Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/714b48-6468-4d45-9fff-69367f9a5fc9/1/23_SbKX3kUcLC3KbcvYfgABYoyI.mft
File: 23_SbKX3kUcLC3KbcvYfgABYoyI.mft (raw, json)
Hash identifier: ldA7lWcrGuKO7+0VtfgFPQ/hR62b5rB14t8ZhKPaIOc=
Subject key identifier: 54:2A:D1:89:FF:B5:13:A6:5D:6D:C3:36:63:FB:1E:49:2F:32:36:0E
Authority key identifier: DB:7F:D2:6C:A5:F7:91:47:0B:0B:72:9B:72:F6:1F:80:00:58:A3:22
Certificate issuer: /CN=db7fd26ca5f791470b0b729b72f61f800058a322
Certificate serial: 0193E2A7258DC582E7F176924D348A9C3328
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/23_SbKX3kUcLC3KbcvYfgABYoyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/714b48-6468-4d45-9fff-69367f9a5fc9/1/23_SbKX3kUcLC3KbcvYfgABYoyI.mft
Manifest number: 1279
Signing time: Fri 20 Dec 2024 06:00:25 +0000
Manifest this update: Fri 20 Dec 2024 06:00:25 +0000
Manifest next update: Sat 21 Dec 2024 06:00:25 +0000
Files and hashes: 1: 23_SbKX3kUcLC3KbcvYfgABYoyI.crl (hash: 5d+25ZVCY+OzTNLGH05oR82KMXmHyTFLDoCxR8jHpSQ=)
2: zqZ7YeHqk0hiMOBiaFjWyV4aSgw.roa (hash: nueI04if8crC0LwyghMW1a+2gA4Ngf7rPXeWCLYQ4io=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:e2:a7:25:8d:c5:82:e7:f1:76:92:4d:34:8a:9c:33:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db7fd26ca5f791470b0b729b72f61f800058a322
Validity
Not Before: Dec 20 06:00:25 2024 GMT
Not After : Dec 21 06:00:25 2024 GMT
Subject: CN=542ad189ffb513a65d6dc33663fb1e492f32360e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2c:93:a0:f8:3a:af:b9:94:e7:fa:71:75:a6:
ab:8b:d1:3c:0d:c4:41:46:91:81:fd:fb:b7:d8:0d:
92:6c:e3:eb:00:07:3f:58:00:4a:cb:9c:3f:9f:fb:
3d:5e:fb:7b:ab:ef:80:87:ac:02:27:f0:d2:30:18:
19:31:71:73:f5:c7:c2:7d:9f:43:eb:a3:5d:4f:5f:
21:cc:c4:db:96:df:78:df:fb:80:c6:e1:8f:d7:9f:
74:7f:86:71:9b:a4:7f:59:35:aa:02:4f:d3:9b:64:
5f:18:da:99:f3:d4:a9:e9:45:5e:8e:ff:80:2e:26:
53:b6:f3:60:17:4a:aa:93:c8:dd:fc:7d:e9:bb:9c:
7e:9a:2c:f8:2c:8c:cd:e8:1d:3d:89:d8:c3:75:30:
2c:e5:8f:96:15:bc:09:3a:55:ee:9a:18:71:1f:71:
0c:a6:75:d9:a6:76:84:45:81:80:83:47:2c:8d:d4:
7b:8e:1a:22:0d:68:4d:0d:22:22:3b:65:da:fa:1c:
14:28:42:fb:f5:d4:c4:a7:f4:c2:37:e9:78:3c:90:
d9:7b:3a:de:04:b4:f6:bb:a5:09:ae:11:d6:e8:12:
8b:09:1c:ac:1d:bc:a2:e1:37:d1:d6:a5:ce:e8:97:
71:85:f3:19:d6:a0:9c:58:68:15:3f:0a:5d:a3:ea:
99:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:2A:D1:89:FF:B5:13:A6:5D:6D:C3:36:63:FB:1E:49:2F:32:36:0E
X509v3 Authority Key Identifier:
keyid:DB:7F:D2:6C:A5:F7:91:47:0B:0B:72:9B:72:F6:1F:80:00:58:A3:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/23_SbKX3kUcLC3KbcvYfgABYoyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/714b48-6468-4d45-9fff-69367f9a5fc9/1/23_SbKX3kUcLC3KbcvYfgABYoyI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/714b48-6468-4d45-9fff-69367f9a5fc9/1/23_SbKX3kUcLC3KbcvYfgABYoyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:af:31:c5:2e:07:16:c8:6a:a0:c3:2a:0d:99:4b:87:b6:38:
0e:33:ab:0f:77:04:18:c4:34:0a:1b:e6:33:b7:7a:1c:30:a1:
4b:48:34:20:ce:ba:ca:e7:5c:8e:9c:a1:56:b7:e5:13:1f:10:
7f:0b:51:30:c9:1a:29:a0:f9:ab:30:bb:25:0d:a5:b1:8b:9c:
49:95:c7:29:8e:b6:42:9b:c3:00:d6:f5:cf:8d:d9:f0:24:31:
a5:a7:32:87:08:b2:c9:0c:55:68:07:e7:ed:dd:1f:ce:bf:8d:
15:fd:b3:6b:21:86:8a:b1:4d:f9:4c:9f:06:68:c3:ad:5a:fe:
e1:81:bf:1b:55:99:45:3f:e4:7f:9f:83:78:e8:2c:46:c6:32:
be:38:d1:72:65:a0:54:11:48:c6:90:ab:4a:c2:e2:9f:84:0d:
a7:d1:c7:18:62:5d:8b:72:ff:d5:d5:cb:67:73:c1:11:38:6b:
93:aa:08:fb:89:8f:4f:c2:04:99:2f:89:04:4d:d5:cc:6b:75:
03:bc:4e:87:44:fa:c6:16:f0:2f:7a:01:14:71:d6:81:89:57:
b1:ba:26:f3:ea:cb:f2:cc:6c:18:01:55:f3:1b:a8:fa:eb:dc:
11:94:f1:ba:e9:6b:c8:81:5c:ac:2e:36:24:ad:17:dc:d2:51:
1f:32:60:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 08:08:24 2025 by rpki-client