Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/d5bd39-bea6-447b-83bb-f69622425651/1/S6mv0hy4--a4UIAM1LSfJWLJK6A.mft
File: S6mv0hy4--a4UIAM1LSfJWLJK6A.mft (raw, json)
Hash identifier: 1ZlMBn2oYwiG7WPzKqa4sCk4SXkov2BRlT92jwxvFMo=
Subject key identifier: 78:DE:9B:4B:E5:43:24:00:EE:09:75:E5:D4:A2:79:9B:44:63:17:0F
Authority key identifier: 4B:A9:AF:D2:1C:B8:FB:E6:B8:50:80:0C:D4:B4:9F:25:62:C9:2B:A0
Certificate issuer: /CN=4ba9afd21cb8fbe6b850800cd4b49f2562c92ba0
Certificate serial: 0194BCAA3A4AC6DA1DDD6B3CAC94F1F93444
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S6mv0hy4--a4UIAM1LSfJWLJK6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/d5bd39-bea6-447b-83bb-f69622425651/1/S6mv0hy4--a4UIAM1LSfJWLJK6A.mft
Manifest number: 080D
Signing time: Fri 31 Jan 2025 14:00:59 +0000
Manifest this update: Fri 31 Jan 2025 14:00:59 +0000
Manifest next update: Sat 01 Feb 2025 14:00:59 +0000
Files and hashes: 1: 7qAkcUK8ZlpOQk4HP0uuF0lhspY.roa (hash: ZilTYghFnWRS/ebtjdIbZ9Dk7wTzY0JMcLcLjLJ+fE8=)
2: S6mv0hy4--a4UIAM1LSfJWLJK6A.crl (hash: xQp0oX0WhA3dm4PFWLHxe34SWktQ6JFi3OcqWNVyRn8=)
3: vrYtR17Us0uRR4gxZn7liWGR4no.roa (hash: iPAbeEWSZ9JV1k70IoKGFIA+pbF0zGakCFdiJ4Nxk/U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:3a:4a:c6:da:1d:dd:6b:3c:ac:94:f1:f9:34:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ba9afd21cb8fbe6b850800cd4b49f2562c92ba0
Validity
Not Before: Jan 31 14:00:59 2025 GMT
Not After : Feb 1 14:00:59 2025 GMT
Subject: CN=78de9b4be5432400ee0975e5d4a2799b4463170f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:6d:b7:9e:c0:53:4a:31:91:1c:39:61:1e:fa:
1a:95:51:d7:a0:89:8f:a3:4a:27:d9:fd:9e:81:d1:
b7:ee:d5:3e:9e:16:a9:fa:94:e4:68:21:ed:27:0e:
f9:35:b7:2d:5a:50:53:68:5c:91:bc:8b:e1:2d:4a:
f1:bb:56:13:4b:4f:0c:62:d2:a2:6c:fd:ef:37:f4:
0c:1c:08:e9:9a:70:d8:77:dd:ae:75:19:dd:f3:5f:
04:31:ce:81:fa:6c:fa:ba:01:3e:85:d3:51:75:ef:
70:98:ab:e6:e0:85:b9:c5:2d:1b:ff:1e:41:62:43:
a0:30:c2:a6:14:b7:78:3a:1f:5e:79:86:11:41:fa:
54:fc:a2:96:32:03:61:d7:bf:dc:75:80:f4:95:2b:
82:71:ef:6c:c0:ad:a7:30:7d:34:3d:54:07:6b:77:
05:26:62:7e:05:00:b4:f5:0b:eb:1f:6e:ce:07:ad:
cc:8e:a5:f9:a7:a7:1b:dd:7c:65:f6:16:e4:f4:9c:
35:9a:4c:87:63:2d:d9:12:76:64:b0:e8:2a:c2:a1:
43:d7:ed:63:d3:70:23:d7:d4:c6:dd:35:28:5a:48:
0b:46:70:4e:c6:ec:4f:f3:b9:71:a4:5c:1b:5d:cd:
5f:3f:ab:89:07:7c:8f:c5:47:5e:21:03:7a:9a:80:
56:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:DE:9B:4B:E5:43:24:00:EE:09:75:E5:D4:A2:79:9B:44:63:17:0F
X509v3 Authority Key Identifier:
keyid:4B:A9:AF:D2:1C:B8:FB:E6:B8:50:80:0C:D4:B4:9F:25:62:C9:2B:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S6mv0hy4--a4UIAM1LSfJWLJK6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/d5bd39-bea6-447b-83bb-f69622425651/1/S6mv0hy4--a4UIAM1LSfJWLJK6A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/d5bd39-bea6-447b-83bb-f69622425651/1/S6mv0hy4--a4UIAM1LSfJWLJK6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:ae:ec:b0:16:30:29:fd:4c:03:e9:07:61:f6:8a:30:07:ca:
99:06:08:5b:75:e9:32:b9:8d:69:0a:0d:e7:76:44:e7:b9:bb:
27:e7:d6:d1:f7:48:b4:0c:1f:ca:1a:01:54:52:48:b0:b8:c2:
02:b4:fc:09:20:b5:a9:95:ff:5a:55:05:51:46:ae:a7:71:cb:
d5:37:a9:a7:90:fc:b5:2f:f4:eb:01:b1:ab:b9:3e:88:a8:cf:
b2:de:85:6a:80:7f:3f:68:3f:31:e4:b5:71:2c:dd:08:b5:6f:
07:79:d8:dc:79:e9:da:5a:a7:ac:6e:5b:34:a6:24:34:e1:5c:
9b:ab:89:3c:17:37:d7:5a:05:d4:6d:94:ae:79:02:aa:a1:72:
e9:29:a0:e1:ab:41:74:cc:9a:47:be:01:8d:ae:72:e3:04:4b:
9e:6c:74:f2:20:5d:d9:20:69:28:33:01:48:aa:50:2f:18:53:
e5:68:19:b2:6e:dc:a0:f1:53:6e:bc:d7:61:4d:74:e5:79:53:
c1:58:73:fc:90:3b:bf:f9:f9:bd:c8:4b:bb:67:2c:04:9f:1f:
71:52:17:00:1a:0a:6e:4a:28:be:62:d9:58:ba:5f:5a:38:b9:
34:3d:8e:f1:f0:b9:96:82:73:18:01:b1:a6:a4:5a:54:c7:69:
9d:c6:3f:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:15 2025 by rpki-client