Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.mft
File: SSFvXBZbgnp_1z2BB669L2PGPiQ.mft (raw, json)
Hash identifier: L3J7iLMeivPT9Rj3lPEqVv//z5e+HG3zsneuEi8TWBI=
Subject key identifier: C7:43:D2:3A:19:19:A1:83:34:1B:10:56:77:AD:FB:59:E7:C9:F2:67
Authority key identifier: 49:21:6F:5C:16:5B:82:7A:7F:D7:3D:81:07:AE:BD:2F:63:C6:3E:24
Certificate issuer: /CN=49216f5c165b827a7fd73d8107aebd2f63c63e24
Certificate serial: 0194BCE0CC42FC5F58AC37B3857EEE56DD1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.mft
Manifest number: 0512
Signing time: Fri 31 Jan 2025 15:00:36 +0000
Manifest this update: Fri 31 Jan 2025 15:00:36 +0000
Manifest next update: Sat 01 Feb 2025 15:00:36 +0000
Files and hashes: 1: A1guMuAVVPzFAlZ1kvL2s23Xp5E.roa (hash: Cez++p4i/mbLT8G62B+feBdbGZsbaAt0xOgP1g59e1A=)
2: O442f9rKCameMmZGS2am4On1RJE.roa (hash: Tjn+0NJyIaKfDErYElD/Vnb1U5GiOqlQwXo7lUYpajU=)
3: SSFvXBZbgnp_1z2BB669L2PGPiQ.crl (hash: sxxGRN9dMK1Zrh/2v4YExOytNNa3UM+IXGy4jn/5Ogc=)
4: bSKF4VwooFMbxKgLiCU0SQx_pdU.roa (hash: 6FTyl2dLsU56FvR+R1gGj60wHte2yEaImNojMX7q73I=)
5: oX3OGzwxfpoj75NeGxUgbWj5Nag.roa (hash: AUpPKp6STpZ3+I37dxgfx0DnwlKN78RdnPEKRCGUs1k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:cc:42:fc:5f:58:ac:37:b3:85:7e:ee:56:dd:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49216f5c165b827a7fd73d8107aebd2f63c63e24
Validity
Not Before: Jan 31 15:00:36 2025 GMT
Not After : Feb 1 15:00:36 2025 GMT
Subject: CN=c743d23a1919a183341b105677adfb59e7c9f267
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:7d:1c:1d:c2:56:10:23:22:45:14:35:2d:b4:
7b:65:53:cf:55:5e:a1:dc:53:a3:3d:09:38:f3:84:
e5:11:e9:7e:cc:0a:7f:e7:d2:74:c6:77:a0:28:b7:
44:40:95:ad:05:a8:dc:28:47:eb:0a:bd:10:6d:c2:
8f:b7:78:19:f3:32:a2:94:ed:b2:28:ec:2c:26:bb:
85:95:bc:4b:cd:8c:95:d7:0a:b6:c5:0f:78:51:db:
99:07:0e:39:63:f4:15:83:0d:62:92:f3:83:af:0e:
c5:b8:0d:d7:78:03:df:83:21:8a:4b:e9:c0:f7:be:
0a:33:da:ba:15:10:3f:b8:b7:e1:df:93:36:de:67:
40:51:98:89:1f:ee:38:1e:c6:13:43:9f:ec:45:69:
47:9e:8b:cb:8f:5e:72:d5:7d:c7:fa:fd:b8:1e:01:
12:10:19:00:05:f3:f0:f0:ff:cc:6d:88:5d:0b:f0:
f3:85:7c:46:d4:53:96:43:05:b1:5b:32:85:ca:45:
f1:cc:cd:59:90:fa:49:0e:b0:3f:28:0f:d3:05:33:
d3:51:3f:4e:e8:b3:d5:b5:b9:64:42:69:f0:1f:74:
f3:60:ec:62:47:8f:b7:7d:0a:23:6b:93:08:9d:de:
1c:d9:35:f9:2d:ce:0d:51:29:89:32:e6:39:1d:62:
c7:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:43:D2:3A:19:19:A1:83:34:1B:10:56:77:AD:FB:59:E7:C9:F2:67
X509v3 Authority Key Identifier:
keyid:49:21:6F:5C:16:5B:82:7A:7F:D7:3D:81:07:AE:BD:2F:63:C6:3E:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:f6:1d:93:85:00:d8:da:9b:fe:df:8f:c7:72:61:16:aa:b1:
5c:a0:e8:8b:18:da:b8:5e:60:ea:1e:40:fc:79:e6:b2:63:d0:
15:a3:a8:c3:c3:ec:38:c7:74:36:39:7d:13:7e:19:9e:c9:ac:
6e:30:98:ec:41:ea:58:b5:d3:50:c2:54:bd:b9:1e:a8:8e:fa:
de:c6:d6:14:96:e5:1c:98:0a:62:ec:ed:e7:62:80:5f:c7:6a:
48:3c:c2:a9:ce:67:b5:eb:33:15:05:02:22:29:ff:d7:10:11:
f6:f7:9d:8a:3c:58:53:1d:62:51:8c:7d:0b:55:83:a4:8d:ec:
b8:08:f5:02:9f:e7:ab:bc:b6:28:eb:a1:18:5d:98:b9:23:19:
81:2b:44:04:2e:cf:96:01:02:12:7e:24:f0:31:79:47:a4:97:
bf:05:a2:46:6d:32:b3:db:95:e1:67:04:6f:9c:ee:64:6d:b9:
c6:61:ed:f4:34:89:1f:08:73:50:69:18:b6:67:b1:fe:79:31:
a9:e2:8e:86:83:c6:d4:f1:c1:4a:65:11:5f:6b:30:66:6f:4b:
17:ba:98:83:dd:c8:53:d1:1d:ff:ca:2f:56:77:5f:c0:84:82:
4f:59:c3:8f:a0:99:f1:26:ed:7a:6d:53:ee:fb:71:e8:5e:e3:
cc:7e:74:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:33 2025 by rpki-client