6c:06:cc:6d:
47:03:71:71:72:28:f4:9a:d6:18:00:b3:f1:22:d3:b2:95:9b:
fc:0d:7d:cc:ab:3b:5a:5d:bf:c8:f5:5a:e0:19:3f:cd:3b:45:
4c:0f:ef:57:6b:b3:03:95:a6:b7:6b:fe:17:5d:21:d9:fe:82:
c3:c1:77:01:1c:ea:c7:7f:8b:ef:15:52:c4:39:da:fa:87:eb:
63:34:72:28:8f:bf:86:49:08:55:e3:b8:bc:9a:2c:7f:a4:96:
8f:4c:35:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:50:53 2025 by rpki-client