Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/efe0e0-34f7-429e-9f38-4ea7a1ae98de/1/sFf1RPU_NdjS5zyylltPTX0CKVk.mft
File: sFf1RPU_NdjS5zyylltPTX0CKVk.mft (raw, json)
Hash identifier: 6gmLxegfOfrPt4isN3/tb+bKfiNG0a5u5dceLTidlhI=
Subject key identifier: 49:F6:B0:0F:AF:C8:9B:04:2F:83:06:68:D6:F6:34:4F:8B:AF:3A:73
Authority key identifier: B0:57:F5:44:F5:3F:35:D8:D2:E7:3C:B2:96:5B:4F:4D:7D:02:29:59
Certificate issuer: /CN=b057f544f53f35d8d2e73cb2965b4f4d7d022959
Certificate serial: 0194BCA989F07EBB258FA32EF54AB0554FB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sFf1RPU_NdjS5zyylltPTX0CKVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/efe0e0-34f7-429e-9f38-4ea7a1ae98de/1/sFf1RPU_NdjS5zyylltPTX0CKVk.mft
Manifest number: 13BF
Signing time: Fri 31 Jan 2025 14:00:14 +0000
Manifest this update: Fri 31 Jan 2025 14:00:14 +0000
Manifest next update: Sat 01 Feb 2025 14:00:14 +0000
Files and hashes: 1: aXSOEWx3tVF7ynpp-Q3fBbDZg50.roa (hash: RSnTxORBukbARx6FRTZpYXAyjlGDaMBXkz61tBk9AhY=)
2: sFf1RPU_NdjS5zyylltPTX0CKVk.crl (hash: XbxMvjqkj5Q2EzmtHkRg71jDAleRi8JzbH2TkLA8CkE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:89:f0:7e:bb:25:8f:a3:2e:f5:4a:b0:55:4f:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b057f544f53f35d8d2e73cb2965b4f4d7d022959
Validity
Not Before: Jan 31 14:00:14 2025 GMT
Not After : Feb 1 14:00:14 2025 GMT
Subject: CN=49f6b00fafc89b042f830668d6f6344f8baf3a73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:93:03:37:67:7e:c8:68:cc:35:0b:3b:8f:ff:
c6:4d:2f:e2:f6:e6:60:66:db:d8:02:ac:ca:bc:35:
86:c9:98:c5:f6:60:95:d1:64:d2:9a:74:ea:bc:82:
b5:12:3b:d0:e5:a0:dc:ea:55:2a:e3:25:07:bd:d7:
9e:c6:a8:7d:73:5f:fd:be:09:19:43:77:68:02:8a:
09:e8:4f:25:57:dd:c4:84:0e:b9:5e:53:cf:58:35:
18:ae:10:57:5a:25:d6:9f:df:5f:09:79:d1:69:58:
d3:63:a4:dd:99:68:48:b8:62:08:2c:c0:4b:8a:e6:
c7:c2:41:12:40:a1:f8:79:7a:f0:ed:d8:21:84:d3:
5e:b3:7b:ad:4b:6f:f6:c0:3e:d9:69:86:5d:93:5b:
88:36:77:fb:87:fa:e2:22:85:38:54:b7:bf:25:f2:
45:72:11:07:3a:82:0c:2b:5a:e1:f5:17:8b:ab:04:
07:b9:f7:8b:6a:dd:ce:a7:bf:2e:6e:4d:52:88:c7:
10:8e:86:b6:81:36:78:3f:01:69:db:50:86:3b:0b:
bc:72:8b:08:b4:28:46:4f:14:a0:2f:4e:1a:47:91:
e0:64:f3:dd:c0:62:9a:0e:18:ae:8b:b0:0a:f0:df:
51:7e:ac:b1:30:f4:7a:e9:8b:58:dd:89:68:f9:3f:
d9:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:F6:B0:0F:AF:C8:9B:04:2F:83:06:68:D6:F6:34:4F:8B:AF:3A:73
X509v3 Authority Key Identifier:
keyid:B0:57:F5:44:F5:3F:35:D8:D2:E7:3C:B2:96:5B:4F:4D:7D:02:29:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sFf1RPU_NdjS5zyylltPTX0CKVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/efe0e0-34f7-429e-9f38-4ea7a1ae98de/1/sFf1RPU_NdjS5zyylltPTX0CKVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/efe0e0-34f7-429e-9f38-4ea7a1ae98de/1/sFf1RPU_NdjS5zyylltPTX0CKVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:4a:dc:cc:f2:8b:cc:11:32:bc:b1:2b:87:aa:2a:d2:a1:9b:
fe:8e:99:ff:48:fa:96:ea:52:da:a6:c3:43:73:95:98:4d:8a:
53:dc:cc:b8:62:1c:0c:53:9c:d9:a7:2c:68:cb:5e:e2:36:52:
4a:e9:e8:3a:b5:33:af:33:4d:fd:9d:91:c4:1a:29:aa:cb:d2:
f5:ca:fb:fc:5e:ef:49:86:1b:18:3b:b2:0d:37:77:8c:bf:c6:
09:47:ce:d8:ba:78:99:ac:2e:62:c9:26:21:36:6e:78:7d:5d:
1a:17:85:a7:14:c2:b6:f9:11:a8:e8:c1:d8:7e:38:39:eb:50:
6e:d8:b5:e0:20:96:eb:3c:54:d4:41:93:00:4a:8e:99:17:7b:
1b:d6:77:52:3d:c1:c5:c8:56:e1:5c:48:42:ec:dd:88:c0:fd:
ff:82:07:58:c4:cf:a5:ac:c3:eb:df:cb:dc:9b:45:2a:10:f0:
ae:2d:3c:e6:cb:5f:a1:e5:60:32:28:1a:03:f7:dc:03:a4:a2:
b9:35:68:4e:df:99:f1:2d:7d:2d:e0:db:59:d1:70:ed:44:cc:
ce:ef:e0:35:f9:4f:85:4d:2b:2c:a3:01:94:a7:a5:ac:78:e7:
e1:46:e6:c7:72:6e:4f:b1:71:e7:29:8e:0b:fe:e2:44:97:2c:
4c:02:0d:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:21 2025 by rpki-client