Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/7dfa04-7c2c-4ac3-a66b-0c180a0841ab/1/SGeaItDbyYDV1ZszNnn5ObmuPyU.mft
File: SGeaItDbyYDV1ZszNnn5ObmuPyU.mft (raw, json)
Hash identifier: xPX8PvVhoDPeILorqjm5R8jCpX7ix6nsFWngyBThCOc=
Subject key identifier: B3:AA:E0:96:75:F5:CC:E9:3E:D6:05:13:78:3B:45:2E:B0:77:B8:2F
Authority key identifier: 48:67:9A:22:D0:DB:C9:80:D5:D5:9B:33:36:79:F9:39:B9:AE:3F:25
Certificate issuer: /CN=48679a22d0dbc980d5d59b333679f939b9ae3f25
Certificate serial: 0194BD852319FED17BB931EAEBFBEA6EDC38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SGeaItDbyYDV1ZszNnn5ObmuPyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/7dfa04-7c2c-4ac3-a66b-0c180a0841ab/1/SGeaItDbyYDV1ZszNnn5ObmuPyU.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 18:00:06 +0000
Manifest this update: Fri 31 Jan 2025 18:00:06 +0000
Manifest next update: Sat 01 Feb 2025 18:00:06 +0000
Files and hashes: 1: SGeaItDbyYDV1ZszNnn5ObmuPyU.crl (hash: 9R1p6IZCi+7eOF7iHWV1WhZH0+p4/cj0WISAhePS6cQ=)
2: lSVuH4_qT7VO0FFfSg8D4f45UxY.roa (hash: 9ZtD0p1FuMWX60A/XbYYtr6hffE/KiTmy0aXZ7EMf+Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:23:19:fe:d1:7b:b9:31:ea:eb:fb:ea:6e:dc:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48679a22d0dbc980d5d59b333679f939b9ae3f25
Validity
Not Before: Jan 31 18:00:06 2025 GMT
Not After : Feb 1 18:00:06 2025 GMT
Subject: CN=b3aae09675f5cce93ed60513783b452eb077b82f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:cb:1e:21:0f:a1:94:82:9f:c4:35:de:e0:11:
d1:d2:ae:03:b3:92:a3:fb:56:13:de:8c:8a:c7:ee:
f2:88:c6:07:09:c9:9c:06:96:eb:7e:3a:fe:9f:06:
7f:66:74:9e:ee:91:72:b6:d7:90:7b:50:f8:b0:1f:
04:92:5d:af:cc:b5:cd:cd:d3:eb:7f:16:52:d9:57:
74:eb:86:e6:31:3b:98:84:bc:0e:c5:21:49:99:57:
2c:63:4f:78:40:54:1e:f4:5c:0a:4a:db:2f:f6:4e:
1c:67:a5:d1:26:ad:76:2f:db:56:2d:ef:5b:72:76:
ef:57:f6:e0:b6:6b:72:01:fe:10:16:05:17:de:e2:
27:94:e3:fe:fc:ec:aa:7e:74:6d:3b:4e:1e:1d:66:
8c:c0:64:62:72:ce:0a:ce:00:58:1b:6c:e1:82:af:
74:8e:a5:35:6c:2c:23:4d:62:00:7e:dd:3f:81:62:
e3:b0:08:10:24:cc:ce:2a:35:bf:3b:4c:81:5b:a5:
5b:93:4a:68:9e:2a:c5:a4:00:52:66:ef:56:09:34:
74:91:b8:53:1b:26:8d:66:19:65:24:18:79:3a:5b:
81:73:48:cc:fc:e9:54:cd:68:a9:1e:f2:b7:4c:0f:
4b:e7:2b:6f:b3:fc:5c:05:e1:c6:c1:15:a8:05:d2:
01:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:AA:E0:96:75:F5:CC:E9:3E:D6:05:13:78:3B:45:2E:B0:77:B8:2F
X509v3 Authority Key Identifier:
keyid:48:67:9A:22:D0:DB:C9:80:D5:D5:9B:33:36:79:F9:39:B9:AE:3F:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SGeaItDbyYDV1ZszNnn5ObmuPyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7dfa04-7c2c-4ac3-a66b-0c180a0841ab/1/SGeaItDbyYDV1ZszNnn5ObmuPyU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7dfa04-7c2c-4ac3-a66b-0c180a0841ab/1/SGeaItDbyYDV1ZszNnn5ObmuPyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:8c:d8:ac:db:4a:99:80:86:f1:5e:66:75:fc:28:32:d1:fb:
64:af:b7:37:69:08:5b:d5:06:95:af:8d:88:7f:19:65:96:68:
5a:3f:f9:c8:39:1c:d5:6d:54:36:02:85:98:09:f2:4b:56:d0:
a5:a4:cb:6f:16:d6:ce:83:60:9e:45:c6:a7:64:0d:93:4f:64:
2e:16:2a:20:96:2c:68:b8:64:88:5a:ce:d0:db:d4:7b:f0:ba:
dd:c0:03:10:ae:3d:11:96:a4:a6:64:ce:98:9a:ed:f9:8d:af:
f7:6a:bc:a3:de:0d:13:90:1e:cc:48:de:b7:a6:63:6f:1c:76:
7d:c5:c1:c7:3a:fb:05:b0:89:81:fd:42:70:2d:43:b7:a4:30:
05:9e:25:cb:35:f2:f2:fe:1d:4d:60:c0:64:66:9b:a4:02:2e:
7e:c6:89:24:77:ff:f5:a1:6a:9e:20:22:a0:25:62:93:14:fd:
22:7a:ae:43:3b:54:b0:db:ca:65:ee:09:01:95:b2:b9:d2:b2:
64:4d:bc:95:ce:f8:d2:1a:02:8b:65:e3:62:35:3e:ca:26:bc:
3c:62:67:7d:a8:d8:bd:c0:62:e4:ba:12:c8:c7:ac:35:aa:f7:
d5:7e:e0:93:64:8e:40:02:13:9c:12:da:7a:fc:d4:48:86:53:
e8:8c:92:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 12:48:47 2025 by rpki-client