Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/e8dd6b-4627-4a3c-ba73-a54b869dcd27/1/sffQCUrcmNmwMnIOgePbWqdYHHQ.mft
File: sffQCUrcmNmwMnIOgePbWqdYHHQ.mft (raw, json)
Hash identifier: Zn32yJvVu/rBAZWmnfX5j8cDpYD8bASdiZtsrC76kQ0=
Subject key identifier: BE:7F:30:7E:67:14:43:B0:37:1B:55:1D:DB:E4:48:40:AF:61:FC:32
Authority key identifier: B1:F7:D0:09:4A:DC:98:D9:B0:32:72:0E:81:E3:DB:5A:A7:58:1C:74
Certificate issuer: /CN=b1f7d0094adc98d9b032720e81e3db5aa7581c74
Certificate serial: 0194BD17A46C4D76E3F94FACDDFC33E96668
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sffQCUrcmNmwMnIOgePbWqdYHHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/e8dd6b-4627-4a3c-ba73-a54b869dcd27/1/sffQCUrcmNmwMnIOgePbWqdYHHQ.mft
Manifest number: 09B2
Signing time: Fri 31 Jan 2025 16:00:30 +0000
Manifest this update: Fri 31 Jan 2025 16:00:30 +0000
Manifest next update: Sat 01 Feb 2025 16:00:30 +0000
Files and hashes: 1: sffQCUrcmNmwMnIOgePbWqdYHHQ.crl (hash: oYZFYbNqQgggf9770Oye2y59UgsE6lczUCvandrcMAw=)
2: tkngR5wwQ6qh3iGid8LqkeZO0Sg.roa (hash: XAoboSbFoG6N+OZ4mfDqaXa/N9sFsWbZUGbRzqL5oH0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:a4:6c:4d:76:e3:f9:4f:ac:dd:fc:33:e9:66:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1f7d0094adc98d9b032720e81e3db5aa7581c74
Validity
Not Before: Jan 31 16:00:30 2025 GMT
Not After : Feb 1 16:00:30 2025 GMT
Subject: CN=be7f307e671443b0371b551ddbe44840af61fc32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:0d:bb:76:fb:7a:91:5f:8a:63:ae:9e:53:b3:
03:09:70:c5:4b:53:89:ed:fd:9d:e2:53:22:e4:fe:
88:e2:56:65:e8:48:de:b8:c0:07:f3:88:73:6b:c7:
85:ef:c0:ea:8d:c3:5b:c3:bb:65:78:0d:48:44:6d:
82:71:a8:11:4b:ca:4c:c2:c9:0f:ce:88:ea:b1:fe:
3c:67:1e:fd:02:4f:52:bb:4b:19:47:77:06:c1:dc:
69:25:6d:81:b9:8f:c0:29:23:a8:33:01:68:c8:30:
a3:56:06:0b:8a:95:a5:4c:31:e1:55:68:fd:8e:51:
c0:d4:f2:35:89:ef:61:0c:26:12:ca:80:77:5a:4e:
5e:13:7b:6a:45:c4:eb:06:3e:0c:e0:04:20:7c:71:
05:ba:d4:fb:24:5f:7d:02:81:e9:a3:b9:a9:d3:f6:
5a:8f:b0:ff:b8:23:bf:7c:2c:36:21:80:ab:db:be:
7f:0b:15:0d:57:f2:c3:52:3e:08:6d:53:f5:d4:e8:
f2:53:4f:de:d4:62:af:56:23:5a:18:b1:b9:6e:35:
41:da:9a:23:39:69:71:05:c5:df:1e:c9:a7:7f:c5:
8b:8d:12:5f:8a:15:fd:a3:b7:4d:0a:d4:02:ef:b9:
86:25:02:d4:05:3e:4f:43:ab:ac:46:b9:62:e8:92:
88:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:7F:30:7E:67:14:43:B0:37:1B:55:1D:DB:E4:48:40:AF:61:FC:32
X509v3 Authority Key Identifier:
keyid:B1:F7:D0:09:4A:DC:98:D9:B0:32:72:0E:81:E3:DB:5A:A7:58:1C:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sffQCUrcmNmwMnIOgePbWqdYHHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e8dd6b-4627-4a3c-ba73-a54b869dcd27/1/sffQCUrcmNmwMnIOgePbWqdYHHQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e8dd6b-4627-4a3c-ba73-a54b869dcd27/1/sffQCUrcmNmwMnIOgePbWqdYHHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:b1:7c:aa:69:68:29:95:33:5a:a2:5d:84:81:28:31:ee:ae:
5e:e0:f0:a5:4a:ef:98:e0:85:ef:21:1d:62:00:b0:97:99:8d:
ee:0f:37:7a:5a:fb:ca:9b:f8:e6:32:b5:dc:61:fd:35:d2:12:
b1:65:10:bb:6f:b7:3c:bd:2d:65:8c:72:49:84:2f:d0:4f:46:
5c:13:20:f9:96:6c:62:71:22:47:59:8b:58:b4:8c:d4:04:a9:
ec:24:a6:35:7f:d8:a1:13:f0:b4:53:d5:59:29:72:7b:f2:d4:
05:de:1c:fc:cf:63:8e:21:5b:ae:57:46:60:c0:56:43:0f:c8:
d2:f3:0d:61:1a:57:ac:35:dd:59:b8:0c:0d:5f:7c:0f:d6:2a:
b9:57:da:76:ff:cd:a8:07:30:03:bc:b4:e9:ff:b6:d3:42:e2:
17:f8:3f:eb:bb:6c:03:eb:6c:f7:5a:95:f9:e3:ce:e2:48:7d:
8d:57:c3:c8:ca:6b:6e:39:24:57:23:a1:02:d9:6d:13:67:98:
68:68:e3:57:96:a3:d7:ad:15:05:cc:ee:72:54:a0:ba:a7:b4:
b9:a3:71:16:87:ed:33:06:51:3e:ca:f9:b5:04:90:ba:72:4d:
06:7c:60:f6:30:8a:ad:71:38:0e:6a:0a:71:b2:e9:bf:a1:07:
91:4f:b2:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:48 2025 by rpki-client