Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/1d0681-fe20-47a3-94df-5ee8721c1cfc/1/S21-pBAzg38IwoxHQphLgrj0Q98.mft
File: S21-pBAzg38IwoxHQphLgrj0Q98.mft (raw, json)
Hash identifier: 4iPUWPthII34B7Lc/doM88KP5qTwBnXYTsVIasrP7ns=
Subject key identifier: 30:36:4A:B5:7F:49:5F:04:9D:F1:54:48:44:AC:45:31:D7:3F:46:2C
Authority key identifier: 4B:6D:7E:A4:10:33:83:7F:08:C2:8C:47:42:98:4B:82:B8:F4:43:DF
Certificate issuer: /CN=4b6d7ea41033837f08c28c4742984b82b8f443df
Certificate serial: 0194BD1790752549616370E4953FDAAA514A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S21-pBAzg38IwoxHQphLgrj0Q98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/1d0681-fe20-47a3-94df-5ee8721c1cfc/1/S21-pBAzg38IwoxHQphLgrj0Q98.mft
Manifest number: 105B
Signing time: Fri 31 Jan 2025 16:00:25 +0000
Manifest this update: Fri 31 Jan 2025 16:00:25 +0000
Manifest next update: Sat 01 Feb 2025 16:00:25 +0000
Files and hashes: 1: R0-_LF6KU0ufBdJHLr5D2OsCZsM.roa (hash: 9atL02W0zWCgguNUrFQhgbOUdRY0kP2jIZbv6fAlg2k=)
2: S21-pBAzg38IwoxHQphLgrj0Q98.crl (hash: VL1OVMxR0YjMv+Utg3Mtl13nopHYskX91FgOiF2hSZE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:90:75:25:49:61:63:70:e4:95:3f:da:aa:51:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b6d7ea41033837f08c28c4742984b82b8f443df
Validity
Not Before: Jan 31 16:00:25 2025 GMT
Not After : Feb 1 16:00:25 2025 GMT
Subject: CN=30364ab57f495f049df1544844ac4531d73f462c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:8f:c8:e9:38:1e:42:e4:eb:67:b0:64:e2:0a:
ff:f6:ea:72:ba:f0:55:21:31:c0:6f:cc:2c:9a:f8:
4b:9d:e5:9a:09:01:fb:48:eb:47:60:7b:8e:5f:62:
a0:f6:ef:b2:29:73:6f:f8:58:27:7a:cc:9d:da:3b:
0e:19:e1:11:f9:e6:5e:5a:44:61:93:aa:19:64:5d:
8f:44:9d:85:15:6b:a6:6c:a4:e4:53:c6:a7:41:42:
e7:f4:85:30:d9:85:ff:5d:75:34:93:bb:d8:54:de:
a2:33:0e:01:76:0a:23:88:12:53:44:8d:06:11:09:
00:27:a4:f8:6d:28:26:b7:c0:cc:05:d0:e9:4c:d0:
7a:bc:f8:82:a6:1d:1e:67:bf:05:9b:59:f3:92:a3:
01:21:fa:00:97:44:74:fc:45:74:2a:0d:34:42:64:
f6:19:0d:99:05:bc:8f:97:9c:df:c3:7c:c8:83:b7:
27:b9:80:7d:85:cf:e4:fd:51:f3:4c:14:fc:9f:cd:
f6:93:96:41:3c:51:34:39:46:52:7b:01:27:68:3d:
f9:fa:be:7a:9d:7c:3f:45:dc:11:7b:9f:23:8e:43:
bf:9e:f4:b8:7b:90:50:87:99:7c:c3:e6:12:44:04:
65:43:4e:f1:d0:00:f7:f2:2f:5b:19:9e:42:ae:ad:
a8:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:36:4A:B5:7F:49:5F:04:9D:F1:54:48:44:AC:45:31:D7:3F:46:2C
X509v3 Authority Key Identifier:
keyid:4B:6D:7E:A4:10:33:83:7F:08:C2:8C:47:42:98:4B:82:B8:F4:43:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S21-pBAzg38IwoxHQphLgrj0Q98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/1d0681-fe20-47a3-94df-5ee8721c1cfc/1/S21-pBAzg38IwoxHQphLgrj0Q98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/1d0681-fe20-47a3-94df-5ee8721c1cfc/1/S21-pBAzg38IwoxHQphLgrj0Q98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:83:6e:6b:3e:4b:b4:81:60:9e:95:0e:03:3d:f0:ff:9c:35:
25:37:5b:8d:93:d7:aa:15:e6:3e:f6:53:d7:e2:31:3c:9b:07:
66:29:4a:71:e1:66:08:56:7b:89:65:4d:e7:a3:e5:3f:1a:a8:
a5:9b:f6:da:19:f3:a5:e7:fb:8c:c1:3d:f2:1c:9e:0f:bc:3c:
4e:a0:56:99:6e:0e:8e:67:a6:2e:36:eb:71:20:be:8f:a8:f9:
ac:99:27:1d:2a:7e:eb:77:8b:a4:69:1a:f1:b7:60:c3:c1:43:
ed:73:5c:52:db:94:1a:5b:34:74:f6:d1:88:18:92:a5:c3:7b:
d3:bf:7e:dd:29:b8:37:e0:e6:59:96:8a:f8:df:28:8e:9c:35:
43:fc:ff:2b:7c:87:99:0b:c8:60:87:d8:ef:4e:cd:d4:df:c3:
42:5b:7d:c8:5e:3b:55:2f:44:d8:75:fb:16:16:11:31:f6:5e:
d0:67:0d:35:ce:86:0f:de:99:06:e0:27:e7:1a:b8:27:41:e0:
68:48:32:14:66:dc:92:49:c1:82:88:c4:97:75:54:10:b3:d9:
a6:57:72:b9:f1:90:be:0f:66:8f:a2:5d:f9:4e:65:87:05:69:
e6:a8:3a:cf:88:71:2a:1d:37:6a:33:14:75:79:ad:8b:01:7a:
4a:8c:77:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:53 2025 by rpki-client