Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/c6f76b-7887-412a-bab4-ec2819c0ac4d/1/saC9QgWKA5D0Y8_rexfiHeC3VQA.mft
File: saC9QgWKA5D0Y8_rexfiHeC3VQA.mft (raw, json)
Hash identifier: J8n1nMo7fAiYCPTkiauYTQPIVftrfs/pAAaL6AIIBGY=
Subject key identifier: 48:C5:EA:9E:17:CB:6F:34:D6:8F:50:41:B6:30:E3:4D:C5:CD:C2:35
Authority key identifier: B1:A0:BD:42:05:8A:03:90:F4:63:CF:EB:7B:17:E2:1D:E0:B7:55:00
Certificate issuer: /CN=b1a0bd42058a0390f463cfeb7b17e21de0b75500
Certificate serial: 0194BD4E62CBE5AFABE58C5CB62775D30403
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saC9QgWKA5D0Y8_rexfiHeC3VQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/c6f76b-7887-412a-bab4-ec2819c0ac4d/1/saC9QgWKA5D0Y8_rexfiHeC3VQA.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 17:00:18 +0000
Manifest this update: Fri 31 Jan 2025 17:00:18 +0000
Manifest next update: Sat 01 Feb 2025 17:00:18 +0000
Files and hashes: 1: M5ygsUf6TUqUYI8FV2cjTiESBdE.roa (hash: inJMcRO+0HtRn269DlSaUq0NeeQUCkuMxbxILPu+WG8=)
2: saC9QgWKA5D0Y8_rexfiHeC3VQA.crl (hash: LaHux0gxKsm1VcVKcWUFrrrcgD+DQiJTH/WuMOBtZPs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:62:cb:e5:af:ab:e5:8c:5c:b6:27:75:d3:04:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a0bd42058a0390f463cfeb7b17e21de0b75500
Validity
Not Before: Jan 31 17:00:18 2025 GMT
Not After : Feb 1 17:00:18 2025 GMT
Subject: CN=48c5ea9e17cb6f34d68f5041b630e34dc5cdc235
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e7:d6:85:ec:3f:b7:e7:fb:7b:13:3a:c0:ea:
c6:db:ee:37:2c:12:a1:14:d5:59:5d:fd:0f:99:28:
1c:13:5a:59:31:2c:aa:18:c9:fb:8f:fc:03:01:03:
0f:dc:75:6a:19:07:66:98:b7:f7:95:23:f2:4a:e4:
ed:ed:b4:8b:9a:15:94:f5:41:e0:81:18:ed:85:d5:
3a:b5:5f:24:b8:fa:4b:98:ca:d6:c6:4c:7b:6b:11:
4c:3e:b9:a1:fb:92:26:f8:cc:86:c8:b2:6c:ef:4e:
e1:3f:45:88:a9:a2:84:e8:44:e9:cd:a6:f2:2c:88:
8b:55:b8:54:5e:38:36:a6:86:39:9f:47:36:4a:1d:
57:26:6d:91:33:96:52:bf:cd:56:d9:50:dc:9c:df:
da:e0:15:8b:f4:3f:51:f3:d5:f9:83:48:37:68:12:
01:c2:b5:c1:bc:58:07:09:7e:37:4d:a1:3a:a8:73:
24:7b:92:8a:a7:55:c7:b8:d5:1e:cd:a3:02:c9:99:
a1:29:4a:07:e6:d4:13:8a:75:ea:3d:47:64:d9:b5:
72:84:7f:a5:40:ee:c6:61:33:22:3c:a0:bd:39:d1:
da:54:dc:f2:60:cc:15:aa:e1:e4:e4:b7:02:c4:14:
ba:6e:92:7e:28:e1:fd:32:8c:79:ea:f9:1f:f7:c7:
a0:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:C5:EA:9E:17:CB:6F:34:D6:8F:50:41:B6:30:E3:4D:C5:CD:C2:35
X509v3 Authority Key Identifier:
keyid:B1:A0:BD:42:05:8A:03:90:F4:63:CF:EB:7B:17:E2:1D:E0:B7:55:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saC9QgWKA5D0Y8_rexfiHeC3VQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/c6f76b-7887-412a-bab4-ec2819c0ac4d/1/saC9QgWKA5D0Y8_rexfiHeC3VQA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/c6f76b-7887-412a-bab4-ec2819c0ac4d/1/saC9QgWKA5D0Y8_rexfiHeC3VQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:f7:46:5b:6c:62:4a:99:0d:a0:7c:55:38:d9:9e:23:8e:2e:
d3:b7:e3:83:05:84:87:1f:ea:c2:4e:7f:cd:94:d4:da:61:a1:
06:1e:9e:a1:e6:7e:d8:19:b3:2a:33:8a:5b:6b:48:e1:4f:e6:
ef:1e:93:1e:55:6e:c2:16:45:a9:ee:88:09:48:c2:b7:f9:e5:
e5:35:f7:bf:3c:7a:13:f7:5d:f4:c9:bc:8f:16:ec:4f:73:9d:
ec:08:60:27:11:87:cf:ae:f9:9b:64:d6:3f:db:b1:f9:e5:d9:
c4:8d:14:a2:cb:a2:85:30:f3:89:df:cd:62:ad:7b:d7:8c:02:
c9:14:9d:70:9b:e0:dd:3b:e7:66:1d:69:67:2a:cc:14:1c:f4:
6e:10:a0:b2:bc:5b:4b:f4:f5:3d:6a:fd:23:90:ea:c2:7f:59:
d7:09:d8:42:4a:a8:59:11:93:d5:8c:c7:9c:15:72:c8:f4:02:
a3:38:bd:59:a3:04:06:7e:66:61:b8:19:f0:85:cb:f7:3d:52:
26:54:a9:7f:9e:1f:88:be:95:43:27:b3:c5:29:3e:df:1f:c3:
b4:b8:a5:19:ab:97:4b:67:a0:98:94:e2:17:7f:c9:cd:c5:79:
fa:23:ae:2c:4b:f4:f9:c2:b1:57:5c:32:7f:97:74:be:f3:62:
2e:30:42:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:26:56 2025 by rpki-client