Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/8f41a4-e140-4f65-80e6-28170ac02b32/1/SBO5xf6DFYB9eFbNIwADqhZ0HA0.mft
File: SBO5xf6DFYB9eFbNIwADqhZ0HA0.mft (raw, json)
Hash identifier: jZOzsnHY5BAZTKQhWptHI2dYO5i2Vm+vTdlQoOJV9vk=
Subject key identifier: 73:49:68:82:EC:F2:48:E8:B5:3F:9B:14:9D:9F:3E:90:9A:C3:67:4E
Authority key identifier: 48:13:B9:C5:FE:83:15:80:7D:78:56:CD:23:00:03:AA:16:74:1C:0D
Certificate issuer: /CN=4813b9c5fe8315807d7856cd230003aa16741c0d
Certificate serial: 0194BC3C046C60301863446B5A307E2F5FB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SBO5xf6DFYB9eFbNIwADqhZ0HA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/8f41a4-e140-4f65-80e6-28170ac02b32/1/SBO5xf6DFYB9eFbNIwADqhZ0HA0.mft
Manifest number: 09F2
Signing time: Fri 31 Jan 2025 12:00:37 +0000
Manifest this update: Fri 31 Jan 2025 12:00:37 +0000
Manifest next update: Sat 01 Feb 2025 12:00:37 +0000
Files and hashes: 1: SBO5xf6DFYB9eFbNIwADqhZ0HA0.crl (hash: +K2E3ebwbfSkHFh4lA8NaVS04RGG+/TmZY4oQu3+UwY=)
2: Y-7q9kMx7K8cMciXy89it_JnTm4.roa (hash: wJcOhSoBOyFBrlWVrA3BCNeS+YWlGnk/CzTU7ZurV5o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:04:6c:60:30:18:63:44:6b:5a:30:7e:2f:5f:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4813b9c5fe8315807d7856cd230003aa16741c0d
Validity
Not Before: Jan 31 12:00:37 2025 GMT
Not After : Feb 1 12:00:37 2025 GMT
Subject: CN=73496882ecf248e8b53f9b149d9f3e909ac3674e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:3a:fc:5d:00:58:13:c9:23:33:cb:96:25:94:
11:b0:0a:db:03:fd:80:4b:c5:0f:e2:d4:af:17:8f:
a5:73:00:47:39:d1:11:99:e3:1f:fa:70:ee:ce:2c:
ce:10:7d:78:60:34:c7:80:a1:bd:ea:a1:ef:89:a7:
19:59:ff:3a:eb:62:39:17:0d:c4:cd:22:ce:b0:e6:
c5:71:87:77:7e:ca:30:3b:81:dd:63:23:e4:c5:d8:
9e:aa:bb:59:76:90:f9:95:dd:ff:9c:da:8a:77:80:
20:b1:b4:93:80:88:a6:0d:29:c5:68:46:32:c3:3c:
d6:c7:48:5d:1a:7e:e1:fc:1f:a6:12:61:e9:93:b9:
ca:82:32:cd:57:66:d1:e0:e1:cb:65:cf:eb:17:af:
51:6b:96:8b:1f:dc:9f:55:98:b1:f2:2e:9a:c6:f9:
1c:06:1a:1b:ad:67:b9:c8:ba:a5:9d:78:86:ec:72:
eb:5c:e2:a0:83:dc:33:47:dc:04:f6:a6:33:61:3f:
22:13:a7:55:10:b9:a5:1f:fe:b9:cc:90:70:d6:40:
36:8f:48:9e:c1:7e:71:59:5a:5d:31:d4:e4:39:f5:
5a:f3:c9:3c:6e:82:a0:c1:1a:7f:ad:ec:87:75:bd:
6b:98:fd:02:2f:07:40:04:ce:3b:3c:1c:0b:12:d7:
43:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:49:68:82:EC:F2:48:E8:B5:3F:9B:14:9D:9F:3E:90:9A:C3:67:4E
X509v3 Authority Key Identifier:
keyid:48:13:B9:C5:FE:83:15:80:7D:78:56:CD:23:00:03:AA:16:74:1C:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SBO5xf6DFYB9eFbNIwADqhZ0HA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/8f41a4-e140-4f65-80e6-28170ac02b32/1/SBO5xf6DFYB9eFbNIwADqhZ0HA0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/8f41a4-e140-4f65-80e6-28170ac02b32/1/SBO5xf6DFYB9eFbNIwADqhZ0HA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:fa:69:b3:40:e9:1e:86:db:4d:d2:12:bf:93:d1:58:54:bc:
d6:27:88:aa:88:3a:98:24:3e:0b:9b:e4:26:92:ca:ad:62:9e:
e2:80:b6:07:1f:75:10:e0:21:16:64:5b:40:e1:03:2f:94:09:
5b:84:7a:ed:be:85:29:9d:bd:34:f0:72:e0:71:7e:14:9d:99:
d7:de:58:73:b4:91:17:36:b7:c3:5f:15:51:1a:b8:9f:ab:1a:
67:5e:2c:9d:2a:d7:6b:b0:d0:73:6d:29:c6:61:f8:90:c7:95:
3e:d8:53:53:d8:d9:90:39:2d:1a:6a:00:90:d6:d6:8a:d0:35:
aa:93:80:c2:6f:73:26:13:90:1e:76:d6:dc:22:d5:3f:c6:7e:
b1:77:04:84:04:81:0f:84:fb:0d:c4:61:04:23:b6:17:ef:0b:
d4:76:56:3c:0b:a7:91:c8:77:b3:03:c0:4a:bb:8c:a9:88:bc:
c7:f5:47:9e:2d:6b:9c:2c:22:a5:84:47:09:08:6d:4e:3b:38:
da:7b:c7:1e:3a:4e:22:fe:36:e2:7a:45:33:1b:c7:cf:66:7d:
40:b0:11:4a:85:75:a8:6a:2a:73:e6:89:0f:67:56:d7:1f:47:
cf:c9:5c:d5:01:b0:9b:87:6f:7c:ef:19:82:b0:43:08:16:46:
26:72:18:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 10:05:56 2025 by rpki-client