Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/880eb2-fa65-47ca-8a00-6480c3d1f4e4/1/sgkwhUDE35ubt9Yyf6e11JAIBow.mft
File: sgkwhUDE35ubt9Yyf6e11JAIBow.mft (raw, json)
Hash identifier: RvkLr1yCED2VpgXjXhqrn1zphAi7Rgm6j5RyZiPeXhU=
Subject key identifier: B4:84:CA:CB:E1:CC:F9:CC:31:01:A7:24:BB:E6:70:34:58:64:DD:BC
Authority key identifier: B2:09:30:85:40:C4:DF:9B:9B:B7:D6:32:7F:A7:B5:D4:90:08:06:8C
Certificate issuer: /CN=b209308540c4df9b9bb7d6327fa7b5d49008068c
Certificate serial: 0194BC729986CAC7231B7450E916D70DD685
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sgkwhUDE35ubt9Yyf6e11JAIBow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/880eb2-fa65-47ca-8a00-6480c3d1f4e4/1/sgkwhUDE35ubt9Yyf6e11JAIBow.mft
Manifest number: 0147
Signing time: Fri 31 Jan 2025 13:00:14 +0000
Manifest this update: Fri 31 Jan 2025 13:00:14 +0000
Manifest next update: Sat 01 Feb 2025 13:00:14 +0000
Files and hashes: 1: Pk9eK0EWj_J0N4M2olPrrknNWdE.roa (hash: t3sUBm44iTOEND1bJO1gqiKeF1Mf+HEnp3wUiEC+pEM=)
2: qVO6LhE7z2bZkoKlkX0beS7hTAc.roa (hash: XTXUYf4gL001nX+kLZ++ZcjMPFy332S2u/yOlN4Emdo=)
3: sgkwhUDE35ubt9Yyf6e11JAIBow.crl (hash: 72EM2nBhg+XbzSHoQjzr5HUTeaCynqoIOheyddeppmc=)
4: yCR309Dt0TwXyNVWmsfwNsNe7Os.roa (hash: IwvKObmf26TGzZOfLi3kzJh/z23tGzOx2kCPIPNBtoE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:99:86:ca:c7:23:1b:74:50:e9:16:d7:0d:d6:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b209308540c4df9b9bb7d6327fa7b5d49008068c
Validity
Not Before: Jan 31 13:00:14 2025 GMT
Not After : Feb 1 13:00:14 2025 GMT
Subject: CN=b484cacbe1ccf9cc3101a724bbe670345864ddbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:f0:0f:a9:2a:62:46:24:f9:fe:e1:df:81:c7:
19:f9:2f:58:6d:c5:a1:cb:75:43:a6:42:90:34:c1:
3d:f3:9f:18:51:d8:4e:b5:52:ef:b1:cf:98:e0:9a:
cf:95:a9:6c:b8:e1:54:00:2a:fd:16:7d:13:e5:d6:
88:82:74:be:f6:96:a6:63:ec:21:a5:38:6e:d9:1b:
f5:f0:f6:7c:c8:f7:70:26:11:37:66:ed:f3:b3:17:
5c:70:b9:e5:0d:f0:86:7f:fd:e2:f2:44:18:38:9b:
37:d2:30:37:3d:c9:9f:14:49:a2:ac:88:3f:ea:2b:
11:eb:c1:2c:69:28:6d:22:f9:64:25:70:2b:f3:45:
3e:35:61:b1:b0:6a:d4:c3:9e:9b:ba:eb:dd:1b:1c:
24:98:40:b9:5c:1c:d8:f7:9c:75:fb:8d:de:6f:87:
5c:3f:b0:b0:77:85:2b:ba:7b:ff:89:6b:c5:65:c0:
e1:6c:9a:9f:c0:ec:f5:15:53:1d:74:28:ce:ec:40:
4f:6a:bd:80:90:80:d8:bd:dc:59:cd:03:8f:24:25:
28:a7:17:34:e2:7c:13:af:10:3a:54:e3:d7:15:bc:
4d:74:64:26:52:e3:6c:21:c0:00:4f:27:33:3c:c4:
b4:8c:73:99:34:b6:7f:08:5e:01:2b:37:90:f7:7e:
d0:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:84:CA:CB:E1:CC:F9:CC:31:01:A7:24:BB:E6:70:34:58:64:DD:BC
X509v3 Authority Key Identifier:
keyid:B2:09:30:85:40:C4:DF:9B:9B:B7:D6:32:7F:A7:B5:D4:90:08:06:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sgkwhUDE35ubt9Yyf6e11JAIBow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/880eb2-fa65-47ca-8a00-6480c3d1f4e4/1/sgkwhUDE35ubt9Yyf6e11JAIBow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/880eb2-fa65-47ca-8a00-6480c3d1f4e4/1/sgkwhUDE35ubt9Yyf6e11JAIBow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:ae:52:fb:30:f0:06:53:fa:6f:71:90:89:ce:5a:aa:25:a7:
69:6a:94:08:a6:74:9a:14:e2:f6:85:f4:99:3e:7f:24:a6:07:
26:4f:25:fd:61:52:bb:76:c0:72:d1:03:90:08:60:4c:93:fc:
b1:41:c2:a4:c6:84:8c:91:d1:8e:64:71:a7:0c:71:e3:02:96:
5c:b1:aa:75:f6:92:e1:a0:d2:11:31:4a:33:ad:c0:8e:68:e2:
bb:17:32:9e:55:d5:9b:48:f3:ef:96:0c:4f:c5:57:6c:06:68:
62:c8:22:4c:56:28:74:90:87:82:f0:d9:97:d4:f2:d8:32:c4:
d3:08:08:bb:b5:26:c0:6a:25:c5:4c:10:0c:3e:d7:44:0f:60:
7e:bf:f8:ed:d6:1a:34:3d:3a:c5:2b:aa:82:96:e8:2e:66:27:
eb:e7:6d:b9:9e:c6:59:98:1c:40:b2:d6:c8:81:8b:db:1a:09:
14:4f:68:2c:b4:2f:5e:ee:e1:c3:ac:f8:e8:a2:9c:b8:f6:84:
dd:3e:96:db:45:7e:f5:29:ab:32:75:c1:8e:8c:de:f9:96:e6:
1a:e0:02:da:21:dc:5d:34:ca:dc:28:83:22:01:d9:19:d5:8a:
e2:bb:c3:65:6a:27:b1:11:28:01:bd:0b:e2:a0:e9:11:19:52:
84:64:71:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:15:51 2025 by rpki-client