Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/73cdd0-0649-4fe9-9971-0be6337bf6b6/1/Sb8yq_d_QSwhD0CYItE5jsO-2ps.mft
File: Sb8yq_d_QSwhD0CYItE5jsO-2ps.mft (raw, json)
Hash identifier: f/RoMASCHtDRXoSn+3GJGphVH2p5lbKBeI3DCh2MxHQ=
Subject key identifier: 9E:A3:EE:46:EC:92:11:B2:F0:90:E0:F5:61:E3:F6:24:8C:5B:2D:21
Authority key identifier: 49:BF:32:AB:F7:7F:41:2C:21:0F:40:98:22:D1:39:8E:C3:BE:DA:9B
Certificate issuer: /CN=49bf32abf77f412c210f409822d1398ec3beda9b
Certificate serial: 0194BD4E6293AA7610CE739163D7156E0CA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sb8yq_d_QSwhD0CYItE5jsO-2ps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/73cdd0-0649-4fe9-9971-0be6337bf6b6/1/Sb8yq_d_QSwhD0CYItE5jsO-2ps.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 17:00:18 +0000
Manifest this update: Fri 31 Jan 2025 17:00:18 +0000
Manifest next update: Sat 01 Feb 2025 17:00:18 +0000
Files and hashes: 1: 5syV7PgPBQbiBbuoFj10-aiKKG0.roa (hash: lK1gem+kZrAq5cKIs+CpHdM5BUtwnIwQ62pWDxE9JKs=)
2: Sb8yq_d_QSwhD0CYItE5jsO-2ps.crl (hash: pQ8W1D+pAzp1m+M7DX5ay7psdZ0apXvVN80mM5ZK0h4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:62:93:aa:76:10:ce:73:91:63:d7:15:6e:0c:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bf32abf77f412c210f409822d1398ec3beda9b
Validity
Not Before: Jan 31 17:00:18 2025 GMT
Not After : Feb 1 17:00:18 2025 GMT
Subject: CN=9ea3ee46ec9211b2f090e0f561e3f6248c5b2d21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:4f:bf:57:57:59:74:b4:dd:9f:f2:4f:50:15:
ca:b2:a2:2a:02:47:1e:cc:d4:43:92:e0:ee:30:7a:
8b:05:df:20:56:3a:02:f8:17:c0:7a:cc:d5:76:0d:
e0:9e:1b:70:11:e6:94:09:57:49:e3:d3:7c:76:02:
14:77:37:15:ae:84:5c:a4:8a:78:89:2e:12:50:dc:
42:60:30:4a:ed:74:fa:33:4f:07:b5:39:91:ca:66:
9c:ac:e5:02:c8:92:36:70:ef:91:32:fe:0a:33:cc:
0a:fe:6b:b2:f7:81:fd:25:37:28:39:5f:ec:4d:f3:
3d:2e:b5:08:02:b2:b7:80:c4:7f:4b:c7:07:ee:50:
8e:3d:96:f0:21:7a:78:01:92:f4:51:6a:b9:8b:72:
dd:a1:f7:51:14:55:f5:ac:13:cb:e3:49:f8:77:ae:
1b:3d:93:d7:0c:6d:eb:07:b8:69:33:1c:1a:ca:c4:
d7:74:75:a7:83:c7:48:a8:ff:e0:77:5e:3e:81:dc:
56:69:30:ce:32:85:74:76:fb:18:21:d0:a4:79:91:
c4:14:c2:74:66:7a:50:01:e4:b8:97:e1:2e:20:63:
0f:1c:6b:40:13:29:a4:33:b4:4e:66:c6:85:38:76:
9a:b7:86:db:25:b3:ff:44:be:94:b4:87:2e:f1:ee:
e2:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:A3:EE:46:EC:92:11:B2:F0:90:E0:F5:61:E3:F6:24:8C:5B:2D:21
X509v3 Authority Key Identifier:
keyid:49:BF:32:AB:F7:7F:41:2C:21:0F:40:98:22:D1:39:8E:C3:BE:DA:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sb8yq_d_QSwhD0CYItE5jsO-2ps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/73cdd0-0649-4fe9-9971-0be6337bf6b6/1/Sb8yq_d_QSwhD0CYItE5jsO-2ps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/73cdd0-0649-4fe9-9971-0be6337bf6b6/1/Sb8yq_d_QSwhD0CYItE5jsO-2ps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:0e:2b:fd:46:a9:74:a2:d6:33:3f:09:0b:4a:d6:63:39:6d:
31:5e:f1:93:20:4d:5b:25:e9:9f:d9:17:31:6b:1b:96:b2:65:
bb:c5:f8:6c:6d:12:cd:46:49:90:95:d1:aa:c4:4c:68:1d:d7:
51:73:40:cb:bc:2c:47:46:d7:ff:10:79:9b:a5:23:5d:90:de:
38:37:2c:04:6a:f7:5d:bf:37:c8:8a:4f:1c:02:a7:d6:dd:ce:
cf:c8:59:3f:f8:4e:3e:13:84:21:59:2d:4e:f5:0f:a8:cc:79:
da:9e:a8:a3:23:25:fd:d8:7a:69:66:51:4c:dd:16:82:e8:77:
08:76:04:6e:70:2d:ca:d6:94:5b:2b:2c:a4:11:0b:bf:fe:d5:
00:d7:b5:1c:7d:be:49:3d:88:b2:78:60:14:88:7a:93:3a:05:
1d:d6:f4:b3:8e:32:e9:4e:3e:8a:56:77:a0:c7:0f:62:2b:80:
ed:63:66:3f:f6:fb:c2:34:9f:ae:a3:9d:75:45:99:80:84:a8:
c6:dc:5f:a6:59:41:62:78:36:59:f7:32:5b:8b:39:6f:a9:eb:
11:9a:88:b8:3e:c5:53:50:dc:7c:77:0d:5f:8b:0b:1b:de:59:
9f:2f:56:a2:ce:c0:e3:40:50:f1:e9:b5:d5:b9:00:21:30:82:
00:69:61:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:49:02 2025 by rpki-client