Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/4ff3d1-cc2d-4eba-913e-2782477b9d1e/1/SPrtZxT0aiuEPxTkDlTmJqDFAO4.mft
File: SPrtZxT0aiuEPxTkDlTmJqDFAO4.mft (raw, json)
Hash identifier: YH5gDIkCjgfnuejy+KdB2/NCU/ut0/HJbO4jF4+7emk=
Subject key identifier: 97:5A:C8:4B:B4:37:4E:03:54:DF:F6:8A:4D:6F:08:76:D4:6D:0F:02
Authority key identifier: 48:FA:ED:67:14:F4:6A:2B:84:3F:14:E4:0E:54:E6:26:A0:C5:00:EE
Certificate issuer: /CN=48faed6714f46a2b843f14e40e54e626a0c500ee
Certificate serial: 0194BC3C96BC3CED3F1D74B96126CE3C4BC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SPrtZxT0aiuEPxTkDlTmJqDFAO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/4ff3d1-cc2d-4eba-913e-2782477b9d1e/1/SPrtZxT0aiuEPxTkDlTmJqDFAO4.mft
Manifest number: 1182
Signing time: Fri 31 Jan 2025 12:01:14 +0000
Manifest this update: Fri 31 Jan 2025 12:01:14 +0000
Manifest next update: Sat 01 Feb 2025 12:01:14 +0000
Files and hashes: 1: SPrtZxT0aiuEPxTkDlTmJqDFAO4.crl (hash: WLaMbZPAuKWneYh9RQeYpy4g7KXcksbnnid6Mm8U40k=)
2: YcBJMOZnarbYkNxw905RMeZes7Q.roa (hash: FciS9wueWxFbzT7TwtYBQ+UslPbKowgQrJac0SFsxR8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:96:bc:3c:ed:3f:1d:74:b9:61:26:ce:3c:4b:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48faed6714f46a2b843f14e40e54e626a0c500ee
Validity
Not Before: Jan 31 12:01:14 2025 GMT
Not After : Feb 1 12:01:14 2025 GMT
Subject: CN=975ac84bb4374e0354dff68a4d6f0876d46d0f02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:98:3e:42:2a:7c:59:11:1a:5a:2b:35:30:d0:
72:97:5a:ba:14:49:1a:20:17:b8:54:6d:ca:b8:ea:
e3:a4:34:0f:53:d3:fd:2f:d3:42:aa:88:0a:2d:65:
33:9f:c8:f8:e7:48:01:70:d6:de:d5:75:5a:6c:05:
97:a7:f9:92:75:53:fc:d1:e9:54:11:5c:3a:dc:61:
32:4b:3b:64:86:35:b2:b5:59:ec:02:3c:dc:84:8e:
4c:26:91:8c:e4:94:1b:7b:8c:5f:a9:51:72:47:98:
61:d8:39:e4:2e:fa:3e:47:e6:a3:ef:d7:df:61:f4:
bc:37:5b:88:97:1f:d8:93:27:10:fb:7e:f9:7c:52:
97:07:c8:5e:c9:54:b8:84:a9:56:64:ed:6f:6b:ee:
f1:2c:c4:92:ad:4f:bb:cd:99:42:cc:58:11:c3:8a:
7d:86:38:21:b5:f4:e1:4f:cf:b8:f4:1b:ae:3e:57:
40:13:21:60:ae:41:94:e7:66:b1:6d:50:eb:db:9a:
21:3a:89:3d:d3:1c:92:e0:ad:87:c1:6c:64:84:a0:
38:2a:12:75:dc:73:04:c6:22:cd:9d:0f:48:59:23:
c0:44:ca:81:10:a9:34:69:75:e1:ad:8f:20:c2:a4:
10:16:82:b2:1e:e6:7c:34:0a:9b:e8:0f:5b:f6:87:
e4:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:5A:C8:4B:B4:37:4E:03:54:DF:F6:8A:4D:6F:08:76:D4:6D:0F:02
X509v3 Authority Key Identifier:
keyid:48:FA:ED:67:14:F4:6A:2B:84:3F:14:E4:0E:54:E6:26:A0:C5:00:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SPrtZxT0aiuEPxTkDlTmJqDFAO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/4ff3d1-cc2d-4eba-913e-2782477b9d1e/1/SPrtZxT0aiuEPxTkDlTmJqDFAO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/4ff3d1-cc2d-4eba-913e-2782477b9d1e/1/SPrtZxT0aiuEPxTkDlTmJqDFAO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:ff:c7:a4:6e:3b:f8:fe:a2:2c:e0:bf:03:33:af:21:bc:92:
44:ee:35:fc:4a:cf:fe:de:4b:5d:62:e0:99:5e:e2:7e:ac:89:
ac:b1:da:3f:1d:35:a6:47:54:dc:a8:a6:cf:b0:91:0b:96:17:
1f:6e:fb:78:ef:32:c2:05:27:8b:09:64:eb:13:8d:4b:ad:e2:
f0:06:94:c3:8e:3f:52:bd:36:f5:1f:a8:f8:53:05:33:db:53:
38:04:c4:e0:3d:da:1c:62:20:8d:bf:46:77:9d:ac:92:40:1f:
a4:b1:1c:8a:b9:35:2c:d1:e7:38:83:5d:9d:67:44:82:86:50:
f3:38:c8:da:03:34:44:c0:ef:99:6c:3e:f4:08:75:8d:b2:c2:
2e:61:d8:0b:8d:a4:e3:fd:c9:ce:4e:97:6a:9b:f7:43:2e:72:
65:06:82:fe:46:3a:70:94:f0:74:ca:98:cd:c8:90:12:6f:ed:
7a:0d:6f:fe:0c:d2:45:70:35:57:0a:69:18:a2:c2:a2:1e:1b:
10:36:05:b5:67:38:1d:1f:c7:47:ae:73:74:cf:8b:6a:3b:3b:
b9:f8:8b:c6:ba:21:84:61:28:12:05:7d:27:b0:b7:a7:d8:52:
12:d0:96:2b:90:59:02:71:2d:5e:1b:66:ba:49:7f:40:87:c7:
3d:90:23:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:03 2025 by rpki-client