Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/3ae56e-bf96-4896-a68d-9cff8496e334/1/S7vBBpd1qASAa1C67X7OhIq96Kc.mft
File: S7vBBpd1qASAa1C67X7OhIq96Kc.mft (raw, json)
Hash identifier: 1AwUC+VwTOS10F3nX3USxp6qfRwBGMAFlKqnJh7kVwg=
Subject key identifier: 67:A0:61:5E:2A:0E:DC:86:C3:67:DB:56:ED:EB:E2:4C:B2:DF:87:3B
Authority key identifier: 4B:BB:C1:06:97:75:A8:04:80:6B:50:BA:ED:7E:CE:84:8A:BD:E8:A7
Certificate issuer: /CN=4bbbc1069775a804806b50baed7ece848abde8a7
Certificate serial: 0194BD176E6327EE910E25B0853DAC76F3A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S7vBBpd1qASAa1C67X7OhIq96Kc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/3ae56e-bf96-4896-a68d-9cff8496e334/1/S7vBBpd1qASAa1C67X7OhIq96Kc.mft
Manifest number: 0D01
Signing time: Fri 31 Jan 2025 16:00:16 +0000
Manifest this update: Fri 31 Jan 2025 16:00:16 +0000
Manifest next update: Sat 01 Feb 2025 16:00:16 +0000
Files and hashes: 1: S7vBBpd1qASAa1C67X7OhIq96Kc.crl (hash: cOxBrP/yxrKOBEOn8I8mcM1L7V90qnRAppSEeBKtuTo=)
2: kOwiiAs2eR9pLFxLIBL1AOIYN3E.roa (hash: 3SQNAvfGJwEZLUa1WsSC2ImeHyAv94EKwUzIAUYUAnM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:6e:63:27:ee:91:0e:25:b0:85:3d:ac:76:f3:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bbbc1069775a804806b50baed7ece848abde8a7
Validity
Not Before: Jan 31 16:00:16 2025 GMT
Not After : Feb 1 16:00:16 2025 GMT
Subject: CN=67a0615e2a0edc86c367db56edebe24cb2df873b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:91:0d:f8:d9:3b:a6:4e:61:93:76:c2:54:39:
f6:d4:2b:9d:9e:4f:0c:7e:8b:92:13:f1:30:85:0e:
94:a5:ea:e6:24:fb:8d:45:02:f6:6a:8e:7d:16:9f:
34:93:ba:af:d6:2a:5c:c1:93:d0:ec:0e:bb:7f:ea:
b3:3e:ce:e5:26:57:24:c0:6b:44:c2:18:e6:ba:d6:
1a:b5:c5:9e:cf:6a:4b:38:12:f2:55:4b:8e:41:45:
7f:3a:4d:01:fe:b0:4f:d7:0c:63:ba:9f:65:e7:8a:
bb:f4:8d:62:41:70:e9:6f:3f:3c:74:7e:c8:2a:98:
00:94:28:16:fe:27:9b:06:0d:3a:5b:43:4f:d1:89:
fc:ea:0d:8d:1c:cb:f6:b4:2f:a9:93:91:91:c4:5b:
b8:c0:46:db:5b:37:75:af:93:80:a5:a8:63:09:dc:
6c:c9:c8:16:84:e0:8e:0a:73:d9:7a:90:cb:4c:79:
e3:b4:c7:e5:48:8b:96:f1:86:7c:c4:49:a2:91:67:
e1:c4:9d:f6:2d:6d:53:1e:08:73:0c:fb:87:80:ac:
e6:22:13:02:15:49:45:8f:d4:10:90:ef:7c:5d:61:
35:61:44:d6:cd:58:61:43:8b:9d:94:f8:2e:c4:39:
5a:d4:fc:e7:e3:e7:ba:f0:37:a0:b1:2c:83:2c:7b:
ea:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:A0:61:5E:2A:0E:DC:86:C3:67:DB:56:ED:EB:E2:4C:B2:DF:87:3B
X509v3 Authority Key Identifier:
keyid:4B:BB:C1:06:97:75:A8:04:80:6B:50:BA:ED:7E:CE:84:8A:BD:E8:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S7vBBpd1qASAa1C67X7OhIq96Kc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/3ae56e-bf96-4896-a68d-9cff8496e334/1/S7vBBpd1qASAa1C67X7OhIq96Kc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/3ae56e-bf96-4896-a68d-9cff8496e334/1/S7vBBpd1qASAa1C67X7OhIq96Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:a6:65:ec:aa:2b:2d:8d:0d:d0:a7:b2:bc:6f:41:66:ce:0e:
fa:da:76:16:de:93:6b:ac:5e:ee:ab:ae:23:b7:8b:52:37:da:
9b:6c:7b:0c:37:76:4f:22:9c:8c:b8:11:17:98:1b:03:27:35:
9a:68:12:0c:98:ee:c8:a4:24:09:b0:2b:56:5b:f9:63:ca:ce:
45:d3:03:50:1c:e9:7f:5c:c2:3f:08:7b:70:8a:18:63:6d:68:
df:80:27:d2:af:d2:8a:90:a5:26:1d:40:71:34:6c:db:24:6d:
c0:a5:b5:1b:94:d9:8d:bf:94:7b:d2:25:5f:57:9a:85:fb:0c:
a1:69:cb:e4:d0:d0:26:50:35:10:51:eb:25:89:d2:9a:7d:8f:
b0:e1:e7:cc:58:4e:46:5c:71:ca:d8:26:63:a1:17:d4:66:c4:
28:a5:b3:5f:a4:1b:b8:3e:13:7e:26:77:e4:3f:74:98:ad:95:
c6:1a:40:f9:2d:10:7a:ae:6c:fe:97:66:83:e7:21:0b:88:07:
79:46:2f:a8:3f:68:67:32:fb:60:95:b1:1e:15:9b:78:a7:50:
1d:60:40:4d:be:4b:a6:62:84:d1:30:33:3b:e4:3a:a6:26:fc:
f8:29:af:80:d6:b1:41:8e:e8:e3:bc:1b:e3:8f:68:9e:c5:9e:
70:f8:89:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:05:29 2025 by rpki-client