
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/b1a75d-b791-40b4-bda7-e9ddbe3efbe3/1/sSQfEp2_xKFlH-zboDEI_NLMHfI.mft
File: sSQfEp2_xKFlH-zboDEI_NLMHfI.mft (raw, json)
Hash identifier: st0xjrCyCIckdBAOvJAD9HqjjyeHTEAy5bRD967CkFw=
Subject key identifier: E1:F6:1F:B2:D0:78:A1:76:54:A6:8F:C0:AE:23:C6:78:8F:1A:87:B3
Authority key identifier: B1:24:1F:12:9D:BF:C4:A1:65:1F:EC:DB:A0:31:08:FC:D2:CC:1D:F2
Certificate issuer: /CN=b1241f129dbfc4a1651fecdba03108fcd2cc1df2
Certificate serial: 0194BC72FDF99AE8CBE5BC60BCA41DA3C20F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sSQfEp2_xKFlH-zboDEI_NLMHfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/b1a75d-b791-40b4-bda7-e9ddbe3efbe3/1/sSQfEp2_xKFlH-zboDEI_NLMHfI.mft
Manifest number: 07D2
Signing time: Fri 31 Jan 2025 13:00:39 +0000
Manifest this update: Fri 31 Jan 2025 13:00:39 +0000
Manifest next update: Sat 01 Feb 2025 13:00:39 +0000
Files and hashes: 1: sSQfEp2_xKFlH-zboDEI_NLMHfI.crl (hash: 3k7c7C9dyCDyvnpw2fpVQJJdQWqg8jja6usiPb2SozA=)
2: trnbESznlOsXSmOq-zTLOlE0nzc.roa (hash: fOmXOdcOD5V/jRJlsSdgNbz1rZ873FVRanr34sBtxks=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:fd:f9:9a:e8:cb:e5:bc:60:bc:a4:1d:a3:c2:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1241f129dbfc4a1651fecdba03108fcd2cc1df2
Validity
Not Before: Jan 31 13:00:39 2025 GMT
Not After : Feb 1 13:00:39 2025 GMT
Subject: CN=e1f61fb2d078a17654a68fc0ae23c6788f1a87b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:8e:14:7a:fc:3e:e9:90:06:4c:32:4c:d7:12:
e1:8a:9e:ed:60:00:cb:f0:08:31:7e:81:98:0a:ed:
85:f0:87:7f:88:7f:39:b3:e2:ba:ef:6a:9d:d1:0e:
46:8b:41:39:f1:f3:55:e3:41:8b:38:12:9c:9a:b0:
6b:30:82:76:df:e4:59:ff:91:59:cc:e0:eb:c6:00:
53:25:77:02:e8:15:3e:b0:9d:63:da:2c:64:9b:b5:
f3:7e:47:0d:7a:08:0d:02:15:71:a7:a3:7f:c2:48:
ac:32:75:6e:5c:49:bb:2e:e6:86:81:4e:bd:47:82:
a9:24:ce:12:93:38:2a:2a:c6:d1:97:e7:8e:c0:3b:
91:9d:3e:21:a1:5a:22:eb:44:3e:c9:7f:f7:97:20:
6d:cf:d4:96:e7:0d:78:a5:9a:6b:9d:00:10:0e:c0:
93:9b:f5:b6:c1:71:8b:ca:30:03:fc:d2:24:43:51:
58:8e:68:d0:07:d7:f2:d9:f3:ef:11:3c:3a:ce:d2:
82:24:02:c9:f9:c4:87:6e:74:2c:84:8d:e1:4e:f2:
7a:10:2c:9f:7a:cb:ae:9f:2c:61:a4:33:a9:a9:94:
1c:fd:84:7b:cb:f5:40:8a:84:99:39:fb:fa:02:1a:
f0:a9:3c:dd:b3:49:35:b9:49:33:5a:fd:e1:42:3a:
20:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:F6:1F:B2:D0:78:A1:76:54:A6:8F:C0:AE:23:C6:78:8F:1A:87:B3
X509v3 Authority Key Identifier:
keyid:B1:24:1F:12:9D:BF:C4:A1:65:1F:EC:DB:A0:31:08:FC:D2:CC:1D:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sSQfEp2_xKFlH-zboDEI_NLMHfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/b1a75d-b791-40b4-bda7-e9ddbe3efbe3/1/sSQfEp2_xKFlH-zboDEI_NLMHfI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/b1a75d-b791-40b4-bda7-e9ddbe3efbe3/1/sSQfEp2_xKFlH-zboDEI_NLMHfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:a3:d5:a6:a3:98:6e:e8:46:49:9d:95:d2:38:29:7c:69:4b:
9e:a7:f7:7c:c1:33:b5:91:af:21:c2:31:a7:33:07:74:37:fb:
27:4c:2b:48:2f:63:e2:e1:bd:bd:0b:3b:1b:a0:41:49:8f:f5:
18:f9:db:4c:d8:27:0d:ff:9a:10:f3:cb:a0:ff:12:a2:4a:d9:
bc:78:cf:47:af:d9:7b:50:4a:d9:57:1b:4d:cd:22:e5:62:3b:
4a:b3:3a:85:31:64:61:e7:ef:9c:11:be:f5:44:01:b0:25:ce:
d5:a4:04:20:a9:82:6d:b3:b1:c9:79:c3:e1:56:02:71:b6:f5:
a1:b7:85:89:37:6a:bc:91:cb:5b:2d:3e:c0:0d:ec:34:10:d9:
64:d3:ea:ef:9b:e5:a7:5c:e0:66:42:cf:6f:16:d0:27:bc:25:
7b:e4:dc:e7:f3:af:87:b3:8f:b3:bf:c3:99:fa:ec:fd:57:e5:
aa:49:43:34:a1:bc:40:92:8e:13:e0:b6:ff:05:57:56:41:67:
06:5c:a4:bf:db:01:ca:b8:8f:f2:cf:dc:c6:8c:36:9c:05:c7:
07:94:96:fd:cc:70:36:3e:a7:3f:1e:6f:77:98:62:0f:0a:ad:
ab:d3:fb:0b:da:dc:05:c5:39:ba:45:50:80:da:0a:71:80:fd:
45:58:d1:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:01:39 2025 by rpki-client