Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/b7b933-7e80-4b37-a285-130e4dc015ab/1/sDHiyoJMqNVWJAanAhrjwToUJdg.mft
File: sDHiyoJMqNVWJAanAhrjwToUJdg.mft (raw, json)
Hash identifier: U+XdQ7mCgn6oGVQI/PwcrdLZmH8WcXYI/5ui5juMxR0=
Subject key identifier: 01:0D:FB:E8:60:92:EA:6B:60:0D:6A:9A:CF:CE:F2:BC:46:09:4A:2A
Authority key identifier: B0:31:E2:CA:82:4C:A8:D5:56:24:06:A7:02:1A:E3:C1:3A:14:25:D8
Certificate issuer: /CN=b031e2ca824ca8d5562406a7021ae3c13a1425d8
Certificate serial: 0194BCA992BB082915388509AAFF0D6F6A2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sDHiyoJMqNVWJAanAhrjwToUJdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/b7b933-7e80-4b37-a285-130e4dc015ab/1/sDHiyoJMqNVWJAanAhrjwToUJdg.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 14:00:17 +0000
Manifest this update: Fri 31 Jan 2025 14:00:17 +0000
Manifest next update: Sat 01 Feb 2025 14:00:17 +0000
Files and hashes: 1: 81hKxEsM-ATIhZx0nVrrb8xV2ZM.roa (hash: WpRdHBqETycwQ96u5D62eZXgBmAeqYPLVw7BxsplSoc=)
2: YJ0hIC0g4jRwPT2ffsWDri3U1BY.roa (hash: aRSOvWay4BgtDjCfPmINM1fcXP7qlHTJkbgxSvqFhJc=)
3: sDHiyoJMqNVWJAanAhrjwToUJdg.crl (hash: bogQE0AO0kXsmF91K3jmGJb5rjTTFCBey78vBLel49I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:92:bb:08:29:15:38:85:09:aa:ff:0d:6f:6a:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b031e2ca824ca8d5562406a7021ae3c13a1425d8
Validity
Not Before: Jan 31 14:00:17 2025 GMT
Not After : Feb 1 14:00:17 2025 GMT
Subject: CN=010dfbe86092ea6b600d6a9acfcef2bc46094a2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:23:db:2d:aa:30:8d:f8:ff:32:6b:32:b9:b6:
a2:4e:27:0d:f9:43:89:d7:a4:0d:f7:03:cd:0a:b1:
53:ce:0d:fe:da:44:15:0c:f5:0a:7e:ae:b0:83:79:
c1:36:f9:1b:17:f9:a8:87:5d:76:0e:79:f7:fa:31:
8a:dc:af:c7:fb:0f:3a:75:9a:01:47:79:ad:5b:fd:
cc:e5:b8:43:96:bc:b7:d0:d9:ca:62:dd:dc:dc:4c:
30:1a:c3:02:af:f3:99:2d:90:68:44:1d:33:8e:40:
dd:88:7f:58:3b:e6:22:25:4f:45:7b:d7:b1:cc:36:
c7:c5:95:5b:9b:b4:0a:74:e1:27:6f:28:98:d9:b2:
1e:90:d9:e6:09:0f:d5:92:e2:cf:ce:7a:a7:2f:3e:
c7:7e:74:00:9f:0b:ee:e6:ba:6a:64:5f:3c:5d:a0:
a0:6e:e2:7a:9a:6e:2b:a8:c4:cd:28:c0:6c:ea:a0:
e1:2a:27:12:94:3e:0f:64:fa:29:83:b8:35:b3:4b:
85:f5:fa:25:40:3d:f4:52:57:ff:2e:9f:01:db:11:
c5:96:9c:97:e3:ad:35:48:a1:d1:9f:9b:d4:72:37:
4c:ff:bc:22:7e:51:ca:f9:9b:cc:11:32:d6:03:0c:
56:1b:df:a4:d7:74:b8:11:65:fc:44:78:37:76:4b:
51:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:0D:FB:E8:60:92:EA:6B:60:0D:6A:9A:CF:CE:F2:BC:46:09:4A:2A
X509v3 Authority Key Identifier:
keyid:B0:31:E2:CA:82:4C:A8:D5:56:24:06:A7:02:1A:E3:C1:3A:14:25:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sDHiyoJMqNVWJAanAhrjwToUJdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b7b933-7e80-4b37-a285-130e4dc015ab/1/sDHiyoJMqNVWJAanAhrjwToUJdg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b7b933-7e80-4b37-a285-130e4dc015ab/1/sDHiyoJMqNVWJAanAhrjwToUJdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:0e:92:c8:7e:89:1a:72:10:85:7d:25:ab:53:f8:aa:0b:a4:
33:8b:4f:2c:2e:8c:ea:2d:81:ff:ca:c1:53:53:a2:1f:f3:ac:
0c:24:e8:23:d9:8f:d5:ad:7c:bc:05:5a:29:55:28:93:f9:52:
d7:95:e2:88:e7:64:74:06:42:1d:d8:be:92:63:8a:b8:a2:3f:
69:22:91:4c:f7:90:0f:01:02:a5:ec:a3:51:87:b4:58:b0:91:
ca:c7:c0:87:4b:01:e5:a0:95:ee:ca:09:d0:9b:92:61:88:1b:
50:ca:9c:ca:ac:92:48:e7:0b:4c:79:78:a7:21:91:6e:8c:b7:
04:63:38:b9:bf:1e:01:82:0e:83:ca:22:6e:ce:11:38:b2:30:
8a:d0:e3:1c:e0:3a:e1:5c:60:4f:d1:a7:9c:58:d7:cc:e9:7c:
72:38:54:08:f5:a9:b7:e2:31:8e:dc:42:43:c3:02:8b:0b:f6:
96:57:d9:27:d9:8a:1c:37:06:89:4e:1c:88:ce:cb:19:c3:46:
c1:6c:c3:3d:5a:ca:a6:17:95:b8:4a:cd:8f:b0:c2:2b:bc:83:
5f:d7:75:c5:24:1a:60:8a:62:ef:7b:71:30:5d:46:cc:1b:f3:
13:28:3e:b5:9f:55:ca:34:36:3a:32:25:89:97:4b:b8:1b:6f:
42:d4:35:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:05:15 2025 by rpki-client