Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/5ae8bf-f999-4c74-9f46-325627c466e2/1/sbIBNjzMVWvsiHAladjTgaDolWY.mft
File: sbIBNjzMVWvsiHAladjTgaDolWY.mft (raw, json)
Hash identifier: pERpg0/XcW/Cco+iCIHnrzs41yCjjY3YixvtOi1mC7w=
Subject key identifier: 88:71:A0:74:C2:B2:40:51:87:49:82:FA:49:DC:E2:8C:D3:12:21:45
Authority key identifier: B1:B2:01:36:3C:CC:55:6B:EC:88:70:25:69:D8:D3:81:A0:E8:95:66
Certificate issuer: /CN=b1b201363ccc556bec88702569d8d381a0e89566
Certificate serial: 0194BBCED454EE7BE4289201A66FA30FBECA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sbIBNjzMVWvsiHAladjTgaDolWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/5ae8bf-f999-4c74-9f46-325627c466e2/1/sbIBNjzMVWvsiHAladjTgaDolWY.mft
Manifest number: 0AA5
Signing time: Fri 31 Jan 2025 10:01:21 +0000
Manifest this update: Fri 31 Jan 2025 10:01:21 +0000
Manifest next update: Sat 01 Feb 2025 10:01:21 +0000
Files and hashes: 1: lqeFydVXrdHwpq6mWSJTL5OgZAY.roa (hash: YaK2y/qIg0D8N7eA9vbxZ0CRyImPi+H1Zg28ZURYmRg=)
2: sbIBNjzMVWvsiHAladjTgaDolWY.crl (hash: fn/guWSWKZ6y6ppjVbmViFmPRE7IIyCwDhAAoQ+jeW4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:d4:54:ee:7b:e4:28:92:01:a6:6f:a3:0f:be:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1b201363ccc556bec88702569d8d381a0e89566
Validity
Not Before: Jan 31 10:01:21 2025 GMT
Not After : Feb 1 10:01:21 2025 GMT
Subject: CN=8871a074c2b24051874982fa49dce28cd3122145
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:9c:8a:b4:53:87:82:a8:77:c6:af:d3:dc:c6:
79:29:53:b4:0f:bd:5d:88:52:20:5d:82:1e:0a:cc:
ab:fc:0e:45:f7:7d:21:63:3e:83:24:ae:6c:e2:51:
64:e6:54:43:fc:d4:7a:38:b4:1b:63:f3:c4:02:3e:
9e:4d:82:8b:09:9f:0e:46:99:bd:53:d7:51:db:9c:
4e:41:e4:eb:fc:81:1b:fb:a4:d7:bf:fc:67:37:78:
63:f0:17:34:69:74:14:69:d6:42:7c:f5:3c:07:8a:
87:2a:14:f9:93:34:6b:d3:18:ac:43:62:74:28:22:
1c:0d:8c:78:fc:e1:cf:14:f2:cd:06:d1:b4:ce:6e:
44:50:be:68:2d:db:30:ee:55:82:0a:cd:17:33:c4:
7e:0d:74:fe:f5:25:ea:2f:28:db:c7:af:ad:fb:0b:
7f:da:74:b3:92:18:23:43:48:11:07:eb:59:39:3f:
e8:7f:f0:8d:55:9e:60:88:5c:f8:a2:eb:58:4e:8f:
7c:50:89:2f:8a:34:e0:f9:56:92:87:4f:51:04:e9:
a8:c5:fb:a1:a1:04:0a:93:9a:e2:a7:f7:23:88:36:
7a:24:43:20:c2:b9:53:d5:88:45:c9:8d:4f:ae:9a:
6e:ae:ad:a2:be:8a:93:b2:44:ea:bb:0b:c0:a6:ff:
a9:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:71:A0:74:C2:B2:40:51:87:49:82:FA:49:DC:E2:8C:D3:12:21:45
X509v3 Authority Key Identifier:
keyid:B1:B2:01:36:3C:CC:55:6B:EC:88:70:25:69:D8:D3:81:A0:E8:95:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sbIBNjzMVWvsiHAladjTgaDolWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/5ae8bf-f999-4c74-9f46-325627c466e2/1/sbIBNjzMVWvsiHAladjTgaDolWY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/5ae8bf-f999-4c74-9f46-325627c466e2/1/sbIBNjzMVWvsiHAladjTgaDolWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:a6:de:3f:d8:ed:3d:dd:10:28:10:4a:97:0a:ea:45:e4:ff:
ec:ed:fd:05:3a:bf:39:d5:45:a1:1c:ad:06:75:f7:55:2f:35:
43:0f:4e:5b:54:76:79:b6:20:80:eb:0a:f9:37:24:9a:e6:42:
51:e8:cb:d2:91:99:95:c6:53:56:45:6b:c7:19:df:31:43:f1:
e7:d5:c0:9b:12:89:69:20:68:0a:63:05:74:6b:b5:32:cd:97:
ad:6e:87:33:5a:24:ac:1f:b2:2b:a9:45:7a:55:be:1e:c5:e7:
e9:59:00:48:45:29:04:28:6b:8a:ee:cc:ed:e7:7f:4d:43:d6:
95:cc:a6:b5:be:af:35:61:af:68:94:39:e9:82:a1:fd:2e:70:
ec:81:79:29:42:b6:98:70:e4:f6:f9:df:c0:74:2c:86:93:35:
f9:4b:a3:80:e9:a9:e3:df:13:cf:ca:bd:a3:0e:46:fe:d1:bd:
28:d1:d3:9e:c1:30:33:ea:e2:40:dd:4a:6a:3a:f0:54:46:5f:
1e:8d:ea:5d:b6:e2:b2:e6:3f:6a:a3:73:08:81:74:b9:9a:1f:
35:47:33:4f:4e:6f:12:94:0a:9e:bf:1b:9c:93:5e:96:03:55:
5d:3b:5f:89:92:33:6f:f4:bb:17:37:db:d2:14:8d:3f:d8:81:
72:88:d8:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:08:12 2025 by rpki-client