Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/fc1fcf-2c75-41a6-81f9-5fe8afa35df6/1/SZkBC7sfSHCa6sAuhDOKSbd3RhE.mft
File: SZkBC7sfSHCa6sAuhDOKSbd3RhE.mft (raw, json)
Hash identifier: hs8SEpRSbCaMIVMKUk5cqCme8DYJPAyGfJDLwJI9nr4=
Subject key identifier: C7:A2:CB:9D:B4:8E:62:94:5B:FC:B2:16:DB:EC:FD:1B:AC:8D:C2:F5
Authority key identifier: 49:99:01:0B:BB:1F:48:70:9A:EA:C0:2E:84:33:8A:49:B7:77:46:11
Certificate issuer: /CN=4999010bbb1f48709aeac02e84338a49b7774611
Certificate serial: 0194BC72BDAE83BD72D21B817CD486FD2086
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SZkBC7sfSHCa6sAuhDOKSbd3RhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/fc1fcf-2c75-41a6-81f9-5fe8afa35df6/1/SZkBC7sfSHCa6sAuhDOKSbd3RhE.mft
Manifest number: 0EED
Signing time: Fri 31 Jan 2025 13:00:23 +0000
Manifest this update: Fri 31 Jan 2025 13:00:23 +0000
Manifest next update: Sat 01 Feb 2025 13:00:23 +0000
Files and hashes: 1: MfMkCUr7HQ6KxqyWEzQVmKSbin8.roa (hash: 15XIx+4E6jpmVYTgDMId5DLCY/biXmoyIZeEQt1OExE=)
2: SZkBC7sfSHCa6sAuhDOKSbd3RhE.crl (hash: HHNB0qxyyDnFzCz1u0440ICd6nVIniaPrdS7+acUDNY=)
3: V7TwuQchFJyj3FzgSo-quNHM3vk.roa (hash: hjNtsrFF5n1yKl43GjiftBGk4/SSn0HVl0kFwJ8ePwY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:bd:ae:83:bd:72:d2:1b:81:7c:d4:86:fd:20:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4999010bbb1f48709aeac02e84338a49b7774611
Validity
Not Before: Jan 31 13:00:23 2025 GMT
Not After : Feb 1 13:00:23 2025 GMT
Subject: CN=c7a2cb9db48e62945bfcb216dbecfd1bac8dc2f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:c2:bf:f4:4f:e5:69:23:df:6b:da:1f:aa:f1:
f1:e4:3c:f8:52:ad:1e:49:a4:89:8a:e1:90:df:f4:
2e:ee:14:77:2d:8c:25:45:98:4c:83:57:01:fb:fc:
82:11:a1:11:bc:b1:88:17:cc:34:9a:53:84:dd:24:
97:08:64:6f:ba:88:20:bc:02:e8:77:56:b8:32:20:
ff:90:18:a5:36:13:ba:d1:34:0e:ba:d3:b9:14:d5:
7e:3e:af:dc:7b:85:f9:07:75:25:81:63:1b:48:dd:
cc:79:31:1e:91:c4:6d:8a:19:21:e2:b5:67:e8:65:
ae:7b:0e:a4:82:32:09:34:27:7a:bc:01:24:dd:56:
cb:42:e6:19:9d:ee:3c:36:97:b1:93:ed:7f:1a:ce:
d1:ee:1a:cf:41:46:df:aa:ea:cf:86:77:f1:7a:18:
2c:51:86:45:fd:03:48:a0:a9:59:b1:95:5b:e0:8e:
25:f2:4f:05:5c:b2:d1:d9:93:84:ec:a8:7d:10:85:
bb:f4:65:d6:10:95:5f:47:4e:65:f7:bc:95:f6:47:
95:2f:c6:8d:39:88:f9:97:4f:ce:31:e7:41:d9:67:
af:b6:42:b1:6d:e9:6a:37:06:0b:22:99:64:0c:4f:
b1:6e:b6:b3:ad:7a:6a:77:df:04:09:b0:6b:96:1b:
d4:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:A2:CB:9D:B4:8E:62:94:5B:FC:B2:16:DB:EC:FD:1B:AC:8D:C2:F5
X509v3 Authority Key Identifier:
keyid:49:99:01:0B:BB:1F:48:70:9A:EA:C0:2E:84:33:8A:49:B7:77:46:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SZkBC7sfSHCa6sAuhDOKSbd3RhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fc1fcf-2c75-41a6-81f9-5fe8afa35df6/1/SZkBC7sfSHCa6sAuhDOKSbd3RhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fc1fcf-2c75-41a6-81f9-5fe8afa35df6/1/SZkBC7sfSHCa6sAuhDOKSbd3RhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:9d:76:6f:ee:8a:07:59:07:a3:c1:20:e8:43:69:f6:5d:fb:
9c:b4:fb:83:f2:66:84:9f:d0:3e:c6:67:30:3d:9c:72:ba:86:
e9:1e:da:c5:b8:0c:5f:f3:51:fa:35:99:c3:ba:18:60:f7:db:
ac:9e:73:b2:38:6b:c0:e4:2f:e6:0a:79:5c:4a:0a:18:ee:4f:
18:db:a0:00:02:1e:80:42:7e:d5:9a:da:a4:ff:bb:98:19:23:
4f:f1:98:ab:f6:28:5d:70:51:b7:36:cf:49:00:36:b2:5a:e4:
03:ef:af:8e:7f:0b:4b:11:4e:4b:80:27:13:72:8c:c6:d3:d8:
2d:74:8b:36:ea:aa:c8:98:01:db:8b:12:20:5f:b5:fd:be:0c:
6d:2c:8e:be:76:28:a9:1b:c6:df:34:d4:89:fb:4e:1b:d7:76:
06:ef:f8:13:e3:06:b1:12:a7:41:3b:09:56:06:34:af:d7:35:
0a:a5:69:7b:6d:7f:89:ef:5c:a2:0a:05:9f:9e:d1:29:a8:00:
b2:aa:99:ec:4b:da:29:33:f1:03:74:6e:43:97:f7:6e:74:b8:
b6:c7:63:a9:95:d5:6c:eb:34:45:0c:e7:15:a3:0d:ad:6d:00:
0b:8f:64:c7:4a:65:62:ae:f4:64:9c:7d:bd:3f:07:c4:b0:40:
7c:7a:5e:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:04:14 2025 by rpki-client