Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/6c4d62-8daf-4502-b3f7-14b97cfbad47/1/sxagaE0dOLrPQzjCsB2ztBNw60U.mft
File: sxagaE0dOLrPQzjCsB2ztBNw60U.mft (raw, json)
Hash identifier: Lf6jQvnuVmjnf53MUetIrCUsyA7o5P9ibvIdOztBBh8=
Subject key identifier: 6E:36:73:F6:02:C0:86:2A:94:83:E0:39:F9:39:F8:31:21:7A:51:63
Authority key identifier: B3:16:A0:68:4D:1D:38:BA:CF:43:38:C2:B0:1D:B3:B4:13:70:EB:45
Certificate issuer: /CN=b316a0684d1d38bacf4338c2b01db3b41370eb45
Certificate serial: 0194BD859BDCF8BEE79D0CF98BD11BED35DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sxagaE0dOLrPQzjCsB2ztBNw60U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/6c4d62-8daf-4502-b3f7-14b97cfbad47/1/sxagaE0dOLrPQzjCsB2ztBNw60U.mft
Manifest number: 02A9
Signing time: Fri 31 Jan 2025 18:00:37 +0000
Manifest this update: Fri 31 Jan 2025 18:00:37 +0000
Manifest next update: Sat 01 Feb 2025 18:00:37 +0000
Files and hashes: 1: pBOBaEWXkYoN8gJBhZMkD24bH8M.roa (hash: yYFHTbbCS/jQtr+ov28WxXyLXELdV4Do2QZ+inX5RdA=)
2: sxagaE0dOLrPQzjCsB2ztBNw60U.crl (hash: fltFV8STRU6NQ9j/kqKMTKXYRFWCH3gNSIWgFaM0Rwk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:9b:dc:f8:be:e7:9d:0c:f9:8b:d1:1b:ed:35:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b316a0684d1d38bacf4338c2b01db3b41370eb45
Validity
Not Before: Jan 31 18:00:37 2025 GMT
Not After : Feb 1 18:00:37 2025 GMT
Subject: CN=6e3673f602c0862a9483e039f939f831217a5163
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:7a:cf:70:ef:69:52:59:fb:44:22:80:be:37:
8c:eb:70:7a:97:30:2d:35:10:1a:97:3a:5b:6d:e9:
08:97:45:68:0b:47:bf:62:fa:c9:c7:bd:f2:42:b6:
04:75:fe:4b:f9:de:2b:c8:9f:ff:0b:ac:16:0b:84:
21:18:b5:7e:18:68:ef:60:83:84:a5:95:04:80:88:
ea:a7:59:b0:01:d1:c9:a3:8b:61:a5:9a:64:b4:97:
fb:ad:19:23:61:ca:59:6e:94:32:c0:a7:94:c9:d0:
24:f7:30:17:4f:c2:58:6a:97:22:17:a9:dc:e7:d7:
17:cb:4b:90:c5:9a:e7:ba:f7:41:1a:8c:82:75:a2:
70:b2:84:12:5b:3f:b2:24:8b:93:6b:b1:18:cc:9c:
6f:5c:68:87:46:c7:c8:e5:13:26:1e:fc:b8:0a:6e:
c1:55:7a:0e:3b:ad:94:34:6d:b4:3b:78:ab:a9:8a:
b5:45:57:63:22:75:8e:8b:de:41:90:bd:81:b7:f4:
e4:5a:58:61:50:0b:d8:3a:73:9d:a4:c8:2a:f3:82:
c8:14:ea:61:64:ef:8d:fd:81:aa:de:a5:3f:28:79:
ea:65:f3:24:c6:77:15:85:71:54:3f:92:43:7a:9a:
2c:bb:81:9f:50:6c:ea:c1:0c:d6:76:44:ef:fd:4e:
22:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:36:73:F6:02:C0:86:2A:94:83:E0:39:F9:39:F8:31:21:7A:51:63
X509v3 Authority Key Identifier:
keyid:B3:16:A0:68:4D:1D:38:BA:CF:43:38:C2:B0:1D:B3:B4:13:70:EB:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sxagaE0dOLrPQzjCsB2ztBNw60U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/6c4d62-8daf-4502-b3f7-14b97cfbad47/1/sxagaE0dOLrPQzjCsB2ztBNw60U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/6c4d62-8daf-4502-b3f7-14b97cfbad47/1/sxagaE0dOLrPQzjCsB2ztBNw60U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:3a:d9:0f:f4:b2:36:f5:01:d5:e7:d7:a5:cc:c0:46:52:5a:
8a:fd:78:ee:2e:89:4a:d0:d4:dd:a1:cb:48:d4:34:13:73:29:
09:78:ab:de:8b:d8:69:f6:39:c7:53:ed:a3:f9:bd:34:30:62:
63:6c:8e:e0:a0:94:14:40:63:14:aa:93:7c:79:25:07:16:60:
18:6a:3e:02:92:af:f5:d3:d3:72:89:e3:50:70:b0:14:a7:91:
60:57:17:79:54:f9:d6:ab:4f:6b:b2:6e:7e:bb:dd:5a:71:30:
c1:7c:3a:54:fa:22:25:10:66:1c:50:e8:47:0c:f7:94:61:0a:
b7:35:ba:c8:72:0e:f1:63:78:00:82:45:48:5b:60:94:3f:7d:
96:2d:1f:d0:91:0a:c0:b2:36:6f:78:b3:d8:65:fa:89:5c:bc:
29:f5:48:cc:79:12:3e:2b:6b:c1:50:5c:54:ec:62:98:d4:6a:
bc:2e:3e:99:a7:c4:a7:64:6a:48:69:2d:5c:ca:ca:b0:38:ef:
9d:d5:50:5f:6c:a0:22:5e:37:90:ba:5f:8e:d7:90:7a:f9:ff:
06:9b:64:f6:05:30:6f:57:8e:99:e6:4f:b1:83:92:b4:ab:0c:
a7:dc:f0:a7:60:6c:9f:ab:4d:bf:ce:60:7f:cb:35:1d:65:a9:
1e:4b:5a:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:53:28 2025 by rpki-client