Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/2aa44d-3bf3-420b-ae3e-e8a6a14419d9/1/rLg4XQhXCAz8ATqlIb3mo6k-SBI.mft
File: rLg4XQhXCAz8ATqlIb3mo6k-SBI.mft (raw, json)
Hash identifier: YyyTgoJCC1V6rCEm7BjAU4Aey9uB048txTFvXtPnaJ8=
Subject key identifier: B3:55:06:4D:D4:CC:35:B9:06:E9:72:3D:6F:BC:80:43:FA:6D:8D:26
Authority key identifier: AC:B8:38:5D:08:57:08:0C:FC:01:3A:A5:21:BD:E6:A3:A9:3E:48:12
Certificate issuer: /CN=acb8385d0857080cfc013aa521bde6a3a93e4812
Certificate serial: 0194BD4E729B8F244A276DBFF82044B21C8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rLg4XQhXCAz8ATqlIb3mo6k-SBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/2aa44d-3bf3-420b-ae3e-e8a6a14419d9/1/rLg4XQhXCAz8ATqlIb3mo6k-SBI.mft
Manifest number: DB
Signing time: Fri 31 Jan 2025 17:00:22 +0000
Manifest this update: Fri 31 Jan 2025 17:00:22 +0000
Manifest next update: Sat 01 Feb 2025 17:00:22 +0000
Files and hashes: 1: rLg4XQhXCAz8ATqlIb3mo6k-SBI.crl (hash: 1Kg4teyzai31AQGmbJnrAMY5lxHrdzQqiWY4CZp5mxg=)
2: ymqELlMii23trp9Ry-AEB-L5Gsg.roa (hash: bg95RMRsGjw0+vtsFPQKv+EI6I0p/reBLLmPNmAd/+I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:72:9b:8f:24:4a:27:6d:bf:f8:20:44:b2:1c:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acb8385d0857080cfc013aa521bde6a3a93e4812
Validity
Not Before: Jan 31 17:00:22 2025 GMT
Not After : Feb 1 17:00:22 2025 GMT
Subject: CN=b355064dd4cc35b906e9723d6fbc8043fa6d8d26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:4d:5e:25:59:09:5f:f4:f2:6f:0d:f1:07:b0:
07:68:67:c9:94:28:5d:43:4b:b6:67:c6:a0:c8:4e:
a5:20:8a:76:72:0d:f2:8f:3b:c3:f0:12:c9:20:94:
cb:b6:3b:b9:a9:69:7c:8f:3d:b2:47:1e:9a:be:cf:
0f:65:ff:c0:0d:63:9c:4b:d2:e8:e6:3c:9e:0a:99:
4d:e9:fb:a5:59:f1:56:8a:37:8d:15:a0:59:89:59:
f1:6d:ad:19:14:34:44:98:f1:45:2e:a7:a6:df:a4:
d6:2a:a0:ff:69:1b:66:ea:a9:c9:8f:7f:25:1d:5c:
53:cf:46:49:9f:1b:8e:0e:55:0d:87:a6:98:14:b7:
98:a7:b1:90:b7:d3:c6:48:06:1f:4f:ac:e5:ba:a1:
60:60:41:06:06:ff:e5:36:5c:2a:3b:2b:14:a7:a8:
68:99:b2:55:42:dc:83:1c:be:3f:fd:6c:a7:fd:94:
65:c1:22:ce:ee:c1:50:dd:64:db:c6:a4:b4:46:0f:
78:43:ae:0e:2c:f1:51:ed:3c:30:f6:cf:73:fc:a3:
9b:2a:34:4f:47:be:a7:9f:3a:54:ce:dd:94:17:2d:
77:e9:a3:4d:01:0f:a1:60:9a:8f:3b:cc:3c:32:3f:
85:1c:26:6f:a2:35:90:25:ec:1f:31:8d:93:90:2d:
ff:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:55:06:4D:D4:CC:35:B9:06:E9:72:3D:6F:BC:80:43:FA:6D:8D:26
X509v3 Authority Key Identifier:
keyid:AC:B8:38:5D:08:57:08:0C:FC:01:3A:A5:21:BD:E6:A3:A9:3E:48:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rLg4XQhXCAz8ATqlIb3mo6k-SBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2aa44d-3bf3-420b-ae3e-e8a6a14419d9/1/rLg4XQhXCAz8ATqlIb3mo6k-SBI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2aa44d-3bf3-420b-ae3e-e8a6a14419d9/1/rLg4XQhXCAz8ATqlIb3mo6k-SBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:ac:fa:5e:a5:68:96:a3:15:50:2c:61:5c:d9:b5:0f:51:b1:
c8:e7:9b:ae:5f:fd:eb:95:da:cd:74:05:cd:db:13:8e:6b:a0:
bb:0a:c0:0f:e9:1c:33:1c:55:8c:ef:f5:46:45:81:85:01:9e:
ae:2e:b4:26:de:74:4e:db:ef:b9:4c:34:e7:6c:9c:17:54:7f:
06:c7:52:c7:20:2f:3e:be:8c:a9:6d:0a:c6:e5:ca:47:67:bf:
0c:61:dc:1b:12:45:7d:0f:c6:91:ae:71:af:ca:4b:0e:a5:97:
bf:4f:cd:22:ac:cb:ad:fd:c1:c9:25:8d:9e:28:cd:52:6e:a3:
3d:59:59:3f:e0:b5:53:e1:60:d0:e7:d5:6b:ca:3a:5b:6f:d3:
83:7c:e9:9b:41:ff:d6:23:24:f3:0e:c4:3e:40:93:73:46:38:
c2:40:57:7a:58:a8:20:71:41:e2:7e:bd:3e:70:fe:fe:65:8d:
7d:f7:c0:88:0c:79:ff:4b:f6:b1:8a:a2:bc:df:d0:79:e6:39:
bb:5d:a0:9f:3a:99:69:04:8e:b5:ff:5b:bc:1f:8b:54:2d:ca:
22:71:f4:94:7c:e1:03:af:de:fe:c9:5a:09:14:3a:82:99:6e:
f5:79:53:50:8b:70:81:15:e7:3c:df:ff:b6:ef:97:2d:40:c1:
06:af:8d:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:02 2025 by rpki-client