Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/7b67fb-c8ba-462c-b064-7c65aec6f2bd/1/SqXjXAXCq1S-dYtshnGGzuFZvWM.mft
File: SqXjXAXCq1S-dYtshnGGzuFZvWM.mft (raw, json)
Hash identifier: vAq4BRdubKui3Hni7pfcm+ziug2LwXiPjeiaZQYFJvw=
Subject key identifier: 96:5A:C4:C9:0E:79:F0:CF:21:23:13:10:E7:0A:81:6C:21:F0:7D:33
Authority key identifier: 4A:A5:E3:5C:05:C2:AB:54:BE:75:8B:6C:86:71:86:CE:E1:59:BD:63
Certificate issuer: /CN=4aa5e35c05c2ab54be758b6c867186cee159bd63
Certificate serial: 0194BC72B44507F87E69F8146112B0211324
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SqXjXAXCq1S-dYtshnGGzuFZvWM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/7b67fb-c8ba-462c-b064-7c65aec6f2bd/1/SqXjXAXCq1S-dYtshnGGzuFZvWM.mft
Manifest number: 0E25
Signing time: Fri 31 Jan 2025 13:00:21 +0000
Manifest this update: Fri 31 Jan 2025 13:00:21 +0000
Manifest next update: Sat 01 Feb 2025 13:00:21 +0000
Files and hashes: 1: 0giOT2-cspinjb0AYnQ0xR7oe3s.roa (hash: JsKfvRyfvFNiFnymkkC31pksnK2WhZYhTKOkR+nS9d4=)
2: SqXjXAXCq1S-dYtshnGGzuFZvWM.crl (hash: v0qTNDcZggE6FFLZt8f87vIv04T7tjOqq3Fu7CA2jwI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:b4:45:07:f8:7e:69:f8:14:61:12:b0:21:13:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4aa5e35c05c2ab54be758b6c867186cee159bd63
Validity
Not Before: Jan 31 13:00:21 2025 GMT
Not After : Feb 1 13:00:21 2025 GMT
Subject: CN=965ac4c90e79f0cf21231310e70a816c21f07d33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:fd:1c:b8:5a:be:8e:c6:0a:de:37:77:c5:92:
93:9d:28:b6:27:37:01:d8:75:32:5f:2f:fc:20:fb:
da:36:f5:e0:e3:bc:ab:f7:46:da:dc:cc:0c:76:82:
36:2f:17:88:b6:d8:77:ad:35:b4:7c:84:7f:9c:b6:
6e:c2:9e:2b:7f:1d:69:60:11:a9:be:32:cb:04:b8:
f8:4d:23:0b:df:ea:c7:58:5d:b3:e1:02:ca:0a:76:
28:7b:7f:d7:b1:2d:42:fa:c1:da:52:6c:ee:25:7b:
f2:1a:74:3c:1c:49:16:18:8c:10:79:7a:8d:fd:0f:
b2:e2:a3:65:d1:8b:4e:c9:f9:7c:89:6e:f0:e2:27:
8f:bb:b0:3e:50:68:a3:c0:1d:c7:28:53:2b:6a:f4:
84:92:ac:9d:90:1e:18:a5:2c:74:36:f3:ea:3b:3d:
5e:d7:65:60:34:f4:07:9c:b4:a6:33:ac:67:76:43:
dd:88:54:e1:36:67:ae:1f:dd:25:7c:d1:75:55:d5:
e4:2c:c0:0e:e2:c5:07:59:4d:ba:49:02:2d:23:06:
a1:8c:40:b4:e0:80:dd:5e:be:fa:83:ea:49:8d:55:
25:11:f0:ac:3a:6d:bb:d3:64:0a:37:c5:fa:8d:74:
61:6b:ad:cd:d8:ae:23:c6:c6:10:66:d6:96:33:fc:
90:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:5A:C4:C9:0E:79:F0:CF:21:23:13:10:E7:0A:81:6C:21:F0:7D:33
X509v3 Authority Key Identifier:
keyid:4A:A5:E3:5C:05:C2:AB:54:BE:75:8B:6C:86:71:86:CE:E1:59:BD:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SqXjXAXCq1S-dYtshnGGzuFZvWM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/7b67fb-c8ba-462c-b064-7c65aec6f2bd/1/SqXjXAXCq1S-dYtshnGGzuFZvWM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/7b67fb-c8ba-462c-b064-7c65aec6f2bd/1/SqXjXAXCq1S-dYtshnGGzuFZvWM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:43:3f:52:23:e7:79:a5:3b:28:01:31:84:0d:ed:55:02:22:
66:8b:76:42:c9:e9:e0:db:bc:32:4f:d4:c5:f4:f6:94:55:1e:
8a:ae:b9:c5:af:a1:3a:16:87:de:dd:a7:7e:4d:18:41:ad:56:
32:19:3f:7d:08:04:da:7a:b3:1e:ae:82:77:7d:66:ec:ab:af:
2b:50:ca:27:a3:67:ba:ee:8a:b8:36:5e:1f:b5:87:aa:db:00:
ae:16:44:3f:9c:01:8d:13:91:c1:31:e1:6a:7a:c2:56:30:8c:
7f:a1:f5:1a:d1:a1:d7:a2:3c:94:bd:13:a0:a6:61:96:b3:26:
d2:f3:0e:c0:40:55:25:d6:18:b1:32:23:b0:bf:9d:5f:78:e1:
f9:96:14:fb:e2:1d:17:6e:c0:34:dd:4a:22:7f:a7:f4:0c:79:
c5:92:e1:fd:b3:71:62:50:b5:bc:3c:f6:6b:cf:05:af:05:a8:
ca:36:00:84:ac:ce:c7:b2:f4:dd:ff:64:4c:dc:be:92:3f:a5:
53:07:5e:74:4d:96:d8:9f:78:e6:6b:0a:64:6a:df:64:ea:bd:
68:16:9a:f1:59:0d:80:45:81:a7:ea:11:8b:c8:72:c3:be:3b:
63:9e:7f:07:3a:32:f8:fd:1f:ac:97:88:90:e8:fa:3e:69:53:
d4:b0:74:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:20:14 2025 by rpki-client