Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4da2ea-abc0-4bf4-9e06-075e83dd3356/1/sJJCWrfWa6txH7qiJ1c3eAeDQVk.mft
File: sJJCWrfWa6txH7qiJ1c3eAeDQVk.mft (raw, json)
Hash identifier: DZYza8qnp3o0JaABKpkiNWXLunkVVXbizZzVlZ860s4=
Subject key identifier: F7:8D:84:DA:A5:0E:45:3E:C3:62:3A:F9:AF:85:E6:14:F2:00:7D:C1
Authority key identifier: B0:92:42:5A:B7:D6:6B:AB:71:1F:BA:A2:27:57:37:78:07:83:41:59
Certificate issuer: /CN=b092425ab7d66bab711fbaa22757377807834159
Certificate serial: 0194BD4E7629707F24530EC3A6E39BBC173D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sJJCWrfWa6txH7qiJ1c3eAeDQVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4da2ea-abc0-4bf4-9e06-075e83dd3356/1/sJJCWrfWa6txH7qiJ1c3eAeDQVk.mft
Manifest number: 0F6C
Signing time: Fri 31 Jan 2025 17:00:23 +0000
Manifest this update: Fri 31 Jan 2025 17:00:23 +0000
Manifest next update: Sat 01 Feb 2025 17:00:23 +0000
Files and hashes: 1: sJJCWrfWa6txH7qiJ1c3eAeDQVk.crl (hash: GiVKOrtUgRv7/kP201s/fDy289WMt8VN00LGYEokrF0=)
2: xpUZ10Vu1qa-MopSRwLh2bfxYj8.roa (hash: NYjloxspB8LHVTP8CX0ABP6kH8QfTSSMPoocxQ4vWls=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:76:29:70:7f:24:53:0e:c3:a6:e3:9b:bc:17:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b092425ab7d66bab711fbaa22757377807834159
Validity
Not Before: Jan 31 17:00:23 2025 GMT
Not After : Feb 1 17:00:23 2025 GMT
Subject: CN=f78d84daa50e453ec3623af9af85e614f2007dc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:73:09:bf:bb:00:ca:99:83:22:aa:d7:d2:70:
92:6c:94:9e:32:b3:c2:1d:36:2f:46:1a:94:83:4a:
44:07:d6:1d:62:41:0a:46:2d:c5:c8:5f:6d:89:ec:
d7:c8:56:bc:5c:81:94:ac:51:00:83:fd:4d:ec:11:
6b:20:70:cc:f1:c1:91:d8:1d:16:f7:71:bf:12:db:
68:6d:3b:8b:8c:30:da:bb:a4:6c:86:f2:4b:41:ca:
a2:09:f7:1f:12:96:b6:07:97:d6:60:0b:cc:b7:fc:
b6:a9:5a:1c:2d:36:0b:5f:9a:4c:e7:53:53:55:d7:
4a:bc:13:d7:09:bc:a5:b7:70:12:e0:1e:99:ec:e6:
5e:f0:77:6b:d7:91:d5:a5:4e:7e:ac:ad:73:3b:a4:
3c:a5:84:95:82:13:58:42:47:c9:26:e4:29:80:37:
c1:72:f0:3c:60:c7:db:ba:9f:f3:f0:b5:fc:be:e0:
c1:83:f9:16:f7:54:a8:ae:5e:b7:fc:b5:97:b8:af:
55:af:5a:9c:b0:0b:5b:1e:f1:78:4b:fd:57:3c:8a:
2b:98:01:fa:6b:41:c6:00:e2:c3:9b:e8:c8:94:ac:
37:d5:21:ea:29:65:11:60:31:b5:60:65:c8:b1:49:
2c:f1:b5:d1:7f:19:c1:a8:0a:70:ca:34:9e:6e:af:
49:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:8D:84:DA:A5:0E:45:3E:C3:62:3A:F9:AF:85:E6:14:F2:00:7D:C1
X509v3 Authority Key Identifier:
keyid:B0:92:42:5A:B7:D6:6B:AB:71:1F:BA:A2:27:57:37:78:07:83:41:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sJJCWrfWa6txH7qiJ1c3eAeDQVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4da2ea-abc0-4bf4-9e06-075e83dd3356/1/sJJCWrfWa6txH7qiJ1c3eAeDQVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4da2ea-abc0-4bf4-9e06-075e83dd3356/1/sJJCWrfWa6txH7qiJ1c3eAeDQVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:58:5e:6e:ed:bd:55:99:5a:2c:fa:fd:19:1c:e8:dd:b7:9a:
2a:bf:af:4b:26:35:2a:6e:db:fd:fd:14:f7:4b:ee:c2:d2:3c:
fa:09:b2:fc:34:56:20:c1:ff:79:2c:54:3e:64:61:6b:24:45:
d3:00:1b:c5:c0:15:1e:85:c5:fe:d0:f0:87:dd:7c:7d:a8:a5:
ac:b6:29:c9:da:d7:ad:05:34:12:3e:42:84:01:8b:c4:0f:9b:
1f:fc:cf:25:47:f8:d1:d3:a7:41:d9:27:98:ec:e3:ea:91:23:
ed:76:69:d4:42:a6:51:dd:fc:07:f5:a7:5b:85:ab:a7:e4:9d:
6b:ee:6e:fc:f8:00:de:cc:a0:fd:7a:4b:c9:8f:fb:58:b4:f5:
a9:9e:81:2b:7b:12:52:4c:b4:9e:e2:ef:42:8f:27:48:2c:0d:
6b:e6:b7:1c:17:ef:96:34:45:4e:59:bf:09:c2:ba:4e:70:6a:
ed:43:ee:5b:69:13:d7:ae:39:e2:b6:28:44:43:bb:64:4f:eb:
4b:61:85:15:e8:b0:8d:17:c8:46:45:4a:88:47:2f:3f:29:b9:
77:68:0e:47:17:f9:08:d2:8a:84:35:53:b7:cd:cf:2b:f9:be:
b7:77:16:8f:6e:fb:23:31:46:5a:68:f7:8c:8c:1b:ae:68:89:
dc:71:96:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:48:50 2025 by rpki-client