Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/c454f5-4aa6-4fca-8ce0-d0a0e129cbbc/1/SNwJkoZ8tDsoM9UVHkK8QfV-c60.mft
File: SNwJkoZ8tDsoM9UVHkK8QfV-c60.mft (raw, json)
Hash identifier: s3XWMMAtwz6KRmYUCjcliR/4OGClhLlb4tjSO/EUR8M=
Subject key identifier: AE:AB:B0:91:12:9A:90:78:48:D5:12:9C:5F:7C:A5:62:AE:FB:13:AF
Authority key identifier: 48:DC:09:92:86:7C:B4:3B:28:33:D5:15:1E:42:BC:41:F5:7E:73:AD
Certificate issuer: /CN=48dc0992867cb43b2833d5151e42bc41f57e73ad
Certificate serial: 0194A658C95FB6CC9173AEAE856D7ED97FAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SNwJkoZ8tDsoM9UVHkK8QfV-c60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/c454f5-4aa6-4fca-8ce0-d0a0e129cbbc/1/SNwJkoZ8tDsoM9UVHkK8QfV-c60.mft
Manifest number: 0A0C
Signing time: Mon 27 Jan 2025 06:00:24 +0000
Manifest this update: Mon 27 Jan 2025 06:00:24 +0000
Manifest next update: Tue 28 Jan 2025 06:00:24 +0000
Files and hashes: 1: SNwJkoZ8tDsoM9UVHkK8QfV-c60.crl (hash: Zn0oOT5D/R2Wah8bdn5wtbinNCHrCgelfmn4M72V0Wc=)
2: esERwgwdm-KshbKoPBqvbxNXzY8.roa (hash: B6HOV6rKkbF0R0A/6PfZzJgpfHNFD8IeY5iFk/jXy5E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:a6:58:c9:5f:b6:cc:91:73:ae:ae:85:6d:7e:d9:7f:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48dc0992867cb43b2833d5151e42bc41f57e73ad
Validity
Not Before: Jan 27 06:00:24 2025 GMT
Not After : Jan 28 06:00:24 2025 GMT
Subject: CN=aeabb091129a907848d5129c5f7ca562aefb13af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:80:f5:70:36:a7:30:2f:29:e5:23:a9:3c:c6:
02:70:49:ca:6b:d5:1f:ab:77:dd:6a:28:12:bf:5a:
16:23:71:89:00:e7:53:39:27:15:73:57:b7:28:97:
51:f8:95:dd:e6:72:0a:9a:0f:e9:43:0f:a0:f4:a1:
cf:48:55:dd:2b:33:54:ae:a3:5f:f4:37:1c:a3:47:
f9:bb:18:72:ff:f8:3f:1d:b5:4c:65:19:5f:0f:3f:
42:0f:56:c7:e6:b1:56:3f:bb:65:33:a0:3d:f6:68:
3d:b1:6c:ff:93:36:d9:47:b0:8c:d2:a3:b5:e7:15:
3d:7c:b8:e1:e9:30:d7:e9:3f:66:56:4c:72:dc:dc:
c7:53:30:4e:0f:47:19:12:1c:4d:3f:01:88:f9:e3:
9b:4a:66:c2:34:e6:a6:12:cd:73:69:d1:b7:f1:1d:
ee:9c:52:17:6b:6d:a7:30:3a:df:1c:96:d1:b0:b0:
db:61:2c:78:cd:70:39:d1:11:ab:a0:83:62:cb:0e:
3c:ba:3f:23:b5:13:67:21:32:50:74:fa:3f:38:3b:
82:52:fd:df:7a:d8:94:84:0c:0e:5b:d4:34:f7:e1:
25:e4:e6:ae:94:65:e5:9f:e3:3d:fe:c0:bc:a2:a5:
75:54:7e:cf:6c:92:30:2a:64:0f:db:6c:d4:d5:4d:
42:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:AB:B0:91:12:9A:90:78:48:D5:12:9C:5F:7C:A5:62:AE:FB:13:AF
X509v3 Authority Key Identifier:
keyid:48:DC:09:92:86:7C:B4:3B:28:33:D5:15:1E:42:BC:41:F5:7E:73:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SNwJkoZ8tDsoM9UVHkK8QfV-c60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c454f5-4aa6-4fca-8ce0-d0a0e129cbbc/1/SNwJkoZ8tDsoM9UVHkK8QfV-c60.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c454f5-4aa6-4fca-8ce0-d0a0e129cbbc/1/SNwJkoZ8tDsoM9UVHkK8QfV-c60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:a5:3e:31:4a:d2:39:14:57:93:83:84:01:db:a1:2c:e0:d1:
8e:5d:71:a4:1d:5f:74:de:4d:ce:ee:5e:3f:a2:68:c1:48:44:
6a:40:7b:be:83:4a:26:6f:fa:6a:96:14:dc:e6:29:64:66:87:
77:9c:20:ea:c7:9e:e7:d0:7f:11:49:b9:8e:69:98:3a:a3:44:
1f:a1:51:47:b3:70:3f:1b:dd:f1:1e:49:7e:8d:01:4b:e3:f0:
8f:64:6d:76:3d:b0:7f:0f:79:29:c9:99:27:8e:89:87:81:5b:
99:a0:71:74:6e:4c:f9:66:03:ed:ad:ed:2e:c6:8d:20:35:11:
91:3b:a7:b0:e0:70:68:8d:35:5a:96:78:ae:37:07:da:48:1f:
17:ab:41:9f:86:f3:39:75:eb:4b:5d:e1:3e:f3:86:a0:f8:82:
b9:7a:1e:f1:e7:b1:4a:74:5f:0c:3e:71:83:cb:99:47:4c:73:
70:d2:b6:46:cb:85:5c:76:01:9f:07:79:83:5f:03:a1:17:26:
fe:6d:e4:30:4b:0f:39:39:07:07:f7:d1:7e:79:94:3c:02:d1:
8f:bd:6d:5e:60:65:11:cd:3c:06:ac:94:92:70:8b:cd:81:a5:
8f:fc:39:55:a9:a0:67:3d:43:ba:74:35:59:11:da:2a:49:2f:
94:ab:21:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 02:29:37 2025 by rpki-client