Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/ed188a-0fff-4f0f-a26d-251a9c864d26/1/sQvyxqnxpCuKzuASWfkfUUSrivU.mft
File: sQvyxqnxpCuKzuASWfkfUUSrivU.mft (raw, json)
Hash identifier: sjJzggPxFPaZYUo0dJmpU9i32oWZSQ0+mYCz255502o=
Subject key identifier: 03:11:7A:5B:22:BB:59:E2:82:11:73:3F:ED:54:8E:1B:83:99:64:6E
Authority key identifier: B1:0B:F2:C6:A9:F1:A4:2B:8A:CE:E0:12:59:F9:1F:51:44:AB:8A:F5
Certificate issuer: /CN=b10bf2c6a9f1a42b8acee01259f91f5144ab8af5
Certificate serial: 0194BC72ADC681068E476D606428083BC80A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sQvyxqnxpCuKzuASWfkfUUSrivU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/ed188a-0fff-4f0f-a26d-251a9c864d26/1/sQvyxqnxpCuKzuASWfkfUUSrivU.mft
Manifest number: 03C2
Signing time: Fri 31 Jan 2025 13:00:19 +0000
Manifest this update: Fri 31 Jan 2025 13:00:19 +0000
Manifest next update: Sat 01 Feb 2025 13:00:19 +0000
Files and hashes: 1: RagZVp33x_ZhRPfhRcY-ePMpfNA.roa (hash: gMsYucRSntBj1BaVj8EkbP09b3qQ09XAtS6QWD6kZsw=)
2: sQvyxqnxpCuKzuASWfkfUUSrivU.crl (hash: 8e0HuF9Rn+tyBVmOIcWrYsrjRu5QKCg1VUWgkWAqMEc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:ad:c6:81:06:8e:47:6d:60:64:28:08:3b:c8:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b10bf2c6a9f1a42b8acee01259f91f5144ab8af5
Validity
Not Before: Jan 31 13:00:19 2025 GMT
Not After : Feb 1 13:00:19 2025 GMT
Subject: CN=03117a5b22bb59e28211733fed548e1b8399646e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:5a:b5:18:d3:a2:a9:cf:7b:4f:30:cd:e8:1d:
0d:6d:2f:31:76:de:a5:5f:2b:1e:5b:eb:77:0b:de:
02:9f:fe:3b:90:4c:75:b0:9b:66:48:f6:c9:1f:b5:
4b:ce:80:2d:34:3d:b9:7f:a4:dd:cb:27:9a:d5:b0:
d6:2b:b3:05:99:11:10:12:fe:dc:6b:4a:fd:1c:ee:
19:b8:df:98:de:44:54:82:1c:64:8f:00:31:80:0e:
9f:4e:a3:2f:e6:23:a7:b7:0f:3a:20:5e:46:a8:74:
de:ea:d9:79:ba:ca:68:d5:1c:ac:62:17:01:90:5c:
88:16:3b:05:62:22:54:27:8b:8d:52:01:05:ea:a3:
9b:2e:2a:92:81:c8:06:f7:0e:fe:90:4e:fe:56:b9:
f1:0f:80:41:24:36:23:ae:67:fe:36:c7:f1:7a:67:
86:f7:79:e4:18:c0:0e:1b:ea:1d:e0:b2:04:24:43:
2e:98:1e:16:ec:50:a1:f3:de:9e:52:aa:88:49:88:
e8:82:5b:57:9c:34:85:af:d5:42:42:a8:48:60:3d:
c4:22:12:6f:75:d6:d3:77:22:1c:a7:93:21:87:9c:
d5:cc:24:b3:46:ed:13:9f:77:eb:6e:aa:78:f8:85:
61:ba:26:15:de:39:e2:1a:61:88:6e:41:1b:fe:2b:
3e:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:11:7A:5B:22:BB:59:E2:82:11:73:3F:ED:54:8E:1B:83:99:64:6E
X509v3 Authority Key Identifier:
keyid:B1:0B:F2:C6:A9:F1:A4:2B:8A:CE:E0:12:59:F9:1F:51:44:AB:8A:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sQvyxqnxpCuKzuASWfkfUUSrivU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/ed188a-0fff-4f0f-a26d-251a9c864d26/1/sQvyxqnxpCuKzuASWfkfUUSrivU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/ed188a-0fff-4f0f-a26d-251a9c864d26/1/sQvyxqnxpCuKzuASWfkfUUSrivU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:b1:a6:43:5f:73:45:2f:f9:6e:2d:13:9d:ec:19:f9:eb:52:
63:21:11:d6:ce:23:58:a2:3b:ed:b4:86:fa:a9:90:65:b4:21:
18:22:ab:63:9c:32:1c:39:ce:8f:81:d8:66:5b:0c:08:21:0a:
c6:11:09:5f:b5:7b:c4:c4:17:48:fb:c7:ac:cc:5e:a4:bf:eb:
18:03:8c:d9:b9:2d:28:ff:f9:94:90:46:58:b8:cf:13:c9:30:
3c:91:57:a8:2d:6d:88:68:74:86:81:ed:a2:1b:a7:3d:79:e3:
35:57:0f:d9:85:f8:14:7e:b2:3a:2d:f6:5d:13:ca:f9:90:dd:
d6:95:39:43:b5:39:0b:d2:35:b4:a6:66:e7:91:6d:27:a8:7d:
7b:dc:47:b6:38:38:60:61:fc:0b:aa:cd:8a:f7:25:7b:1f:22:
c9:67:ae:4f:62:89:26:bc:a8:6f:e4:14:ef:36:ef:b1:8e:2c:
16:50:10:c5:00:95:37:43:f6:8f:3c:d8:e9:f5:e2:36:b5:5b:
12:c6:08:81:65:58:96:01:8b:fa:47:3d:a5:e9:16:72:f6:bf:
77:be:b0:00:8e:9a:2d:35:bd:d4:e0:f8:4f:22:96:d8:2a:b3:
ed:48:16:a7:22:f4:63:03:c6:27:36:02:b2:db:e9:59:91:98:
e0:e9:82:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:35:43 2025 by rpki-client