Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/97fb36-ea9b-43f4-aad5-06f7290dc44a/1/Ss70X7sPJpMK64M895_EHiLKkjU.mft
File: Ss70X7sPJpMK64M895_EHiLKkjU.mft (raw, json)
Hash identifier: 7tFlGBcM9CbMQrgDqqYmnX5kuv8cr/TuragEajQXHaM=
Subject key identifier: 94:15:75:27:3A:47:B4:EA:28:FC:D3:95:7D:DA:8F:BB:30:CA:64:E4
Authority key identifier: 4A:CE:F4:5F:BB:0F:26:93:0A:EB:83:3C:F7:9F:C4:1E:22:CA:92:35
Certificate issuer: /CN=4acef45fbb0f26930aeb833cf79fc41e22ca9235
Certificate serial: 0194BC72A7E05E651271B1C853939B096787
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ss70X7sPJpMK64M895_EHiLKkjU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/97fb36-ea9b-43f4-aad5-06f7290dc44a/1/Ss70X7sPJpMK64M895_EHiLKkjU.mft
Manifest number: 1374
Signing time: Fri 31 Jan 2025 13:00:18 +0000
Manifest this update: Fri 31 Jan 2025 13:00:18 +0000
Manifest next update: Sat 01 Feb 2025 13:00:18 +0000
Files and hashes: 1: KZ9MaFf9moOlWzhDiV51E6z4ruQ.roa (hash: o42ZvTk2aV903nYiy/wXE7YfcS2jTGFMZ4dlRDRmvzw=)
2: Ss70X7sPJpMK64M895_EHiLKkjU.crl (hash: h6CPxyexJwV7ZwrMs2ZAzgdSKfeX50qT4bOCnNgP7jk=)
3: aXfurIc0y425R07LNYbqG3Kj0ls.roa (hash: Fo4G/OQhw0U+aibrSU4yWNkHhdgB1l5Zyp+qa99xuIQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:a7:e0:5e:65:12:71:b1:c8:53:93:9b:09:67:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4acef45fbb0f26930aeb833cf79fc41e22ca9235
Validity
Not Before: Jan 31 13:00:18 2025 GMT
Not After : Feb 1 13:00:18 2025 GMT
Subject: CN=941575273a47b4ea28fcd3957dda8fbb30ca64e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:33:1d:a8:1d:2e:6a:b2:0f:16:56:61:9f:09:
cc:e9:4a:2f:9a:14:82:ce:36:f0:ae:2d:63:61:8e:
c8:51:e1:75:26:d4:73:c3:23:25:61:6b:9c:08:f0:
a1:29:18:6d:9a:5d:0a:8d:f9:36:3a:69:b0:f1:f2:
a1:36:71:75:06:b5:f4:68:a3:1e:0a:11:ce:22:d5:
23:e2:57:42:08:4e:77:b8:84:b1:fe:f0:98:51:f5:
0c:fd:70:18:d7:16:96:46:bb:ee:6d:e8:32:56:11:
5f:ac:4f:70:7b:00:f2:6c:50:0d:a5:8b:90:0f:29:
19:2f:bb:62:be:c1:43:14:27:ba:5c:6e:f7:ba:e9:
3a:bf:bc:ed:f0:31:2d:09:9d:5a:29:c8:e4:51:70:
4d:e2:b0:f5:45:80:84:09:35:19:ea:c1:4c:09:4f:
a9:3b:7f:94:84:84:be:71:47:21:e5:2b:ce:1c:b4:
c0:65:6d:56:6c:a4:ec:b6:82:dd:6c:0b:c7:71:a7:
23:67:67:0a:78:2e:a3:1e:af:14:c4:ac:a2:d8:58:
7b:2e:61:a3:53:4f:57:96:fd:98:52:aa:b8:99:b6:
87:1e:ef:e2:61:ec:20:ff:d1:47:dc:f0:f4:5e:92:
f5:6d:07:80:83:02:c1:d1:72:76:17:ac:5b:76:39:
b6:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:15:75:27:3A:47:B4:EA:28:FC:D3:95:7D:DA:8F:BB:30:CA:64:E4
X509v3 Authority Key Identifier:
keyid:4A:CE:F4:5F:BB:0F:26:93:0A:EB:83:3C:F7:9F:C4:1E:22:CA:92:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ss70X7sPJpMK64M895_EHiLKkjU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/97fb36-ea9b-43f4-aad5-06f7290dc44a/1/Ss70X7sPJpMK64M895_EHiLKkjU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/97fb36-ea9b-43f4-aad5-06f7290dc44a/1/Ss70X7sPJpMK64M895_EHiLKkjU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:13:d4:ad:a8:1f:4b:d4:60:a9:23:f7:90:18:36:2e:4f:8b:
8f:42:1a:6d:0c:a0:49:9b:7f:3f:77:fb:94:f1:78:b8:d7:a8:
e7:26:fa:59:a5:08:68:b6:1a:aa:37:41:01:90:14:12:f8:8f:
02:58:1b:a6:77:45:cc:13:5c:3e:52:82:02:fb:a8:be:dc:ef:
bc:c0:f0:31:11:1c:92:90:9c:49:49:2b:f5:29:d2:18:84:43:
31:e6:00:84:20:98:77:4c:ea:eb:08:e3:bd:b4:7d:59:81:0b:
9a:e7:86:5e:58:68:7f:d5:a5:fe:d7:62:cd:8b:eb:c9:db:bc:
66:c4:1b:eb:d6:c1:8a:ea:83:2f:bf:43:5c:a8:08:d5:93:9e:
32:72:4d:19:34:6b:0e:f0:38:e6:7e:74:ac:9d:7d:14:71:af:
53:d5:31:d0:78:99:ea:fc:49:ca:b8:8c:65:45:3b:99:8a:49:
93:b3:dc:0f:07:3d:f4:c8:11:12:04:3b:48:e5:4c:dd:c7:d6:
29:d2:b7:6c:14:5c:a8:75:c9:77:21:77:8c:f8:6f:46:28:30:
a5:b4:2e:64:c3:10:f7:59:80:f2:c5:f4:a8:4e:06:a4:a4:47:
bb:bb:d6:96:b9:d1:f6:9c:67:24:dd:88:d3:64:91:81:de:c6:
3c:06:68:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:34:59 2025 by rpki-client