Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/666e67-1546-413c-b6a1-5a78ba6091c1/1/swQMf0UcYU1-66gsMqOY6H3juMk.mft
File: swQMf0UcYU1-66gsMqOY6H3juMk.mft (raw, json)
Hash identifier: 5potFq+Ja3FNusq5MxkxPhqxMHU6866P8KTKXd33vts=
Subject key identifier: D8:8E:56:6B:52:12:7A:F9:A0:5B:A9:72:8F:7A:FA:B4:23:93:BB:79
Authority key identifier: B3:04:0C:7F:45:1C:61:4D:7E:EB:A8:2C:32:A3:98:E8:7D:E3:B8:C9
Certificate issuer: /CN=b3040c7f451c614d7eeba82c32a398e87de3b8c9
Certificate serial: 0194BCA9DBBD546AE588E3AED8F820C67E4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/swQMf0UcYU1-66gsMqOY6H3juMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/666e67-1546-413c-b6a1-5a78ba6091c1/1/swQMf0UcYU1-66gsMqOY6H3juMk.mft
Manifest number: 0AFA
Signing time: Fri 31 Jan 2025 14:00:35 +0000
Manifest this update: Fri 31 Jan 2025 14:00:35 +0000
Manifest next update: Sat 01 Feb 2025 14:00:35 +0000
Files and hashes: 1: kBpD5JAAu1rNn-aQ8UlFSwDRnx0.roa (hash: T699Qvy1WSC5sYOSIYHzGm20cDSkufPAzYmiL43UtM4=)
2: swQMf0UcYU1-66gsMqOY6H3juMk.crl (hash: acopjEBysSQD73JG1ImJ8l4z3N8/nY5C0PJMP4d+NeY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:db:bd:54:6a:e5:88:e3:ae:d8:f8:20:c6:7e:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3040c7f451c614d7eeba82c32a398e87de3b8c9
Validity
Not Before: Jan 31 14:00:35 2025 GMT
Not After : Feb 1 14:00:35 2025 GMT
Subject: CN=d88e566b52127af9a05ba9728f7afab42393bb79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:32:66:9d:2c:0b:07:40:23:f1:8d:00:79:12:
9a:ab:33:fc:61:9b:80:e4:3d:86:9d:95:41:47:d9:
1d:30:fe:c8:e4:10:14:a3:43:31:12:8e:5d:85:05:
09:fd:87:01:41:27:bb:dc:ff:f9:b4:69:f1:09:36:
89:94:69:60:6a:4d:4c:23:ee:19:9a:90:dc:39:8f:
13:27:5f:7c:2c:a3:47:65:68:68:fe:27:d3:d5:2b:
f9:05:32:51:af:19:ac:74:cb:58:18:86:10:28:d8:
bd:4d:b9:63:3d:68:e2:55:14:0f:62:71:b7:15:59:
89:b3:b2:91:3a:23:bb:ce:a4:92:0f:21:e4:10:bc:
c4:21:32:08:71:ec:c6:cf:74:17:1a:a7:14:c3:49:
ae:20:88:cf:2c:83:f9:d8:28:da:20:a6:63:17:d2:
43:85:ba:ed:aa:d7:ea:91:55:f2:90:b2:9a:52:03:
96:24:28:7a:9b:90:53:e3:d4:6b:75:58:90:13:f1:
ec:df:a1:b4:5d:f9:55:6a:15:02:74:b8:16:86:d4:
0e:a1:b9:47:5d:84:f4:78:6a:d4:39:cd:1b:72:a5:
e8:8d:f6:25:f8:0c:f4:83:72:c2:fa:99:f7:17:03:
fd:89:c9:39:c9:66:d4:56:37:21:21:f6:00:b1:3e:
7e:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:8E:56:6B:52:12:7A:F9:A0:5B:A9:72:8F:7A:FA:B4:23:93:BB:79
X509v3 Authority Key Identifier:
keyid:B3:04:0C:7F:45:1C:61:4D:7E:EB:A8:2C:32:A3:98:E8:7D:E3:B8:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/swQMf0UcYU1-66gsMqOY6H3juMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/666e67-1546-413c-b6a1-5a78ba6091c1/1/swQMf0UcYU1-66gsMqOY6H3juMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/666e67-1546-413c-b6a1-5a78ba6091c1/1/swQMf0UcYU1-66gsMqOY6H3juMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:af:c3:79:ec:e3:0b:ff:eb:98:bb:79:5e:43:3e:5d:a0:8d:
83:04:e6:1c:d1:c8:4f:63:5e:76:5b:40:53:4b:43:71:16:6a:
5d:45:ef:52:35:c3:55:d7:38:bf:f0:d3:df:b1:a1:93:4b:8b:
b2:78:de:91:22:c3:cd:77:44:c6:7b:82:68:60:3a:76:0a:6f:
c6:99:3a:de:0f:a4:f4:db:3b:24:0b:ae:e9:a0:85:05:5c:f8:
0a:36:5f:44:0d:c7:ce:f3:da:ea:5e:3d:6b:0d:f2:9b:a7:9f:
6f:a2:6c:ff:a4:5e:4c:26:da:d5:d6:9b:64:25:5c:51:6c:90:
ab:b5:45:b8:28:3a:d3:6b:dd:37:e2:ed:87:f8:b7:54:55:45:
0c:b6:2c:c0:86:dc:ae:c6:83:75:47:c3:23:46:fb:92:f5:cb:
96:ab:25:5a:6c:64:8a:2b:47:3a:74:0c:8a:91:3a:3f:b0:63:
1f:ad:e2:8e:99:1b:95:ed:e6:f3:eb:5c:c4:13:cf:a0:59:f2:
68:8d:89:25:99:b3:93:61:5a:52:43:31:e0:06:af:4e:e3:64:
9d:0f:41:af:85:ca:0e:fd:98:fe:fc:9f:84:21:53:e2:e1:35:
b8:a0:da:66:d8:98:b8:d4:32:90:9d:1c:3c:7f:b4:a1:43:a1:
3a:42:22:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:32:56 2025 by rpki-client