Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/20a767-7b41-463b-a6c9-5fc8e6327889/1/sUJ73NR8eEMfZioIWJAFrLULk0E.mft
File: sUJ73NR8eEMfZioIWJAFrLULk0E.mft (raw, json)
Hash identifier: 2suz3p03TEr+L6jOAVwT1tzlrAUA7myLjiFyhzdFmgQ=
Subject key identifier: C6:EE:93:56:E8:CD:79:88:A2:E9:14:76:E2:29:27:A8:7C:2A:B1:63
Authority key identifier: B1:42:7B:DC:D4:7C:78:43:1F:66:2A:08:58:90:05:AC:B5:0B:93:41
Certificate issuer: /CN=b1427bdcd47c78431f662a08589005acb50b9341
Certificate serial: 0194EF16704C130F2331A886785DF05E6381
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sUJ73NR8eEMfZioIWJAFrLULk0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/20a767-7b41-463b-a6c9-5fc8e6327889/1/sUJ73NR8eEMfZioIWJAFrLULk0E.mft
Manifest number: 0A0B
Signing time: Mon 10 Feb 2025 09:00:12 +0000
Manifest this update: Mon 10 Feb 2025 09:00:12 +0000
Manifest next update: Tue 11 Feb 2025 09:00:12 +0000
Files and hashes: 1: iqbUC3RkeGwfkGzLdhu1vTKXGrY.roa (hash: RaEnfZTaOx7WzFEEDktbraYPhjg7MFND4IvOcK58KYI=)
2: sUJ73NR8eEMfZioIWJAFrLULk0E.crl (hash: J4JwEjGW1WidRrIhO5dEzQskqD0+oBgmgsEQFBD3knI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ef:16:70:4c:13:0f:23:31:a8:86:78:5d:f0:5e:63:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1427bdcd47c78431f662a08589005acb50b9341
Validity
Not Before: Feb 10 09:00:12 2025 GMT
Not After : Feb 11 09:00:12 2025 GMT
Subject: CN=c6ee9356e8cd7988a2e91476e22927a87c2ab163
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:53:77:f5:91:70:0c:2e:0b:f0:a2:76:cd:27:
12:fa:b8:fe:30:ba:11:cd:d0:be:6e:01:3c:be:7b:
c2:08:88:b6:40:72:97:20:0d:95:56:f9:75:68:13:
d4:a8:9c:90:44:1c:3f:11:9f:ba:b4:c4:cc:60:7c:
d6:17:36:ad:21:de:78:6f:4b:93:0b:9f:52:86:73:
72:76:fa:20:c0:88:b2:b9:ee:b4:67:ab:fa:ba:bf:
8d:48:0c:5c:ca:6a:8a:c0:5e:72:90:b6:e6:7b:11:
26:4b:c7:b4:8a:ec:4c:37:86:ba:64:18:65:88:db:
73:34:8c:ed:45:04:b9:66:19:4a:5e:19:b9:d4:9c:
e4:82:a1:de:2a:be:ca:f6:b2:03:34:69:02:87:7a:
da:b7:ea:08:59:d5:41:da:da:f6:9c:a2:01:48:70:
5d:a0:95:87:5e:4e:e6:6c:b7:62:5d:36:f2:f1:89:
26:31:a2:19:d2:ee:43:5b:d8:b3:01:e9:8e:1c:84:
ed:66:b0:47:87:bc:79:60:ab:2a:4b:fb:1d:4a:b0:
12:eb:f7:25:c8:8c:7a:c5:4a:26:ab:b7:2b:8c:70:
5a:c3:d1:84:35:4d:9b:2b:2d:bd:96:73:f4:5f:97:
1c:2f:8b:43:8a:6b:d8:7b:a2:09:fb:9d:61:54:b0:
8c:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:EE:93:56:E8:CD:79:88:A2:E9:14:76:E2:29:27:A8:7C:2A:B1:63
X509v3 Authority Key Identifier:
keyid:B1:42:7B:DC:D4:7C:78:43:1F:66:2A:08:58:90:05:AC:B5:0B:93:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sUJ73NR8eEMfZioIWJAFrLULk0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/20a767-7b41-463b-a6c9-5fc8e6327889/1/sUJ73NR8eEMfZioIWJAFrLULk0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/20a767-7b41-463b-a6c9-5fc8e6327889/1/sUJ73NR8eEMfZioIWJAFrLULk0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:28:33:d6:65:1d:03:36:97:e1:73:76:92:e9:fc:a0:c1:00:
b1:6f:50:40:15:43:dd:06:77:f0:51:7c:e1:ec:f8:c1:1c:88:
d5:f5:89:6a:53:be:c6:5f:9d:cd:bb:2a:15:b7:3e:5b:5f:c9:
34:e6:3b:bc:ce:03:3e:29:9c:d6:d3:13:39:f8:10:9c:08:0f:
7e:ae:2a:e8:d5:63:0e:15:d9:09:df:d0:96:14:3d:cb:31:63:
14:76:0e:c4:ad:2d:79:09:22:92:cc:e4:18:78:c9:02:26:02:
77:1d:ab:24:c6:1e:50:02:9f:d9:48:23:bf:df:dd:fe:88:6b:
63:b8:86:49:a9:ea:5c:8f:1d:25:fc:20:2f:86:31:56:57:cc:
54:ff:92:73:a2:b0:0b:dd:0a:f2:5e:47:05:49:9a:f1:c0:21:
ad:ec:ad:c3:c4:90:66:11:e1:63:22:28:cc:69:cd:ed:36:66:
ee:f1:74:fc:f5:28:5d:b1:75:ef:be:e3:a0:80:42:f7:ae:c6:
ca:55:b9:bb:01:33:73:24:ce:16:ae:e9:42:51:1e:84:2d:b5:
95:d5:cb:ce:05:23:fc:bd:98:0f:51:58:c3:43:22:da:17:66:
3f:b5:d6:d2:45:c5:d4:f8:36:5d:14:e9:8a:32:d9:3a:f2:2e:
fe:89:6c:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 08:28:49 2025 by rpki-client