Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/8af8af-59a4-420c-9e3e-d482da9804d7/1/spvHpkk9OBeN1_XpxJDI7zqKWYs.mft
File: spvHpkk9OBeN1_XpxJDI7zqKWYs.mft (raw, json)
Hash identifier: cNidnrD7kPTcNHPCrKFlrygm/s2mJ81nzI6IL2tUp4Q=
Subject key identifier: 3D:50:11:D5:83:ED:10:4F:19:76:B2:E0:E9:6D:CF:3E:D4:18:DB:4E
Authority key identifier: B2:9B:C7:A6:49:3D:38:17:8D:D7:F5:E9:C4:90:C8:EF:3A:8A:59:8B
Certificate issuer: /CN=b29bc7a6493d38178dd7f5e9c490c8ef3a8a598b
Certificate serial: 0194BD17993F10D7152199F5BC16448DD285
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/spvHpkk9OBeN1_XpxJDI7zqKWYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/8af8af-59a4-420c-9e3e-d482da9804d7/1/spvHpkk9OBeN1_XpxJDI7zqKWYs.mft
Manifest number: 2D
Signing time: Fri 31 Jan 2025 16:00:27 +0000
Manifest this update: Fri 31 Jan 2025 16:00:27 +0000
Manifest next update: Sat 01 Feb 2025 16:00:27 +0000
Files and hashes: 1: _a9iaZrjBk-wbx-ww9Y6UH5mTzg.roa (hash: 5gzPI03HllGyMTQY0xFdUnePky078f9CBw1LIzGaktA=)
2: spvHpkk9OBeN1_XpxJDI7zqKWYs.crl (hash: RtplV4ZRXqQOWl8BCmfo0lukk7uB8TlFa6wl5joQlOc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:99:3f:10:d7:15:21:99:f5:bc:16:44:8d:d2:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b29bc7a6493d38178dd7f5e9c490c8ef3a8a598b
Validity
Not Before: Jan 31 16:00:27 2025 GMT
Not After : Feb 1 16:00:27 2025 GMT
Subject: CN=3d5011d583ed104f1976b2e0e96dcf3ed418db4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ef:b3:9e:5e:a9:9b:d6:7b:8e:b4:43:22:33:
59:93:5f:af:72:ea:4a:19:8a:e1:94:c2:82:46:5c:
2d:06:19:66:01:5d:05:1e:1b:1b:81:4f:3e:1c:d7:
04:44:3a:40:98:99:1b:ef:f1:d0:ae:c3:63:ff:5c:
9c:e2:03:80:e0:70:a4:dd:e2:eb:4d:19:bf:f4:6e:
11:f9:d8:4e:76:6c:62:a5:89:81:57:04:55:e9:7d:
13:7d:fd:02:dd:cd:8b:c7:35:30:9b:b3:30:3b:c0:
bd:f8:72:8b:f0:b0:56:10:0d:16:ed:87:91:be:1f:
d6:52:5b:08:2e:84:fe:83:98:ed:96:4c:0b:48:e5:
e1:b9:90:a8:7b:ca:0a:b9:19:37:d4:e6:f2:bc:a9:
af:16:1c:65:bd:5f:53:2b:7f:6e:ed:1c:02:f9:5a:
b8:07:b9:f3:aa:42:21:ca:5e:98:a3:2a:d4:50:b1:
41:62:49:a3:81:ed:f7:bb:c1:e3:64:e7:78:2a:5b:
bb:e9:90:5e:b0:77:b8:15:a0:8a:be:1a:5e:36:c2:
29:d6:7e:0a:51:e5:6b:02:40:13:ad:3a:e9:61:41:
54:e1:12:f5:77:cf:6e:07:b3:d1:0c:ff:06:6a:80:
a9:47:a2:df:cd:aa:5a:a7:2e:84:20:37:03:8b:87:
96:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:50:11:D5:83:ED:10:4F:19:76:B2:E0:E9:6D:CF:3E:D4:18:DB:4E
X509v3 Authority Key Identifier:
keyid:B2:9B:C7:A6:49:3D:38:17:8D:D7:F5:E9:C4:90:C8:EF:3A:8A:59:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/spvHpkk9OBeN1_XpxJDI7zqKWYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/8af8af-59a4-420c-9e3e-d482da9804d7/1/spvHpkk9OBeN1_XpxJDI7zqKWYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/8af8af-59a4-420c-9e3e-d482da9804d7/1/spvHpkk9OBeN1_XpxJDI7zqKWYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:74:14:3b:82:82:6f:c4:89:80:56:10:75:9b:3d:5d:6e:9c:
fd:89:ac:96:86:ce:65:4a:a2:18:46:7c:87:b7:d8:07:d8:5e:
d5:bc:b4:da:a4:eb:d6:63:6b:78:98:a0:e8:1f:f3:46:62:5f:
92:91:19:e6:c9:b9:17:5c:b8:bd:7b:5f:a1:98:fa:fe:1c:d1:
e4:a6:9c:47:96:b9:fe:ae:a1:37:25:dd:c9:52:38:96:ee:c5:
00:3e:86:1b:ae:17:71:54:8c:2b:b2:fd:26:85:76:ab:27:81:
10:3f:ac:07:dd:09:83:be:3f:ca:5e:53:98:58:55:73:67:b9:
cd:c2:c5:f6:cc:40:95:2a:e8:6e:72:47:b3:2e:cf:bd:ad:ed:
de:db:5d:46:eb:ae:a3:ac:e9:3b:9f:2c:33:dc:5b:09:72:cc:
a8:d5:6e:ff:11:93:18:88:e3:87:b4:09:c8:7e:2a:1f:7b:dc:
45:8e:95:6b:ec:85:e4:e7:78:3a:ff:a7:91:da:cc:fc:96:67:
de:27:c3:ca:17:54:39:ee:c3:29:5f:a2:0d:ea:2b:31:e7:5a:
87:6b:23:63:4b:d9:b6:72:de:62:13:89:d2:3f:2d:96:a3:6f:
2e:d1:46:d6:8a:cd:f2:9f:ca:fb:4f:f7:07:bb:8a:21:d2:8c:
44:f9:49:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:01:03 2025 by rpki-client