Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/af31ab-2e34-47fb-9611-223a4d94709e/1/syu38vqMQUxnGIvau_t2IVaTuoc.mft
File: syu38vqMQUxnGIvau_t2IVaTuoc.mft (raw, json)
Hash identifier: MLyM3H9GSsgI125BHYFaNXDk6t0fwi9dXWCFxKW/TkM=
Subject key identifier: 7F:52:7A:3D:38:7F:EB:54:38:1E:A0:41:FF:87:C9:D3:EB:C6:5C:FA
Authority key identifier: B3:2B:B7:F2:FA:8C:41:4C:67:18:8B:DA:BB:FB:76:21:56:93:BA:87
Certificate issuer: /CN=b32bb7f2fa8c414c67188bdabbfb76215693ba87
Certificate serial: 0194BD4E99D13F672C3BF364525C8F7FE9D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/syu38vqMQUxnGIvau_t2IVaTuoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/af31ab-2e34-47fb-9611-223a4d94709e/1/syu38vqMQUxnGIvau_t2IVaTuoc.mft
Manifest number: 0226
Signing time: Fri 31 Jan 2025 17:00:32 +0000
Manifest this update: Fri 31 Jan 2025 17:00:32 +0000
Manifest next update: Sat 01 Feb 2025 17:00:32 +0000
Files and hashes: 1: dlFU-VFKr3DcjZAchl6XqyqKK5c.roa (hash: neVLf32lP2kuQND5P5wXOeNSgGn0qOcZGwTsUoY1fZs=)
2: syu38vqMQUxnGIvau_t2IVaTuoc.crl (hash: XG2zdqEeVhLN4iC2eWFsuaxWlz7ccOL47VJK4KUb31U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:99:d1:3f:67:2c:3b:f3:64:52:5c:8f:7f:e9:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b32bb7f2fa8c414c67188bdabbfb76215693ba87
Validity
Not Before: Jan 31 17:00:32 2025 GMT
Not After : Feb 1 17:00:32 2025 GMT
Subject: CN=7f527a3d387feb54381ea041ff87c9d3ebc65cfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:0a:44:18:ac:be:65:99:65:5e:86:a7:9a:88:
3c:2f:62:88:90:07:06:58:c2:09:ba:af:e1:d7:70:
57:f2:7f:91:06:03:77:fa:cc:fb:10:2b:d0:69:04:
e8:4e:13:f5:fa:26:fa:e2:f8:51:9e:db:60:50:ff:
04:97:09:60:91:1b:be:de:45:85:e7:1c:9a:81:62:
a1:1a:74:15:fa:0d:0a:43:3f:7f:17:85:75:1f:41:
79:22:b4:21:52:ea:5a:11:b4:66:fb:40:cb:fb:11:
d6:a7:90:5f:18:8e:7f:c5:77:ef:cc:2f:c1:93:19:
41:34:6f:5c:e9:5e:cc:dc:43:c2:1c:69:80:0f:37:
67:8c:1e:83:45:c9:ef:4d:bb:a1:dc:8a:6c:15:ed:
60:f9:01:4a:d2:67:6f:93:99:14:9e:31:25:53:57:
cd:d2:f3:62:97:23:f3:4f:d3:ae:f9:51:a2:4a:00:
8a:d7:71:7b:ba:6f:97:12:a6:f5:8a:3d:fa:b2:a5:
fc:3b:4e:8c:cf:c4:65:cd:60:f9:df:4d:e0:ed:86:
0f:e8:e1:60:82:e0:6c:4a:e6:4d:6f:83:37:a0:35:
33:88:80:eb:1f:b9:fa:e8:fe:71:3b:bf:ae:3c:03:
94:e8:22:53:a7:0d:b7:75:67:45:39:cf:3a:6e:0d:
ad:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:52:7A:3D:38:7F:EB:54:38:1E:A0:41:FF:87:C9:D3:EB:C6:5C:FA
X509v3 Authority Key Identifier:
keyid:B3:2B:B7:F2:FA:8C:41:4C:67:18:8B:DA:BB:FB:76:21:56:93:BA:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/syu38vqMQUxnGIvau_t2IVaTuoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/af31ab-2e34-47fb-9611-223a4d94709e/1/syu38vqMQUxnGIvau_t2IVaTuoc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/af31ab-2e34-47fb-9611-223a4d94709e/1/syu38vqMQUxnGIvau_t2IVaTuoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:e4:66:5c:fd:71:07:f8:3e:d7:64:c4:6f:9d:66:3a:f0:e6:
3c:b7:41:d1:c3:b7:ff:30:dc:2c:7f:6a:b3:ee:6b:71:f0:2c:
ab:75:6f:ad:a4:77:85:04:78:a8:6b:f1:f9:28:7f:e2:69:9c:
9e:b8:ac:da:02:5a:2b:e7:89:93:99:5c:c8:a3:be:6b:03:00:
e2:4c:bb:84:31:47:e8:17:aa:75:0e:47:b9:2e:94:fe:17:e5:
8e:8f:7b:da:b3:e0:5d:a9:94:45:30:bd:61:b4:41:e4:d5:c8:
56:9b:d3:1b:fe:8b:12:60:30:1c:f4:de:6e:37:0f:41:c3:fd:
14:13:61:9f:c4:6e:82:79:12:86:de:a3:d2:e8:d9:ff:db:3c:
be:67:66:5d:c1:04:bf:cc:fc:1a:8b:97:ab:2b:89:9b:b1:3e:
12:dd:66:12:87:c8:6b:e2:fd:e7:54:0d:74:64:6e:9d:21:cc:
4b:fa:da:66:57:48:40:2d:7a:f7:6f:75:f8:18:2b:9e:64:56:
56:4e:03:93:69:03:73:fd:90:86:fd:bf:e6:a8:a3:2b:8c:c4:
3b:ca:0d:db:98:2e:15:ae:a7:ce:52:a3:ec:b4:78:4e:68:0c:
74:bd:b4:2b:b3:0a:66:9a:ac:50:36:06:37:50:d1:41:7b:e9:
b3:f7:61:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:41:39 2025 by rpki-client