Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/ea2b45-4fb0-4b6a-9291-c4ec15579fa8/1/sIQ82P_v6nT0VDLQ-sPnkGil39k.mft
File: sIQ82P_v6nT0VDLQ-sPnkGil39k.mft (raw, json)
Hash identifier: B6Vvbw+AgUWmfDoGZTXtOS1JGiNnk1YmVB9LeYyLPxk=
Subject key identifier: 0E:0C:D4:07:40:72:9D:0D:60:EC:94:01:F1:20:3A:AD:2E:F9:6B:D8
Authority key identifier: B0:84:3C:D8:FF:EF:EA:74:F4:54:32:D0:FA:C3:E7:90:68:A5:DF:D9
Certificate issuer: /CN=b0843cd8ffefea74f45432d0fac3e79068a5dfd9
Certificate serial: 0185375B39495628D9B987836B80E4984521
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sIQ82P_v6nT0VDLQ-sPnkGil39k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/ea2b45-4fb0-4b6a-9291-c4ec15579fa8/1/sIQ82P_v6nT0VDLQ-sPnkGil39k.mft
Manifest number: 057C
Signing time: Thu 22 Dec 2022 01:03:23 +0000
Manifest this update: Thu 22 Dec 2022 01:03:23 +0000
Manifest next update: Fri 23 Dec 2022 01:03:23 +0000
Files and hashes: 1: LdvTuzo5GPWxb3DVAIJgW-ogk-0.roa (hash: bg7gHAUbUelCC3Q1IUjt9VjOe3XYtzUvw0SVy14u7So=)
2: sIQ82P_v6nT0VDLQ-sPnkGil39k.crl (hash: +aXkEGYxMJDNmXCc7PtVM6JxJi6lkbTQdav6690clAk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:37:5b:39:49:56:28:d9:b9:87:83:6b:80:e4:98:45:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0843cd8ffefea74f45432d0fac3e79068a5dfd9
Validity
Not Before: Dec 22 01:03:23 2022 GMT
Not After : Dec 23 01:03:23 2022 GMT
Subject: CN=0e0cd40740729d0d60ec9401f1203aad2ef96bd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b4:09:13:e4:ff:81:98:8b:f8:2d:25:43:0c:
89:27:28:e0:65:ca:e8:5e:78:d0:04:90:36:c5:c3:
c5:98:f3:8b:24:04:a1:ed:ab:27:41:02:5a:81:18:
56:08:07:77:3f:ce:19:48:18:ce:78:81:57:cd:9f:
31:4b:59:8b:d3:60:4a:22:8a:55:c9:30:a7:9a:39:
f9:5d:d0:99:56:2b:1f:84:b5:ca:d1:8d:a4:f8:bc:
8b:ee:4a:d8:14:c9:1f:e6:75:8d:51:1f:ac:2f:61:
05:fa:10:df:9c:fc:99:52:bf:f7:49:d1:f6:55:7a:
53:ec:09:4c:7e:f3:7a:67:11:d5:30:71:37:de:0e:
31:47:d7:75:79:34:94:6d:d5:65:d5:81:48:9d:4f:
f6:66:da:61:ff:72:fd:8e:c4:d7:c2:74:30:59:f4:
ce:44:e8:4b:50:64:3c:64:6b:c1:e4:fe:79:5f:08:
05:62:42:3d:10:3f:94:a0:3c:6d:05:34:95:d6:34:
3a:80:99:65:37:e1:a0:b2:ab:56:df:26:87:bc:48:
d8:df:f9:b2:43:7f:39:ac:39:bf:00:d2:b5:54:58:
6f:71:fd:e3:b4:c4:71:16:d6:a4:16:38:91:0a:bf:
90:ec:dd:30:6c:74:3e:5d:67:73:ed:ca:23:a4:3b:
e9:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:0C:D4:07:40:72:9D:0D:60:EC:94:01:F1:20:3A:AD:2E:F9:6B:D8
X509v3 Authority Key Identifier:
keyid:B0:84:3C:D8:FF:EF:EA:74:F4:54:32:D0:FA:C3:E7:90:68:A5:DF:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sIQ82P_v6nT0VDLQ-sPnkGil39k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/ea2b45-4fb0-4b6a-9291-c4ec15579fa8/1/sIQ82P_v6nT0VDLQ-sPnkGil39k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/ea2b45-4fb0-4b6a-9291-c4ec15579fa8/1/sIQ82P_v6nT0VDLQ-sPnkGil39k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:02:ee:d6:2b:b8:66:6d:0b:cd:d4:f8:68:0d:4a:a9:af:33:
2f:36:33:5b:dd:28:d7:94:d6:fc:ea:7b:44:eb:c3:a2:22:a2:
72:e6:c4:7e:3c:2b:97:73:bc:07:63:90:22:11:a6:c7:9d:76:
3d:a6:86:8e:b6:9f:4a:a6:c0:fa:64:6d:39:01:94:39:a8:c1:
04:77:37:34:3a:b2:77:3f:81:fc:94:29:0b:68:5f:b5:db:b0:
ba:7a:71:03:81:f7:4d:dd:e1:53:c0:7d:b6:b4:ba:81:04:03:
ea:45:a2:ef:1b:23:8f:38:f4:c7:0c:e2:0e:31:b4:48:1e:4c:
13:9b:ff:f7:f7:df:48:5e:b2:cc:d2:78:b4:96:95:de:4c:9a:
ad:ee:55:d2:2a:08:72:38:86:4b:e8:e7:5d:bf:5e:cf:70:6d:
12:9c:61:8a:f9:28:52:bf:90:d8:e9:78:aa:c5:58:fe:02:19:
88:72:08:40:80:0e:c3:67:81:ec:70:1f:ff:39:5b:d1:88:db:
7a:41:bf:95:d8:f5:a3:8b:32:18:3a:02:fa:3b:85:e2:c1:b0:
13:29:c0:41:14:aa:ac:86:b2:01:29:cb:5c:cd:b5:d8:f0:c1:
5f:6f:6a:4e:74:28:60:72:07:ec:39:da:70:85:15:8e:83:85:
0f:b9:88:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:35:11 2025 by rpki-client