Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/15fadd-c60f-487c-975e-b0571d6921b4/1/ss1PkikJW98xqnhqHlW5l3-OWwU.mft
File: ss1PkikJW98xqnhqHlW5l3-OWwU.mft (raw, json)
Hash identifier: 1yJseVbk0D4pMhhnLYEe4Lu+4f1LaMm2wR5HK9rJKgY=
Subject key identifier: 51:45:EC:96:E1:78:FF:F9:0D:D2:CD:BA:EB:7F:37:6D:C8:66:6A:0F
Authority key identifier: B2:CD:4F:92:29:09:5B:DF:31:AA:78:6A:1E:55:B9:97:7F:8E:5B:05
Certificate issuer: /CN=b2cd4f9229095bdf31aa786a1e55b9977f8e5b05
Certificate serial: 0185382487E6021814585F1A199323DB26BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ss1PkikJW98xqnhqHlW5l3-OWwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/15fadd-c60f-487c-975e-b0571d6921b4/1/ss1PkikJW98xqnhqHlW5l3-OWwU.mft
Manifest number: 0BD9
Signing time: Thu 22 Dec 2022 04:43:16 +0000
Manifest this update: Thu 22 Dec 2022 04:43:16 +0000
Manifest next update: Fri 23 Dec 2022 04:43:16 +0000
Files and hashes: 1: ss1PkikJW98xqnhqHlW5l3-OWwU.crl (hash: p91V8ai4e3wvoZMl3/+WveiJDc7N4nsgQ16EHqalhXU=)
2: zGSlecf-Mb2Lr0ELUZBt4X9sJFY.roa (hash: Sjr+lts/NYtFDCyPAuJtXvgiw8roi7CT9iWlsop++Lk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:38:24:87:e6:02:18:14:58:5f:1a:19:93:23:db:26:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2cd4f9229095bdf31aa786a1e55b9977f8e5b05
Validity
Not Before: Dec 22 04:43:16 2022 GMT
Not After : Dec 23 04:43:16 2022 GMT
Subject: CN=5145ec96e178fff90dd2cdbaeb7f376dc8666a0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:86:b3:59:10:a5:9e:99:4e:09:b2:68:96:d9:
3f:67:15:56:3c:c4:ae:b8:16:be:88:18:41:c1:dc:
1e:ab:07:a1:0f:e4:c0:2f:e0:ca:f0:9f:2c:4e:68:
17:e6:46:19:6c:ff:cd:69:dd:9a:9f:d0:d0:f0:a5:
cc:4a:46:b7:37:b4:57:11:75:68:98:f2:f9:b9:2b:
b7:f3:37:ad:dd:f0:f5:f4:86:83:ba:64:fd:11:d3:
81:3d:9c:96:f0:58:6d:4c:13:4e:34:c3:e8:8d:f2:
10:81:ed:6b:4b:19:7d:e4:00:1d:4c:e9:f2:bf:d9:
77:92:f5:39:97:a9:f7:5f:c9:4c:a5:38:a5:0e:7f:
57:c8:48:1c:4a:18:e4:dd:66:b1:e0:e3:dd:c8:d5:
41:39:9c:16:9f:f2:d2:51:7b:c5:10:c1:de:36:bc:
f6:bb:63:ce:6d:b7:42:e4:43:f8:4f:2f:ba:fc:24:
eb:7b:31:64:b9:9f:e4:2d:1d:d1:54:bc:47:d8:a7:
43:ad:52:4b:16:9e:4f:a0:59:ed:85:03:95:03:3d:
35:d5:2c:65:40:fc:aa:2a:ef:ad:6f:7e:e3:01:c4:
33:08:cc:88:4a:16:d0:ca:95:79:64:39:ba:c7:5e:
c9:0f:b0:39:c7:56:3b:15:9d:de:38:cd:3a:65:7b:
af:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:45:EC:96:E1:78:FF:F9:0D:D2:CD:BA:EB:7F:37:6D:C8:66:6A:0F
X509v3 Authority Key Identifier:
keyid:B2:CD:4F:92:29:09:5B:DF:31:AA:78:6A:1E:55:B9:97:7F:8E:5B:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ss1PkikJW98xqnhqHlW5l3-OWwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/15fadd-c60f-487c-975e-b0571d6921b4/1/ss1PkikJW98xqnhqHlW5l3-OWwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/15fadd-c60f-487c-975e-b0571d6921b4/1/ss1PkikJW98xqnhqHlW5l3-OWwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:4b:6c:fc:30:0c:47:15:c5:34:9e:83:a6:b4:57:33:f2:f7:
4d:d8:90:e3:5a:8f:9d:88:67:fb:a3:8f:33:60:4a:13:25:83:
ed:a7:45:74:81:01:d4:59:76:a6:4d:ed:9c:01:4c:d5:11:9d:
8c:a8:ee:d0:42:d9:9f:91:f3:48:aa:6a:34:3b:b7:28:26:02:
8b:27:33:1f:4c:67:6f:66:56:71:4a:c9:39:3a:84:ba:3f:fb:
5f:70:c2:d9:37:24:42:34:35:56:9d:fc:3f:ff:16:78:fc:60:
e9:fd:4e:a8:71:e8:52:84:54:9c:96:76:cc:cd:36:0a:8e:3d:
6c:3b:a6:bd:79:08:e7:03:67:0d:21:4c:21:df:de:c3:f9:73:
8b:71:3f:90:48:1a:ec:07:52:60:a0:66:af:6e:88:5b:ff:cd:
4a:37:97:51:69:4c:33:63:19:96:25:53:d9:88:29:b6:b0:06:
99:27:a8:e8:92:0c:f9:c0:10:ae:a3:86:b7:f4:bc:df:a9:cb:
75:1d:e5:d4:46:75:84:d1:67:d8:63:3d:4c:2b:81:87:2c:19:
a1:3d:af:a7:cb:0f:84:fc:e4:fd:89:c0:ce:78:3e:f6:9c:6e:
5a:e6:a9:43:96:55:e0:d3:6b:4d:5e:9d:f4:77:38:47:29:3d:
c6:68:4b:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:07:05 2025 by rpki-client