Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/617e64-e4ed-4e4e-9466-c46caf64e710/1/SDydnQnj_31yjAN5LXStGZaM4n0.mft
File: SDydnQnj_31yjAN5LXStGZaM4n0.mft (raw, json)
Hash identifier: biycNHJ0TIMlSy2GPgAbpK6R4td+YHpfUmYmiwxH4nA=
Subject key identifier: 8B:07:29:BD:93:6C:FE:3D:DA:77:08:1E:AA:21:44:F2:19:9E:55:04
Authority key identifier: 48:3C:9D:9D:09:E3:FF:7D:72:8C:03:79:2D:74:AD:19:96:8C:E2:7D
Certificate issuer: /CN=483c9d9d09e3ff7d728c03792d74ad19968ce27d
Certificate serial: 018D8BCF9527162E1BA8FD0F693F79F5E029
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SDydnQnj_31yjAN5LXStGZaM4n0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/617e64-e4ed-4e4e-9466-c46caf64e710/1/SDydnQnj_31yjAN5LXStGZaM4n0.mft
Manifest number: 0854
Signing time: Fri 09 Feb 2024 03:00:53 +0000
Manifest this update: Fri 09 Feb 2024 03:00:53 +0000
Manifest next update: Sat 10 Feb 2024 03:00:53 +0000
Files and hashes: 1: SDydnQnj_31yjAN5LXStGZaM4n0.crl (hash: 9TsQJIXcvgo6iJuzN2RQV+rsiNhFB4Y9xTtnl+eHAmU=)
2: zgA1XG9vhoDIsqNhiivF5O8aPyA.roa (hash: UZFTZ15N41eDANZWhQvjPi3VK+rzA/zRpdnVKT4hQco=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:8b:cf:95:27:16:2e:1b:a8:fd:0f:69:3f:79:f5:e0:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=483c9d9d09e3ff7d728c03792d74ad19968ce27d
Validity
Not Before: Feb 9 03:00:53 2024 GMT
Not After : Feb 10 03:00:53 2024 GMT
Subject: CN=8b0729bd936cfe3dda77081eaa2144f2199e5504
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:84:03:9e:fc:aa:ee:58:7a:1e:df:fc:87:01:
6b:76:3f:a0:6c:60:6c:1d:d8:a5:28:75:07:7b:41:
c5:f3:2c:ee:1f:e6:85:12:18:93:d6:e1:c4:29:0b:
1b:6f:67:c2:59:b4:2a:d8:82:8c:b9:30:8d:6a:c9:
52:c4:55:2e:64:e2:96:da:56:6e:ac:38:8c:c8:3f:
0a:95:35:23:60:e0:fc:bc:fe:ea:f9:ec:a3:5f:56:
ae:ce:69:de:3d:b7:5d:89:88:5b:58:1c:86:d6:6a:
1d:62:29:84:e9:84:71:d6:4c:9d:c9:71:c9:74:27:
b6:d2:72:54:fa:05:c9:7b:2d:d8:56:71:2b:44:f4:
10:20:a5:86:b2:84:a3:4f:3d:62:4f:82:d8:a9:88:
3b:e3:d8:e1:d0:e0:fa:ea:2a:4f:ca:0d:30:99:06:
95:23:62:19:ae:be:74:0c:ac:a7:63:78:8d:52:96:
7d:e9:94:cf:7a:ff:8e:f9:1f:2c:2f:32:f1:1e:7f:
3e:82:30:a3:ce:d4:d3:af:36:48:90:8e:f3:f3:d5:
25:7c:8b:48:85:95:dd:b4:55:8b:99:91:c5:21:45:
5f:31:c1:e5:37:98:e8:c7:31:60:f3:71:a8:3d:8e:
6d:58:de:f0:b1:3d:a6:07:af:9c:8a:f9:d7:92:f5:
e9:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:07:29:BD:93:6C:FE:3D:DA:77:08:1E:AA:21:44:F2:19:9E:55:04
X509v3 Authority Key Identifier:
keyid:48:3C:9D:9D:09:E3:FF:7D:72:8C:03:79:2D:74:AD:19:96:8C:E2:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SDydnQnj_31yjAN5LXStGZaM4n0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/617e64-e4ed-4e4e-9466-c46caf64e710/1/SDydnQnj_31yjAN5LXStGZaM4n0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/617e64-e4ed-4e4e-9466-c46caf64e710/1/SDydnQnj_31yjAN5LXStGZaM4n0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:de:33:1e:43:9d:ae:3a:7f:95:b1:8b:a7:45:f3:c0:fe:3d:
95:64:93:d4:b2:7b:70:7b:8a:c3:f2:61:a4:79:17:9d:d4:96:
8d:bc:d8:99:a1:8d:e8:40:56:48:a2:ec:c5:19:5a:9a:e0:08:
65:5b:6e:ba:89:f3:93:19:77:fd:65:d2:6c:00:a7:c7:ae:0c:
e9:e7:e0:e2:11:eb:6a:e0:90:ec:d5:f9:e1:d3:5f:e6:b1:94:
57:bd:18:ef:1f:9f:07:3c:49:56:69:5c:55:68:71:a6:7f:3b:
48:91:a6:ba:73:4c:09:a0:fc:67:31:6d:1a:69:a7:9c:bf:8d:
11:19:e1:7d:f7:87:7f:da:14:1d:74:8f:c5:c8:3d:bb:0e:14:
3f:19:db:07:ea:c4:24:2f:f1:12:3f:ea:cb:1a:12:2d:2a:bc:
56:75:19:30:5e:3a:35:b6:cb:9a:45:6d:c5:25:a7:7f:6d:28:
31:c1:77:dc:f2:97:43:02:11:b6:a0:94:82:fb:95:2f:70:fe:
4c:00:e5:05:bc:5e:bf:3e:05:7b:aa:3b:a1:59:58:c4:2b:5d:
b5:9d:ae:1a:8f:55:bd:6e:06:87:c6:71:26:e6:0e:41:a6:dd:
fd:9e:9f:d1:a8:5c:f0:2c:da:6d:ef:9f:23:7d:72:a4:d2:d4:
88:c9:68:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:37:46 2025 by rpki-client