Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/918245-7b50-4952-a3a7-a45916955e6f/1/sXtEkEx2lKVAig0pcsOf8LGwPqU.mft
File: sXtEkEx2lKVAig0pcsOf8LGwPqU.mft (raw, json)
Hash identifier: nrK9dsWNaaPWcSuuriaqQL5rd8UWMC/WUyWzW6aF7g8=
Subject key identifier: D6:0B:09:B4:BF:72:55:2F:B2:20:ED:CD:54:9B:19:1F:33:6E:C2:89
Authority key identifier: B1:7B:44:90:4C:76:94:A5:40:8A:0D:29:72:C3:9F:F0:B1:B0:3E:A5
Certificate issuer: /CN=b17b44904c7694a5408a0d2972c39ff0b1b03ea5
Certificate serial: 0194BC3C12A0518FC5F722A73D457735C6BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXtEkEx2lKVAig0pcsOf8LGwPqU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/918245-7b50-4952-a3a7-a45916955e6f/1/sXtEkEx2lKVAig0pcsOf8LGwPqU.mft
Manifest number: 0C74
Signing time: Fri 31 Jan 2025 12:00:40 +0000
Manifest this update: Fri 31 Jan 2025 12:00:40 +0000
Manifest next update: Sat 01 Feb 2025 12:00:40 +0000
Files and hashes: 1: UDhX8BuvHOYMS5e9vYOFjWjGBYk.roa (hash: C1cyztzqKdd1lIZCQFArU9xrG3gU6hCt1VPEU5YkilM=)
2: sXtEkEx2lKVAig0pcsOf8LGwPqU.crl (hash: oZnP0xXM/f8P+8bqwqLkqZlnk8mY7QJHBlGNTFqDKok=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:12:a0:51:8f:c5:f7:22:a7:3d:45:77:35:c6:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b17b44904c7694a5408a0d2972c39ff0b1b03ea5
Validity
Not Before: Jan 31 12:00:40 2025 GMT
Not After : Feb 1 12:00:40 2025 GMT
Subject: CN=d60b09b4bf72552fb220edcd549b191f336ec289
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f9:1b:5f:6a:9e:b7:d9:36:f4:d6:fb:32:2d:
8d:d2:b0:9e:83:5e:07:3c:0a:f2:7c:8e:c6:e0:b1:
80:c1:f3:32:ea:32:d0:67:fa:0b:7a:df:f1:d2:81:
fe:46:8b:4b:b5:82:38:b6:9d:dc:85:1b:2b:98:f4:
25:2c:59:56:38:1d:61:8d:da:22:db:41:4d:dd:29:
41:14:85:9a:18:13:94:5a:68:b1:25:d4:d6:bc:b2:
c1:ba:12:30:0d:c3:8d:2b:58:a8:de:28:71:33:aa:
5e:e9:7e:ee:bc:b0:f0:ac:ed:4f:5d:ae:c1:c0:9e:
f0:77:fd:4e:56:22:d0:c5:77:e7:14:e1:7a:a2:a3:
aa:76:1b:6e:b1:68:1d:71:32:6c:fc:fb:24:39:a9:
c3:25:41:c2:e9:7c:3e:ac:e2:e4:8f:db:f0:56:0c:
53:1f:bd:35:02:02:a5:03:55:25:a7:8b:0c:d0:2d:
64:40:2b:cb:fd:0c:27:9c:fe:e3:4d:ac:7c:30:c0:
11:30:30:1b:93:60:d1:ca:b4:a1:64:be:57:d8:99:
9b:6b:f6:b3:1a:4e:a7:c2:6e:4f:65:18:c6:f0:e5:
24:ac:26:02:9a:27:1d:e4:0f:7e:d2:9c:23:f8:de:
0c:47:24:97:29:ee:68:a7:95:14:c2:e2:fb:3e:b4:
aa:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:0B:09:B4:BF:72:55:2F:B2:20:ED:CD:54:9B:19:1F:33:6E:C2:89
X509v3 Authority Key Identifier:
keyid:B1:7B:44:90:4C:76:94:A5:40:8A:0D:29:72:C3:9F:F0:B1:B0:3E:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXtEkEx2lKVAig0pcsOf8LGwPqU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/918245-7b50-4952-a3a7-a45916955e6f/1/sXtEkEx2lKVAig0pcsOf8LGwPqU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/918245-7b50-4952-a3a7-a45916955e6f/1/sXtEkEx2lKVAig0pcsOf8LGwPqU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:cf:c5:20:bc:fa:3c:e2:02:39:7c:e6:5b:89:b7:d3:0b:50:
c0:8b:13:41:f1:eb:6d:66:29:b4:d1:bd:19:9a:85:a8:82:8f:
fc:07:6f:f1:92:9a:4a:b1:20:77:da:b4:af:28:9d:7a:a8:52:
38:21:ee:da:2f:19:70:69:c5:03:19:a9:52:3e:94:a5:cd:f5:
3c:8b:fb:29:05:3a:a8:b7:23:aa:7a:49:13:33:b1:16:7f:e4:
bd:de:44:ec:db:7a:83:15:fb:5e:e9:51:68:05:13:ce:32:64:
42:42:fc:49:b1:9f:5a:84:4b:f6:6b:9d:7e:69:7c:df:50:37:
c7:6d:8c:9e:96:30:1b:af:f8:bf:ff:6f:fc:6b:87:bd:35:7f:
91:51:1c:59:12:ba:2a:c1:82:75:ad:3e:34:2f:4c:e6:af:14:
1a:bd:fd:75:3c:b0:3f:13:84:ad:e8:56:59:60:84:b3:79:19:
69:2d:31:6d:3f:9a:d3:0e:5c:38:6e:88:d7:1b:9a:44:9c:7e:
2d:29:30:be:d7:be:37:97:dc:d8:d2:e6:61:e6:0b:ea:14:2c:
e7:30:8b:6a:ff:2e:63:cc:66:09:9a:12:4e:21:f4:b8:4a:49:
25:fe:0d:85:21:5e:0c:00:af:51:54:a3:18:21:63:ba:5f:5b:
12:1e:b0:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:47:17 2025 by rpki-client