Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/c59162-7bd1-4b8a-a9e3-21ff1120fb72/1/sC8MKipRJ1vuJJOlZW7PG2EvEiY.mft
File: sC8MKipRJ1vuJJOlZW7PG2EvEiY.mft (raw, json)
Hash identifier: +N+ZdGZVMWZeUuKWJrf9stXz0unQ4fscMxwUZMUVny8=
Subject key identifier: DB:44:44:B7:E6:85:5A:45:97:85:A8:0D:6A:B6:44:CB:27:0B:B2:13
Authority key identifier: B0:2F:0C:2A:2A:51:27:5B:EE:24:93:A5:65:6E:CF:1B:61:2F:12:26
Certificate issuer: /CN=b02f0c2a2a51275bee2493a5656ecf1b612f1226
Certificate serial: 0194BD17C64BFF23CBEEC7D467360ED38FBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sC8MKipRJ1vuJJOlZW7PG2EvEiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/c59162-7bd1-4b8a-a9e3-21ff1120fb72/1/sC8MKipRJ1vuJJOlZW7PG2EvEiY.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 16:00:39 +0000
Manifest this update: Fri 31 Jan 2025 16:00:39 +0000
Manifest next update: Sat 01 Feb 2025 16:00:39 +0000
Files and hashes: 1: AUWnKCughTUHbSmmjTVn8vVnF6E.roa (hash: m1cgzZ28NmXLcFryBxDw9CaAhbB6KXsR5pNMz3ZSd1A=)
2: sC8MKipRJ1vuJJOlZW7PG2EvEiY.crl (hash: dFAsaV7OdApArJb77fhdRpuhTlJivZE0y7TzAlwX354=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:c6:4b:ff:23:cb:ee:c7:d4:67:36:0e:d3:8f:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b02f0c2a2a51275bee2493a5656ecf1b612f1226
Validity
Not Before: Jan 31 16:00:39 2025 GMT
Not After : Feb 1 16:00:39 2025 GMT
Subject: CN=db4444b7e6855a459785a80d6ab644cb270bb213
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:1c:66:7c:af:31:b2:bc:fc:82:84:69:01:a5:
4f:5d:85:84:00:97:ac:9d:68:7d:b4:e7:08:8c:44:
65:fa:f8:c6:af:52:b6:9f:1c:e8:8d:a4:67:28:ba:
d7:36:f5:84:bc:be:3e:8a:3a:fe:04:27:d6:5d:e0:
a0:9b:8f:4f:b9:20:b6:9f:a9:14:3a:8f:f1:0a:37:
60:fa:fa:48:7b:c8:3e:43:d7:af:4f:3e:23:97:51:
69:f3:de:89:51:53:69:49:68:5d:e8:d9:8c:68:1d:
94:60:89:e5:8a:53:ef:25:49:f3:da:6d:60:77:7e:
f8:e1:18:21:10:03:8b:05:f8:a5:6a:a5:d3:31:2c:
b8:b0:d8:52:9f:40:f1:d0:df:07:be:a6:34:34:8e:
00:75:bd:22:c5:ae:9f:96:ed:55:27:91:a8:7b:62:
47:34:6e:d5:70:ee:f7:d9:3a:04:45:a0:25:c6:b2:
0d:1e:ae:b7:ec:69:ef:18:98:b8:f5:6e:db:d8:b4:
fa:63:ad:10:2a:37:66:60:cf:7b:73:2a:c8:d8:74:
c0:c9:33:f1:71:be:61:0c:6e:e7:58:5f:a0:eb:0b:
7c:e0:25:b1:20:5b:6d:92:19:8d:c7:ee:d3:81:f7:
81:6e:7a:eb:b1:71:e5:be:97:bf:0a:e4:38:c7:72:
21:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:44:44:B7:E6:85:5A:45:97:85:A8:0D:6A:B6:44:CB:27:0B:B2:13
X509v3 Authority Key Identifier:
keyid:B0:2F:0C:2A:2A:51:27:5B:EE:24:93:A5:65:6E:CF:1B:61:2F:12:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sC8MKipRJ1vuJJOlZW7PG2EvEiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c59162-7bd1-4b8a-a9e3-21ff1120fb72/1/sC8MKipRJ1vuJJOlZW7PG2EvEiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c59162-7bd1-4b8a-a9e3-21ff1120fb72/1/sC8MKipRJ1vuJJOlZW7PG2EvEiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:da:27:4f:92:4d:9b:90:62:46:e0:ca:00:5d:43:21:84:70:
63:ce:51:dd:92:56:ac:b2:95:50:94:b7:07:e9:1c:a8:63:d6:
b1:2e:bb:cd:52:2b:2a:b4:de:ae:c0:77:31:84:92:bf:7e:42:
b5:60:a3:a3:fa:04:f1:8d:f5:8b:41:3b:fd:3c:e8:a8:ec:da:
43:28:1e:d9:a3:c7:c9:06:4b:b3:3e:e8:59:c0:fc:fa:c2:24:
07:ac:a0:03:ac:5e:c1:bd:cd:47:6a:c0:f4:8f:55:26:04:b7:
b0:f3:d5:b7:2e:f5:a9:64:f6:3a:54:6c:b5:d4:73:62:98:33:
47:b7:31:81:95:6d:ac:8c:d6:a7:ac:e4:8f:e8:8f:84:49:21:
d4:80:27:5f:f1:72:92:bd:d4:f2:d3:e0:0e:e0:10:06:cc:ff:
7b:53:cd:d8:d9:ac:1c:ec:98:0b:0c:c4:82:83:cc:14:34:8d:
10:9a:da:f1:b4:66:5b:5d:e1:b5:6b:81:03:ec:c4:d1:83:76:
1c:65:b4:c0:80:55:40:ac:2d:42:36:27:83:41:94:5a:52:0c:
aa:9c:12:2e:a2:5f:1f:6f:13:79:7d:e5:66:a9:9b:99:95:28:
cd:d2:c6:97:48:af:e6:80:f5:04:a9:ec:de:66:1f:85:20:de:
19:eb:ae:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:10:53 2025 by rpki-client