Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/475e19-9fbf-4d43-9285-ec5b325c6eb2/1/snNZg9-yJ6JG35iHbsnRr5Hz13k.mft
File: snNZg9-yJ6JG35iHbsnRr5Hz13k.mft (raw, json)
Hash identifier: 93y9hUK3XQR7ypHyJgCpfl3+j4mmtIIfL7pYsZO7TFQ=
Subject key identifier: BC:FA:03:5F:C2:EB:BD:C5:A9:17:7D:9E:3C:92:EC:C4:D1:7D:A4:72
Authority key identifier: B2:73:59:83:DF:B2:27:A2:46:DF:98:87:6E:C9:D1:AF:91:F3:D7:79
Certificate issuer: /CN=b2735983dfb227a246df98876ec9d1af91f3d779
Certificate serial: 0194BC3BFE47A7AB4D5BCBC586FFD3C43780
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/snNZg9-yJ6JG35iHbsnRr5Hz13k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/475e19-9fbf-4d43-9285-ec5b325c6eb2/1/snNZg9-yJ6JG35iHbsnRr5Hz13k.mft
Manifest number: 0C5D
Signing time: Fri 31 Jan 2025 12:00:35 +0000
Manifest this update: Fri 31 Jan 2025 12:00:35 +0000
Manifest next update: Sat 01 Feb 2025 12:00:35 +0000
Files and hashes: 1: HRiBqkMm3jYdrvB2_suIlLpeJLU.roa (hash: thuo/2wKh04k5fV07y+BJSuu+CRS6TthbxD3yT9m+AM=)
2: snNZg9-yJ6JG35iHbsnRr5Hz13k.crl (hash: YMvCl8XmAzG/U9nuyTk+2PZ7LX4FlBk1+ITbMjKU2R8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:fe:47:a7:ab:4d:5b:cb:c5:86:ff:d3:c4:37:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2735983dfb227a246df98876ec9d1af91f3d779
Validity
Not Before: Jan 31 12:00:35 2025 GMT
Not After : Feb 1 12:00:35 2025 GMT
Subject: CN=bcfa035fc2ebbdc5a9177d9e3c92ecc4d17da472
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:96:f2:43:6c:bd:26:76:37:ae:3d:09:ab:a1:
c2:3b:87:03:64:ad:f8:02:c4:fa:1e:20:2d:a4:75:
34:8f:f2:97:6f:15:28:e7:96:04:dd:9f:6a:2a:11:
b6:63:33:f0:0c:c0:18:ff:ac:5f:f3:b1:d3:e4:7c:
1e:e4:20:f5:05:7c:36:e0:26:58:fd:b1:e7:e0:11:
19:6a:d5:0e:f3:0d:3d:fc:bc:82:d8:d3:0d:35:ca:
9d:fd:0e:f3:31:de:54:b9:11:80:5b:f3:4f:75:31:
91:80:39:d2:16:bd:72:b6:b3:53:f4:f0:bb:e5:1d:
20:f5:2b:fe:d4:fb:22:2a:45:13:b0:4b:14:54:ff:
9e:9f:7e:43:42:6d:fa:27:b6:0b:06:5f:6a:a6:d3:
f0:0b:c7:ba:a1:2f:94:b9:e6:cb:71:f5:dd:49:9d:
68:ed:00:e8:64:d4:f5:89:9c:e2:4c:4f:29:97:a8:
74:94:5f:bc:b1:85:87:e5:5c:66:21:5c:f5:cf:c2:
d2:7f:dd:e2:9c:13:97:25:ca:b4:7a:0e:00:a3:48:
d2:e8:30:71:8f:bc:c2:f5:1b:23:97:c8:d8:07:5a:
63:8c:d2:fd:27:9c:7b:37:53:2d:31:10:55:4a:e3:
31:45:87:0f:8c:a4:5f:40:55:a0:52:0e:76:7f:e2:
c9:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:FA:03:5F:C2:EB:BD:C5:A9:17:7D:9E:3C:92:EC:C4:D1:7D:A4:72
X509v3 Authority Key Identifier:
keyid:B2:73:59:83:DF:B2:27:A2:46:DF:98:87:6E:C9:D1:AF:91:F3:D7:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/snNZg9-yJ6JG35iHbsnRr5Hz13k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/475e19-9fbf-4d43-9285-ec5b325c6eb2/1/snNZg9-yJ6JG35iHbsnRr5Hz13k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/475e19-9fbf-4d43-9285-ec5b325c6eb2/1/snNZg9-yJ6JG35iHbsnRr5Hz13k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:c3:db:09:35:46:d4:50:49:95:3c:ff:a1:80:ad:51:6e:2d:
53:4c:2d:07:bf:3f:cf:60:1f:f9:30:80:94:26:63:55:ea:af:
5d:f2:99:7e:ee:89:26:1d:ab:01:99:65:bb:1f:84:37:7b:d6:
c3:25:93:22:45:39:65:a3:81:5a:24:6e:45:aa:c0:ae:7a:e3:
4c:5a:b0:8c:ac:da:f7:d9:bc:32:0f:6b:9c:f2:de:37:6d:06:
f7:e7:fb:a7:14:ec:04:0a:64:4d:99:ab:12:60:55:cd:db:15:
3b:b8:2c:c8:2a:69:41:02:c1:b6:e6:d4:ab:77:1f:19:5c:54:
55:46:9d:67:c8:ae:45:18:cd:ba:b7:3c:5b:69:1c:78:1f:de:
b9:30:aa:aa:89:04:e8:c8:60:8f:ce:c0:c5:c1:30:cc:10:d8:
39:13:f9:02:fc:1c:3a:a3:f9:f4:43:16:6e:6c:6f:60:08:71:
06:5d:4e:dd:c1:fc:da:92:2d:f2:16:10:ae:e8:93:35:b4:b0:
07:f3:b0:7a:c5:ea:00:49:cf:4e:2b:8e:dc:f6:be:11:ee:f5:
f3:92:08:99:88:f6:d8:3f:bd:e7:3d:55:63:3a:85:cf:8c:5a:
44:c3:04:65:d0:b4:31:2b:b6:23:8e:46:72:5a:1d:51:43:49:
d6:8f:9a:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:01:44 2025 by rpki-client