Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/70a499-c87e-4546-8950-b704ee27c65c/1/S92aEzqSSGoU7cTnYlsk-V04kcw.mft
File: S92aEzqSSGoU7cTnYlsk-V04kcw.mft (raw, json)
Hash identifier: iXu8U0U5EPeo7ffw9SMoRtUy9WCrjLMAg3IBguSYjdQ=
Subject key identifier: 94:DC:2F:FC:89:7C:CD:BB:80:38:49:E5:9D:F9:D4:D7:66:BE:65:93
Authority key identifier: 4B:DD:9A:13:3A:92:48:6A:14:ED:C4:E7:62:5B:24:F9:5D:38:91:CC
Certificate issuer: /CN=4bdd9a133a92486a14edc4e7625b24f95d3891cc
Certificate serial: 0194BC72AC07991585289B424C463E7402C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S92aEzqSSGoU7cTnYlsk-V04kcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/70a499-c87e-4546-8950-b704ee27c65c/1/S92aEzqSSGoU7cTnYlsk-V04kcw.mft
Manifest number: 0615
Signing time: Fri 31 Jan 2025 13:00:19 +0000
Manifest this update: Fri 31 Jan 2025 13:00:19 +0000
Manifest next update: Sat 01 Feb 2025 13:00:19 +0000
Files and hashes: 1: S92aEzqSSGoU7cTnYlsk-V04kcw.crl (hash: 8duEq6VJOTILU9bpw9t+LkBRUZ1jUlE2C3Nc3Hy37Bw=)
2: takXMVWWq86gQFEdW1EUOBKN5bA.roa (hash: aj1iYELR5J1LrrkI2DJAheQdQ03iRDb31bSm3xq1fzk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:ac:07:99:15:85:28:9b:42:4c:46:3e:74:02:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bdd9a133a92486a14edc4e7625b24f95d3891cc
Validity
Not Before: Jan 31 13:00:19 2025 GMT
Not After : Feb 1 13:00:19 2025 GMT
Subject: CN=94dc2ffc897ccdbb803849e59df9d4d766be6593
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e0:a2:5f:6c:27:27:5e:76:6c:02:c4:50:2d:
38:17:cf:92:92:f1:5b:33:05:d1:56:2e:3c:21:ec:
03:30:00:cb:f5:29:68:2b:a5:16:a1:8c:60:b3:2f:
89:2b:f5:7e:98:31:45:f8:13:b2:ed:06:31:90:4d:
65:02:ce:72:6c:3f:5e:aa:61:2b:60:4e:8c:b7:ab:
61:8b:3d:4c:9f:84:76:25:44:68:73:fe:a7:06:80:
b0:8c:67:c7:c9:2c:ac:41:e0:82:c3:cd:17:a5:96:
c6:94:75:32:6c:6c:66:05:c2:a5:7a:f3:ab:12:7b:
96:b5:64:f3:88:5d:24:02:03:f6:30:69:a9:15:31:
f4:cb:2f:2e:22:60:3e:fa:42:dd:f3:24:f1:92:66:
b8:aa:7a:e2:b1:ef:57:04:91:89:01:eb:d7:56:36:
32:c6:2f:af:86:0f:7d:ce:a0:ca:46:54:6c:38:56:
43:12:96:3b:86:40:97:76:6f:45:5d:a5:27:8c:48:
19:f5:47:1d:13:d0:56:b3:1e:59:13:7b:6a:f9:fb:
23:15:eb:ad:42:2f:e5:b2:c8:bf:e8:ca:6d:f4:36:
be:4f:57:df:fd:c7:97:75:bf:0b:c0:90:04:d4:6c:
da:d3:dd:1b:8f:d8:46:ef:37:17:08:e6:de:09:d5:
a6:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:DC:2F:FC:89:7C:CD:BB:80:38:49:E5:9D:F9:D4:D7:66:BE:65:93
X509v3 Authority Key Identifier:
keyid:4B:DD:9A:13:3A:92:48:6A:14:ED:C4:E7:62:5B:24:F9:5D:38:91:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S92aEzqSSGoU7cTnYlsk-V04kcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/70a499-c87e-4546-8950-b704ee27c65c/1/S92aEzqSSGoU7cTnYlsk-V04kcw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/70a499-c87e-4546-8950-b704ee27c65c/1/S92aEzqSSGoU7cTnYlsk-V04kcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:3b:4d:13:23:04:3c:f6:20:ea:ee:0c:e8:91:67:93:30:16:
31:fe:c8:2e:e3:b0:07:d5:88:d1:bf:e1:93:4a:a7:78:97:e3:
8f:40:df:dd:a1:91:27:82:6c:47:35:15:79:22:7c:0c:bc:ee:
aa:4a:91:7e:35:dd:f7:1d:ea:97:7c:b2:92:ec:fc:b5:0d:8c:
ef:72:69:71:91:3f:a4:63:52:25:39:64:1e:3f:5e:88:ca:96:
9f:c1:5a:81:89:92:e6:d3:2d:a5:80:d1:a1:7b:2f:75:86:e6:
24:54:be:e2:e0:79:1a:90:21:80:8f:5a:60:13:5e:e8:dd:62:
99:41:da:b2:33:9d:90:39:ec:0a:d8:ae:aa:82:92:00:3d:ad:
9f:5b:43:70:35:e2:6a:b5:9f:a3:ea:a0:2b:c9:9e:23:d7:b5:
79:bc:06:67:e9:d5:ec:da:74:2e:e7:d3:a6:5d:53:fa:c8:3b:
30:62:7a:71:36:e2:16:b6:d5:fa:71:eb:30:64:f4:48:0e:5c:
7e:db:1f:32:5e:32:8d:d5:13:5c:ed:e5:1c:60:15:8d:b2:16:
e5:eb:bf:57:1f:69:fe:c8:15:24:ab:27:15:10:b8:35:8d:78:
24:bf:0f:55:5c:ff:e0:49:14:4b:22:64:4e:db:2f:64:96:40:
88:0d:d6:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:14 2025 by rpki-client