Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/bb46f5-9ff2-4058-9050-fbdcb1a41467/1/S3lvCzBRtbyBSy6Jy0cKOCayvwA.mft
File: S3lvCzBRtbyBSy6Jy0cKOCayvwA.mft (raw, json)
Hash identifier: o7wtgZ6yW94+8SuAkpa332DupOYpjfrbUrN8C9RIqbs=
Subject key identifier: 6B:7F:A2:06:B7:03:B5:A0:C5:9C:0D:8F:A0:9C:BE:3A:19:0C:3B:BC
Authority key identifier: 4B:79:6F:0B:30:51:B5:BC:81:4B:2E:89:CB:47:0A:38:26:B2:BF:00
Certificate issuer: /CN=4b796f0b3051b5bc814b2e89cb470a3826b2bf00
Certificate serial: 0194BC7312D8F09AB376202BA31AB92DF314
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S3lvCzBRtbyBSy6Jy0cKOCayvwA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/bb46f5-9ff2-4058-9050-fbdcb1a41467/1/S3lvCzBRtbyBSy6Jy0cKOCayvwA.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 13:00:45 +0000
Manifest this update: Fri 31 Jan 2025 13:00:45 +0000
Manifest next update: Sat 01 Feb 2025 13:00:45 +0000
Files and hashes: 1: RrQG9mTNvqijfpK9hxxi5arQQl8.roa (hash: 68l7WOhFiSwMdfEHVW7iQtxBS25LLIy1s/fmM858aaI=)
2: S3lvCzBRtbyBSy6Jy0cKOCayvwA.crl (hash: pokIE5rh+6oUedGnih4l0nJAidXOnUl8co2CpqsZ/Fc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:12:d8:f0:9a:b3:76:20:2b:a3:1a:b9:2d:f3:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b796f0b3051b5bc814b2e89cb470a3826b2bf00
Validity
Not Before: Jan 31 13:00:45 2025 GMT
Not After : Feb 1 13:00:45 2025 GMT
Subject: CN=6b7fa206b703b5a0c59c0d8fa09cbe3a190c3bbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:06:46:a6:92:a3:81:1c:cf:5e:35:30:4d:33:
f3:df:73:c2:3f:9e:53:8c:65:2c:01:5c:bd:3f:97:
40:d9:5f:0f:1b:0f:1a:7d:10:23:e9:03:de:e1:0d:
8f:7d:ec:6b:cb:9f:a4:eb:c6:52:12:76:a4:0f:57:
85:f8:8c:d8:f2:73:b3:d3:47:42:ac:c3:7f:7a:cb:
ce:7d:40:57:e5:b7:f5:b1:a2:ff:d7:f0:f1:4f:e2:
d9:00:ef:6d:81:a9:e4:0f:a0:3b:ad:8d:7f:08:70:
c1:41:dd:8d:cc:22:75:e0:12:71:02:df:3a:14:bd:
7e:a9:91:53:a1:cb:65:1c:18:2f:4f:46:ca:18:08:
cf:59:61:ac:53:a7:2b:0b:63:a3:b9:dc:c6:22:84:
2b:63:c5:e1:8a:25:0d:81:43:27:4d:97:81:49:e9:
bc:4a:0f:9f:c9:7a:63:f0:e7:7d:a6:d1:fb:08:7f:
4f:02:de:c9:4d:1f:13:84:93:90:34:d7:8f:f5:c4:
a8:04:4e:db:ec:10:9d:ee:f3:0a:47:b2:85:cf:8b:
f6:77:d5:25:37:06:d3:a4:eb:bf:54:f9:5b:76:44:
3b:01:25:0e:ed:1a:20:8c:a6:3f:18:55:b1:6b:5a:
e8:de:1f:48:ff:ce:fa:b3:b5:15:46:b6:d7:6f:ee:
1c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:7F:A2:06:B7:03:B5:A0:C5:9C:0D:8F:A0:9C:BE:3A:19:0C:3B:BC
X509v3 Authority Key Identifier:
keyid:4B:79:6F:0B:30:51:B5:BC:81:4B:2E:89:CB:47:0A:38:26:B2:BF:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S3lvCzBRtbyBSy6Jy0cKOCayvwA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/bb46f5-9ff2-4058-9050-fbdcb1a41467/1/S3lvCzBRtbyBSy6Jy0cKOCayvwA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/bb46f5-9ff2-4058-9050-fbdcb1a41467/1/S3lvCzBRtbyBSy6Jy0cKOCayvwA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:e6:2c:94:1b:28:e3:26:74:76:09:19:6c:10:a3:91:c5:98:
3a:56:e4:b4:40:7c:3b:07:c7:79:71:49:7f:ac:1e:43:7c:f5:
1c:9d:23:05:f9:98:dd:00:9d:9b:1e:25:b4:bf:8c:a2:4b:4e:
96:ef:ba:61:84:23:8d:27:16:c0:f4:88:a9:e8:f4:af:6d:0a:
2f:0d:3d:3d:82:f8:56:7f:e6:f6:08:b0:39:9a:d8:0e:0f:ba:
91:59:62:da:73:c4:70:9c:8e:26:ab:3f:76:37:d1:bd:7b:80:
5e:72:b1:c7:49:52:ee:0e:e0:ed:2d:71:a3:56:b9:e0:73:56:
ea:60:08:dd:9e:7c:3e:c2:e2:59:9f:44:aa:e2:80:5d:eb:0f:
4d:ea:07:63:ce:d8:22:3e:7b:5c:05:30:d1:34:72:b3:d1:06:
f5:dc:e9:90:77:be:cd:d5:d4:e6:9b:64:e6:53:b7:5d:63:05:
06:8f:86:09:7a:4d:53:a4:66:75:d5:cb:18:62:ac:c9:c2:da:
97:59:69:f6:81:bb:81:2d:cf:67:23:de:1f:fc:4e:7c:f4:9c:
da:5e:12:97:15:df:b3:ce:f8:bf:f0:6c:f5:d6:11:75:ff:0e:
5e:0f:ab:68:33:b6:20:f8:cb:ac:f7:49:39:41:e4:57:7e:b4:
d2:9e:01:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:26 2025 by rpki-client