Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.mft
File: SSFvXBZbgnp_1z2BB669L2PGPiQ.mft (raw, json)
Hash identifier: WqwsEYbKRDsHPbFeBeNyw13bD0W/BS0NRWKl2DUoPPs=
Subject key identifier: A4:93:CF:86:19:9C:BF:22:AE:EE:2F:06:41:CA:CB:A4:1D:6B:E5:91
Authority key identifier: 49:21:6F:5C:16:5B:82:7A:7F:D7:3D:81:07:AE:BD:2F:63:C6:3E:24
Certificate issuer: /CN=49216f5c165b827a7fd73d8107aebd2f63c63e24
Certificate serial: 0195E1224361AE59B6A56220E0C48965E10E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.mft
Manifest number: 05AF
Signing time: Sat 29 Mar 2025 09:01:13 +0000
Manifest this update: Sat 29 Mar 2025 09:01:13 +0000
Manifest next update: Sun 30 Mar 2025 09:01:13 +0000
Files and hashes: 1: GXJ3Jv70PYrpynFmfWJG-1U0AXA.roa (hash: gN7zf0hrnbDTgmLIPxtKMfQ1p2xryjgx0dj4x/WcdJI=)
2: O442f9rKCameMmZGS2am4On1RJE.roa (hash: Tjn+0NJyIaKfDErYElD/Vnb1U5GiOqlQwXo7lUYpajU=)
3: RigxE8CkNVH4KlaPlwQNra2xaCI.roa (hash: kb9oL+5E3TBU4Y3tK0vOv3TZyWxxjndNtV2AaTLhZUs=)
4: SSFvXBZbgnp_1z2BB669L2PGPiQ.crl (hash: p0zvQac+Vt5B+H0vrA+HPQ/bvTfA9NUNrQb8Z45bIwQ=)
5: oX3OGzwxfpoj75NeGxUgbWj5Nag.roa (hash: AUpPKp6STpZ3+I37dxgfx0DnwlKN78RdnPEKRCGUs1k=)
6: sOYCAyuX7LzRagR7dV1ERKJeeIs.roa (hash: iiijo1cG8pZw3FDcsviLunLX+iaQD6HA/SK+nYP/HCs=)
7: uk-wtBacjbnmJtVJFKDyHc0Hc5I.roa (hash: HApCgMYDLrukEiV9uvRZaOtEfZQVPrgBCSdgHoLxiLU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:22:43:61:ae:59:b6:a5:62:20:e0:c4:89:65:e1:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49216f5c165b827a7fd73d8107aebd2f63c63e24
Validity
Not Before: Mar 29 09:01:13 2025 GMT
Not After : Mar 30 09:01:13 2025 GMT
Subject: CN=a493cf86199cbf22aeee2f0641cacba41d6be591
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:64:66:c2:25:89:fe:57:81:25:d0:b6:16:14:
bf:b0:97:8c:89:fb:78:9f:4f:3f:bb:e5:d5:65:a8:
1c:63:cb:e1:ab:2b:1d:53:a5:f6:b6:a8:04:f8:a6:
7b:6f:40:3f:e4:cc:70:5e:57:33:3f:4d:3e:1f:4a:
d3:16:cb:4d:75:38:d6:62:fe:9f:d6:df:fa:9e:e8:
ae:2a:13:65:30:eb:1b:99:bb:9b:b0:91:f0:3c:6c:
d1:15:aa:35:5b:61:82:b4:6c:ea:cd:58:dd:a5:c6:
a2:17:f4:eb:74:16:f2:3a:7b:48:3d:f4:a8:24:02:
88:56:4d:04:ff:0f:92:af:c3:b4:b9:f6:cf:f2:44:
aa:56:35:e0:e6:5a:ae:ba:a6:e9:77:ff:11:fe:c9:
27:b8:52:de:8c:04:e8:34:a5:d1:d7:3f:3b:65:ae:
d7:75:f8:3b:17:b4:45:e9:6b:97:34:6f:f5:0b:fd:
2b:47:18:25:7a:f4:c8:93:42:fe:1c:80:29:dd:3a:
b7:13:0b:b5:a0:4e:43:ab:c2:d4:73:b8:ac:30:68:
a2:a5:25:53:a5:c9:71:b3:30:bd:45:11:a5:29:f6:
dd:99:30:18:52:62:83:a7:87:4f:7a:39:d7:4f:30:
bc:be:5a:52:59:b3:13:8a:eb:f1:aa:66:14:40:53:
77:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:93:CF:86:19:9C:BF:22:AE:EE:2F:06:41:CA:CB:A4:1D:6B:E5:91
X509v3 Authority Key Identifier:
keyid:49:21:6F:5C:16:5B:82:7A:7F:D7:3D:81:07:AE:BD:2F:63:C6:3E:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:e1:56:15:0b:71:fa:84:61:99:44:ae:a3:b4:1c:5e:02:84:
f8:6b:9c:ab:84:4c:91:84:12:3c:ec:cd:60:11:33:f2:19:cc:
3d:63:73:f9:58:df:64:87:e1:b7:e4:36:f2:ec:dc:4c:74:f8:
56:96:bc:13:fc:f2:96:54:73:d7:6a:e7:ba:e1:cc:88:e1:8c:
ce:e1:8c:f2:77:72:de:4e:0a:9f:e9:20:7d:a2:45:b1:cd:c2:
e5:1e:e2:2b:62:f5:72:b3:3e:f9:60:08:f0:3a:d7:37:0d:8e:
04:93:c4:2d:c7:ec:2e:bc:59:82:91:d8:aa:42:a1:62:54:ee:
e8:e9:39:3a:32:ce:0e:4e:42:d6:75:77:a8:14:31:d5:40:42:
9d:2e:80:2b:e8:9b:5d:7e:83:0e:63:07:2a:93:73:22:4b:13:
23:01:d4:bb:ef:32:55:43:24:04:ba:4e:13:d6:cc:33:d0:c4:
07:f3:a2:28:78:5e:04:83:ce:b7:8a:6b:db:9f:c9:f0:be:89:
25:dc:71:e0:27:ba:3b:3b:7c:d1:13:31:bc:8f:d0:45:c1:67:
10:02:e1:44:cd:64:38:3d:6d:b3:a0:cf:45:4b:db:aa:ff:8b:
0c:50:d5:0d:f8:1c:3f:44:8b:b6:32:58:54:40:be:70:dc:36:
00:7f:9e:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:03:11 2025 by rpki-client