Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/d77ac4-dc66-434f-8423-c9e20ccd476f/1/srQdL319OFfgdfKk8vnT4ETy5TY.mft
File: srQdL319OFfgdfKk8vnT4ETy5TY.mft (raw, json)
Hash identifier: SAvAJeGWmTY7L92pihFArxvAcwX+M29BfnOmA1facwo=
Subject key identifier: 5F:CF:31:86:7C:B9:D4:58:BB:FC:05:67:3A:22:AB:5C:17:96:FE:B7
Authority key identifier: B2:B4:1D:2F:7D:7D:38:57:E0:75:F2:A4:F2:F9:D3:E0:44:F2:E5:36
Certificate issuer: /CN=b2b41d2f7d7d3857e075f2a4f2f9d3e044f2e536
Certificate serial: 0194BC04D4B14C2E33AAD4C9156C899C9FD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/srQdL319OFfgdfKk8vnT4ETy5TY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/d77ac4-dc66-434f-8423-c9e20ccd476f/1/srQdL319OFfgdfKk8vnT4ETy5TY.mft
Manifest number: 041F
Signing time: Fri 31 Jan 2025 11:00:20 +0000
Manifest this update: Fri 31 Jan 2025 11:00:20 +0000
Manifest next update: Sat 01 Feb 2025 11:00:20 +0000
Files and hashes: 1: Ypuf3qV0JE2AXfUrk2eNRiGtQN0.roa (hash: AxG4SgT0VS5arc9FHux7pFhrFyFYGK0/0AgX9zPeSBE=)
2: srQdL319OFfgdfKk8vnT4ETy5TY.crl (hash: rywePip6eCQ2UxlAUP4IhS5Ucll5GovyLaRv4hvDc68=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:d4:b1:4c:2e:33:aa:d4:c9:15:6c:89:9c:9f:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2b41d2f7d7d3857e075f2a4f2f9d3e044f2e536
Validity
Not Before: Jan 31 11:00:20 2025 GMT
Not After : Feb 1 11:00:20 2025 GMT
Subject: CN=5fcf31867cb9d458bbfc05673a22ab5c1796feb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ab:1d:ba:31:b4:ff:62:9c:82:fb:c6:02:48:
2b:c7:77:03:1f:6c:a3:7f:49:80:8b:6e:00:0c:b6:
33:72:48:e6:b0:b4:85:eb:aa:52:8c:f4:3b:15:cd:
87:cf:e3:65:96:f9:af:59:69:09:82:69:54:71:55:
6d:92:d1:6f:ae:18:fa:26:d9:5a:88:66:f2:49:ab:
dc:10:3e:bd:5a:93:96:6d:0e:d1:c9:b9:6e:13:74:
9f:7c:6e:0b:9c:8d:0f:aa:a5:9c:29:1b:c6:b4:c7:
4f:93:64:c3:14:0b:e0:e9:6f:bd:d7:2f:df:41:ab:
c7:8e:36:e5:b5:e8:27:2e:ad:0a:ed:1f:68:52:54:
a6:17:6e:11:93:12:9b:2b:fc:2d:30:e1:90:42:0c:
0c:43:7d:57:69:a4:39:66:5f:1b:df:cc:36:72:30:
75:de:b7:5f:87:87:a1:55:07:67:1c:a3:fb:36:58:
9f:02:3f:c0:8e:78:2d:e9:bc:0d:e2:74:50:b6:d3:
58:91:d0:20:57:5f:58:7f:73:e7:18:62:4d:59:ae:
71:c8:2e:5e:50:02:07:8a:1e:ea:b4:ba:8b:08:a2:
ee:ad:d7:eb:31:76:b7:0d:ca:bf:d8:bd:b9:16:fe:
99:a1:cf:98:e7:4d:51:30:8c:c8:19:38:f2:8f:f0:
85:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:CF:31:86:7C:B9:D4:58:BB:FC:05:67:3A:22:AB:5C:17:96:FE:B7
X509v3 Authority Key Identifier:
keyid:B2:B4:1D:2F:7D:7D:38:57:E0:75:F2:A4:F2:F9:D3:E0:44:F2:E5:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/srQdL319OFfgdfKk8vnT4ETy5TY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d77ac4-dc66-434f-8423-c9e20ccd476f/1/srQdL319OFfgdfKk8vnT4ETy5TY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d77ac4-dc66-434f-8423-c9e20ccd476f/1/srQdL319OFfgdfKk8vnT4ETy5TY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:19:7a:46:1a:25:bc:42:5d:e5:0f:fd:d7:2d:f4:59:c5:dd:
0b:a3:39:7f:e9:7c:a7:04:3e:f2:c8:96:ad:09:d4:4a:8c:ac:
e2:dd:50:47:33:bf:16:3e:31:a1:7d:af:95:07:3d:0a:31:d4:
82:33:07:62:9a:e9:28:b7:31:2e:a4:8d:07:02:d6:d6:84:ee:
78:3f:bd:e7:51:f7:68:09:84:12:41:b3:9b:4f:51:9a:94:fc:
e0:56:ea:54:02:e6:d8:7c:28:75:ab:69:fb:95:d5:a7:8e:65:
9c:b7:36:a8:14:b4:93:ef:aa:3a:cd:d8:7f:7d:aa:71:79:c9:
7f:5a:4c:16:c0:47:4f:e9:2f:79:63:e0:81:c9:53:88:28:95:
66:8d:73:c8:47:91:7e:1f:b5:0e:44:50:4e:35:4d:75:2e:a2:
c6:c7:28:c4:43:45:20:30:e6:d5:1f:70:74:e2:95:0c:e2:18:
4f:fc:e0:4f:c7:12:a7:12:29:04:73:a3:a1:98:11:31:32:9a:
39:58:b5:27:e7:8b:00:47:5f:b0:17:e3:75:6b:39:f9:15:68:
f4:32:b6:cf:70:89:30:ac:29:bf:ee:d0:d4:11:3d:27:fe:a6:
90:30:07:ba:3b:4d:e8:02:fa:60:b8:63:86:ea:1a:57:cb:3e:
a9:a1:3c:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:37:38 2025 by rpki-client