Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/4291a2-03a9-4195-b1a7-3f40547e52d1/1/s4slrXyWWJ5KjKpfpIksxN_Me1M.mft
File: s4slrXyWWJ5KjKpfpIksxN_Me1M.mft (raw, json)
Hash identifier: dQFUOBALGR/fTKEt0Vmh/XwihYe4RNpMhnPkW8tPREA=
Subject key identifier: 67:BB:3B:F8:10:35:E1:AC:C2:B4:76:CB:69:79:45:57:98:B8:61:D9
Authority key identifier: B3:8B:25:AD:7C:96:58:9E:4A:8C:AA:5F:A4:89:2C:C4:DF:CC:7B:53
Certificate issuer: /CN=b38b25ad7c96589e4a8caa5fa4892cc4dfcc7b53
Certificate serial: 0194BD4EC16EDA94EFBDF08649302E601EA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s4slrXyWWJ5KjKpfpIksxN_Me1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/4291a2-03a9-4195-b1a7-3f40547e52d1/1/s4slrXyWWJ5KjKpfpIksxN_Me1M.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 17:00:42 +0000
Manifest this update: Fri 31 Jan 2025 17:00:42 +0000
Manifest next update: Sat 01 Feb 2025 17:00:42 +0000
Files and hashes: 1: JJG6lSZApZVFWCoCMzoaHnqrdjA.roa (hash: /ZXBf7GoIevwDbia6b3jjdIqB98IB5pgV+PKh4AI8CE=)
2: s4slrXyWWJ5KjKpfpIksxN_Me1M.crl (hash: h/qOzBCUJkDnS2pUAo43JolvkX61AFMBEoypbA+Qsns=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:c1:6e:da:94:ef:bd:f0:86:49:30:2e:60:1e:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b38b25ad7c96589e4a8caa5fa4892cc4dfcc7b53
Validity
Not Before: Jan 31 17:00:42 2025 GMT
Not After : Feb 1 17:00:42 2025 GMT
Subject: CN=67bb3bf81035e1acc2b476cb6979455798b861d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:c1:84:c4:ec:74:ac:00:a9:e7:f9:5e:8c:9b:
92:ad:e1:d3:c0:92:0f:eb:aa:e0:a6:58:eb:0f:35:
0f:f5:12:61:8a:c0:fe:4d:a6:e5:69:97:fb:df:07:
65:7f:fb:df:64:28:33:dc:0e:00:bf:a6:53:c4:57:
da:14:2e:a1:74:45:42:06:97:7a:10:42:a8:ff:a5:
28:86:c6:7a:71:a2:44:f5:4a:fb:45:7a:26:2a:16:
6c:3f:a3:51:21:a9:ef:9c:2a:5b:b6:52:46:57:cd:
8f:4e:c4:4e:af:08:50:f8:fe:ac:96:49:b9:1f:f7:
78:62:5e:e5:44:bd:ea:7b:26:6b:72:0f:f0:cf:f1:
4c:9c:f4:2a:ae:ce:85:c4:50:e3:ed:5b:67:68:71:
32:66:b5:70:28:30:79:c9:50:b8:43:28:f5:69:74:
73:3d:a2:5b:ee:41:da:84:c1:6b:af:67:91:79:ea:
79:b6:f2:0d:ab:aa:33:3d:b5:18:32:1a:67:7e:eb:
5e:ed:a8:2f:31:c0:7a:c1:67:7e:a2:99:5a:cf:09:
52:85:ad:eb:73:51:ae:bd:0a:2b:7a:14:e3:8b:eb:
83:fe:76:a3:94:51:58:d5:be:8f:82:c2:22:68:9e:
15:c4:8d:ca:36:df:4c:16:6d:82:73:3c:2c:72:a9:
f8:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:BB:3B:F8:10:35:E1:AC:C2:B4:76:CB:69:79:45:57:98:B8:61:D9
X509v3 Authority Key Identifier:
keyid:B3:8B:25:AD:7C:96:58:9E:4A:8C:AA:5F:A4:89:2C:C4:DF:CC:7B:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s4slrXyWWJ5KjKpfpIksxN_Me1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/4291a2-03a9-4195-b1a7-3f40547e52d1/1/s4slrXyWWJ5KjKpfpIksxN_Me1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/4291a2-03a9-4195-b1a7-3f40547e52d1/1/s4slrXyWWJ5KjKpfpIksxN_Me1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:b6:11:90:22:e1:51:d4:17:f7:da:34:aa:1c:dc:b6:60:da:
58:56:3d:ec:8c:d5:44:34:9c:ef:21:f0:b0:c3:7b:20:d4:40:
8d:d2:16:83:cd:66:01:16:9c:02:0d:89:46:84:c0:9a:d4:fa:
83:02:65:2b:e0:2e:28:c5:7d:f5:c8:ba:25:6c:3c:b9:6c:9a:
26:14:0c:1d:1e:75:8f:a6:a0:ce:cf:e2:1d:dc:51:34:16:7c:
f3:df:26:b4:9f:7c:ab:89:78:33:de:41:66:b2:fb:3a:dd:df:
d4:f4:d8:be:cb:e8:87:2f:ad:9e:16:88:67:94:c6:3b:1c:d8:
80:e1:e7:4f:30:49:e7:63:07:ba:c4:fc:6a:46:ec:0e:6e:15:
0e:23:36:7a:05:5d:52:93:19:4b:55:e3:48:e3:5b:a6:56:22:
0a:c2:e6:f2:ec:6e:63:14:10:08:b8:49:8a:9c:e0:3a:b5:9f:
a0:66:ec:22:31:61:e9:64:db:9f:2a:83:90:eb:1a:96:f5:f5:
e6:a0:67:be:2c:56:4f:e3:13:91:cf:d7:b0:05:76:8b:88:ff:
84:49:11:e6:2a:d4:87:9f:d3:f1:72:0b:b0:57:f9:66:45:21:
45:cf:53:48:d6:b6:20:57:b3:52:2c:a2:43:29:a0:43:4b:26:
00:ca:88:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:37:57 2025 by rpki-client