Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/1c13d9-81d5-4cdb-a2e1-a5abb20d2462/1/sZQPAAmW6_0tq3HEacxR7ogbP14.mft
File: sZQPAAmW6_0tq3HEacxR7ogbP14.mft (raw, json)
Hash identifier: isLu5NWAeLiToEzPS5jccZEHe6Thq++oQY1uiDSSFSk=
Subject key identifier: 18:61:80:BA:E2:4F:06:D8:85:FF:5F:7F:09:DA:0A:AF:51:CB:7E:61
Authority key identifier: B1:94:0F:00:09:96:EB:FD:2D:AB:71:C4:69:CC:51:EE:88:1B:3F:5E
Certificate issuer: /CN=b1940f000996ebfd2dab71c469cc51ee881b3f5e
Certificate serial: 0194BCA9BA8A2B8F99A78FC4DE82ED0B713F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sZQPAAmW6_0tq3HEacxR7ogbP14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/1c13d9-81d5-4cdb-a2e1-a5abb20d2462/1/sZQPAAmW6_0tq3HEacxR7ogbP14.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 14:00:27 +0000
Manifest this update: Fri 31 Jan 2025 14:00:27 +0000
Manifest next update: Sat 01 Feb 2025 14:00:27 +0000
Files and hashes: 1: BA5XRS-VBm8RVVbSCJW6HST0wD0.roa (hash: b9K7NP8BwX8VNftSD4zDv00erFxrleUYzaeFhztZOO8=)
2: gbBXW-vxInHi16BrBBKHLf7If3g.roa (hash: fBYMDG4bZkxXYdO0y/chVffLP2RSHLaDCHJZ1DFzD3E=)
3: sZQPAAmW6_0tq3HEacxR7ogbP14.crl (hash: /fz947kisieu6/075uGAbDdUsb9fmF/ocHRYXVLEtJw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:ba:8a:2b:8f:99:a7:8f:c4:de:82:ed:0b:71:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1940f000996ebfd2dab71c469cc51ee881b3f5e
Validity
Not Before: Jan 31 14:00:27 2025 GMT
Not After : Feb 1 14:00:27 2025 GMT
Subject: CN=186180bae24f06d885ff5f7f09da0aaf51cb7e61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:8f:d2:18:2e:0e:33:ed:77:f9:5e:52:90:4b:
2b:59:b4:02:de:05:57:d4:d0:ac:4f:4a:a2:fc:47:
97:7b:62:bb:ec:6d:9d:00:7d:26:6b:17:98:69:86:
7e:71:fd:24:ea:f6:04:ea:09:27:a5:f0:d8:b2:92:
ee:38:93:df:24:72:fb:20:17:ac:0f:c4:d2:24:b8:
01:07:98:4a:bf:b3:d6:25:70:60:21:17:8f:ce:76:
ad:40:fa:f1:fc:db:69:69:f7:19:ca:88:b2:82:39:
dc:15:0a:ed:11:12:20:da:b7:5e:b4:2b:0c:a6:7b:
18:eb:20:5d:d5:e3:00:bf:b3:4e:cb:1a:4c:5d:4c:
22:36:03:cd:d4:91:cc:25:90:d7:e6:63:93:a9:b3:
3f:e2:0e:12:be:a7:29:6a:74:d5:41:27:e8:05:87:
86:2d:f7:a9:36:55:be:14:bd:e6:2f:07:be:5e:89:
d5:68:0c:fb:33:b9:d5:05:ce:c5:c4:c3:7f:82:9a:
c2:35:0a:47:86:66:ac:2f:96:d2:d2:75:25:e1:f2:
84:26:a8:1a:78:85:15:cf:5e:58:5d:ca:78:24:0e:
da:b2:c5:3b:69:01:b0:67:84:18:d5:19:12:41:d1:
81:48:51:83:1c:cb:6b:e1:68:c5:70:e6:db:9f:7a:
c1:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:61:80:BA:E2:4F:06:D8:85:FF:5F:7F:09:DA:0A:AF:51:CB:7E:61
X509v3 Authority Key Identifier:
keyid:B1:94:0F:00:09:96:EB:FD:2D:AB:71:C4:69:CC:51:EE:88:1B:3F:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sZQPAAmW6_0tq3HEacxR7ogbP14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1c13d9-81d5-4cdb-a2e1-a5abb20d2462/1/sZQPAAmW6_0tq3HEacxR7ogbP14.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1c13d9-81d5-4cdb-a2e1-a5abb20d2462/1/sZQPAAmW6_0tq3HEacxR7ogbP14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:a0:f8:51:81:1b:c5:1d:a5:58:08:2f:b3:06:b2:54:af:65:
c5:74:9e:91:4a:b6:6d:80:d6:50:a8:2c:c0:78:66:c3:16:ba:
5b:98:62:a4:35:c5:d2:ab:29:ef:56:98:a8:7d:cc:67:64:78:
48:ee:09:b5:17:14:c7:c8:8e:42:5f:16:f5:1f:db:f5:30:88:
ad:e4:39:5f:67:8e:26:f9:46:ac:d5:2b:e1:ad:4c:f3:de:3c:
6b:76:b4:da:fe:16:9d:8e:ec:2a:25:f2:bf:9c:d2:29:90:8a:
2b:68:aa:f8:fe:7b:4d:94:12:9a:9a:9c:ff:e4:d9:2a:ef:61:
87:65:1a:3b:f3:08:b8:14:c2:ff:82:84:03:66:8f:90:9d:ea:
8f:dc:02:de:49:2c:4a:d0:9f:25:11:bc:eb:35:45:7b:99:10:
80:b4:3f:b1:4d:8b:27:03:68:1a:91:09:ae:e8:18:d6:a4:c8:
23:b3:cc:5b:24:53:97:cd:9f:6b:b8:a6:28:4b:e4:20:40:cf:
89:69:9d:84:9d:0c:85:78:44:ee:07:49:17:7c:bf:ea:b4:83:
db:cc:fa:88:c8:84:8a:99:e4:0d:a3:25:b9:7b:ca:c2:dd:b0:
2c:27:3b:12:8d:d5:d6:ad:30:56:e1:64:ed:a9:79:bb:93:6a:
55:09:12:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:22:28 2025 by rpki-client