Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.mft
File: SornhxUlvi6k0N_9rk86i_83JJY.mft (raw, json)
Hash identifier: 0j35lMvzJTOUG30BEaHGPj9V2oytF8jroHlUUbyPvcQ=
Subject key identifier: 13:45:92:81:3E:C9:07:62:8F:50:DA:B7:A0:C5:68:4F:53:F4:12:48
Authority key identifier: 4A:8A:E7:87:15:25:BE:2E:A4:D0:DF:FD:AE:4F:3A:8B:FF:37:24:96
Certificate issuer: /CN=4a8ae7871525be2ea4d0dffdae4f3a8bff372496
Certificate serial: 0194BC3BC717DD34D6482CDAB4751F8F7590
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SornhxUlvi6k0N_9rk86i_83JJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.mft
Manifest number: 11BB
Signing time: Fri 31 Jan 2025 12:00:21 +0000
Manifest this update: Fri 31 Jan 2025 12:00:21 +0000
Manifest next update: Sat 01 Feb 2025 12:00:21 +0000
Files and hashes: 1: 7IBGwybmMFNsjN85aeiYNOBxF8Y.roa (hash: 7Eu1taimVzljTqOZbddTZkKHAxguwQ1GkxP8e37dpS0=)
2: SornhxUlvi6k0N_9rk86i_83JJY.crl (hash: pJnfJJ0z9/rHb8PcGST8oykZLPvh0nmbXup3qTEQb8A=)
3: vrCnquL3s__Kn2NMqtqwOpjNIg4.roa (hash: 0IwPyrwAs82lGKG6S2evYkZYnCmMy2vXHa9NpVcKusQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:c7:17:dd:34:d6:48:2c:da:b4:75:1f:8f:75:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a8ae7871525be2ea4d0dffdae4f3a8bff372496
Validity
Not Before: Jan 31 12:00:21 2025 GMT
Not After : Feb 1 12:00:21 2025 GMT
Subject: CN=134592813ec907628f50dab7a0c5684f53f41248
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:b6:4f:60:07:77:3f:f4:09:f7:f4:da:56:23:
89:44:63:68:a8:ef:31:3e:4e:00:f9:14:b1:4d:a9:
7a:9a:01:b7:56:7b:83:ec:5d:3c:d5:7e:5a:94:78:
43:8c:5f:da:0f:73:b4:1b:3f:fa:a4:7d:95:f9:4a:
36:96:e3:57:78:90:16:71:77:1e:fa:a3:56:b3:04:
68:59:1b:75:4c:8e:b1:f4:23:e0:7d:85:52:da:6c:
65:2f:57:f9:a6:b7:ad:c2:f6:f6:92:a5:ec:d7:fa:
eb:64:71:4d:17:a0:1f:6f:fe:e8:31:0c:57:da:fd:
f7:76:8a:1d:81:69:3c:5d:51:79:8c:20:36:6d:2f:
4c:1b:54:9f:1f:77:ef:2a:5a:68:51:b4:87:95:0b:
e0:e3:26:6e:f4:5a:dc:e5:c8:4c:62:35:75:69:ec:
54:19:b6:22:f2:83:64:a9:a8:52:07:f5:e0:35:b5:
83:7b:f9:50:72:71:e9:14:3b:f1:27:ba:61:09:39:
40:09:3a:96:77:17:e4:c7:88:04:77:14:06:c1:82:
a4:b1:1d:a2:fb:f3:58:d0:b9:ec:18:89:22:7c:a1:
f9:6e:cf:d3:96:47:bb:80:7e:b9:21:62:7c:84:08:
f4:29:d7:f2:1b:dd:4f:c9:d0:a7:b1:d9:34:20:d4:
6e:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:45:92:81:3E:C9:07:62:8F:50:DA:B7:A0:C5:68:4F:53:F4:12:48
X509v3 Authority Key Identifier:
keyid:4A:8A:E7:87:15:25:BE:2E:A4:D0:DF:FD:AE:4F:3A:8B:FF:37:24:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SornhxUlvi6k0N_9rk86i_83JJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:6c:6e:4d:ce:4f:97:86:a8:9d:b0:4d:40:0f:fe:54:c2:4a:
2a:35:91:0e:50:0b:4e:3c:e2:3d:53:b0:40:4d:7e:83:a5:2c:
9b:47:7f:a3:2e:0a:60:86:59:82:12:e4:64:af:5f:57:f1:5a:
a9:aa:d8:f3:6d:18:f0:2b:70:cf:7f:ba:b1:43:2f:fc:15:2d:
45:d7:ef:d4:3f:ec:9d:d8:93:ba:1a:ab:ac:25:aa:8b:c1:12:
0f:fb:a2:8a:3f:f5:ca:43:e2:2e:3c:2b:fe:1f:8d:ec:1f:26:
b3:35:dd:f0:3b:d6:56:28:d7:b5:d2:e0:82:04:95:af:c5:52:
ca:a4:56:ba:98:4b:03:05:6f:3f:24:92:32:a1:e6:8e:85:b7:
ee:17:d7:f4:60:0b:c4:89:b2:11:a4:5e:f5:9b:b3:74:90:8e:
b8:11:3c:f2:a5:69:f9:02:22:f0:94:f3:c3:60:20:33:f8:89:
b6:86:e7:03:4e:0e:b8:dc:75:e6:d2:46:4e:b0:75:29:44:6d:
89:8c:df:ad:cc:f4:83:85:93:b2:0a:29:f4:57:1d:93:c3:88:
0c:50:06:d4:a9:86:e1:7b:31:55:f8:83:d0:1d:be:6b:43:09:
24:43:08:92:19:53:14:08:ea:1d:e5:e4:f7:30:7a:8c:c0:13:
1a:ae:34:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:32 2025 by rpki-client