Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/ae09fb-f536-47a1-9787-f1f603f91971/1/Sq_kWzD6f1lJJd05W6FM77Zz4sA.mft
File: Sq_kWzD6f1lJJd05W6FM77Zz4sA.mft (raw, json)
Hash identifier: EEK3nlTVciisSEJU3v5hmaRg0UIl9XUEAsSRFXSQihg=
Subject key identifier: E8:12:8B:AA:E0:84:EB:C4:48:45:C5:EE:3B:A0:00:66:04:D4:DF:25
Authority key identifier: 4A:AF:E4:5B:30:FA:7F:59:49:25:DD:39:5B:A1:4C:EF:B6:73:E2:C0
Certificate issuer: /CN=4aafe45b30fa7f594925dd395ba14cefb673e2c0
Certificate serial: 0194BC3C6CB70DBAA074096B4556DCC319A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sq_kWzD6f1lJJd05W6FM77Zz4sA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/ae09fb-f536-47a1-9787-f1f603f91971/1/Sq_kWzD6f1lJJd05W6FM77Zz4sA.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 12:01:04 +0000
Manifest this update: Fri 31 Jan 2025 12:01:04 +0000
Manifest next update: Sat 01 Feb 2025 12:01:04 +0000
Files and hashes: 1: 9jNi3XWKVAeYgvXNk0P0T-yhT_A.roa (hash: r6wD0yfA7SejIQA44lGGyfTLE1iB9zVRdLay3h3WMPk=)
2: Sq_kWzD6f1lJJd05W6FM77Zz4sA.crl (hash: D4bbCHbkhyHZqjno1AL23k0CWM8CYOJ2hGXxThwvBws=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:6c:b7:0d:ba:a0:74:09:6b:45:56:dc:c3:19:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4aafe45b30fa7f594925dd395ba14cefb673e2c0
Validity
Not Before: Jan 31 12:01:04 2025 GMT
Not After : Feb 1 12:01:04 2025 GMT
Subject: CN=e8128baae084ebc44845c5ee3ba0006604d4df25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:cf:5d:32:10:bb:99:55:bf:3b:22:a7:94:f8:
c8:25:e9:9e:a5:c2:a6:f0:6e:71:67:38:40:c3:d1:
77:8b:a3:e2:ec:82:81:7a:c7:0d:f5:05:a8:97:3d:
b9:35:0d:43:38:b6:43:40:ad:3a:91:73:cf:56:db:
c5:3f:87:fd:de:44:f5:47:60:1e:94:1f:46:29:b0:
2f:9d:fd:4f:09:56:f4:22:3f:71:02:4c:05:61:21:
1d:a3:ab:77:85:6b:df:cc:bb:21:3a:bd:35:66:4e:
e2:4e:42:d7:59:26:4d:6c:3a:f3:19:f1:f3:e2:b9:
b2:7b:03:aa:9d:ac:81:63:be:32:52:0a:8d:a7:db:
1f:1b:57:df:ed:9c:f0:c4:b2:ea:85:a0:1c:b5:45:
6c:c9:22:ab:f7:27:d2:67:05:97:1b:83:f6:e2:2c:
88:a0:84:95:4c:85:38:8f:5d:f4:26:fa:6b:af:5b:
a9:c6:44:8b:ce:af:9f:52:d5:62:83:56:7f:d6:26:
d8:8e:83:fe:01:77:49:18:1d:da:3a:4c:d5:40:10:
29:d6:0d:38:d1:b9:2d:f6:d7:3c:d1:5f:fc:5d:fe:
68:2e:d7:67:58:f1:16:87:be:09:b2:2b:b3:57:1a:
fb:53:b0:61:a4:f9:01:40:e0:f1:70:d6:35:9f:5f:
13:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:12:8B:AA:E0:84:EB:C4:48:45:C5:EE:3B:A0:00:66:04:D4:DF:25
X509v3 Authority Key Identifier:
keyid:4A:AF:E4:5B:30:FA:7F:59:49:25:DD:39:5B:A1:4C:EF:B6:73:E2:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sq_kWzD6f1lJJd05W6FM77Zz4sA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/ae09fb-f536-47a1-9787-f1f603f91971/1/Sq_kWzD6f1lJJd05W6FM77Zz4sA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/ae09fb-f536-47a1-9787-f1f603f91971/1/Sq_kWzD6f1lJJd05W6FM77Zz4sA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:90:aa:90:1b:93:6d:9d:b6:ac:25:8c:fa:b5:81:39:b3:a8:
85:c1:33:1c:49:dd:ae:22:3d:2c:ac:6f:dd:af:e3:bb:08:98:
68:35:88:31:b5:66:be:37:b4:5b:ab:98:2f:09:b4:b6:8f:c7:
ee:43:92:07:bb:92:6c:2d:16:aa:46:f5:19:97:c3:a9:85:15:
54:41:7c:56:0f:a7:ca:14:45:f7:e5:6e:3f:1d:5f:ef:2b:b3:
11:0e:c6:07:87:73:10:e1:7d:3d:6c:cb:6b:0b:29:a0:e3:df:
00:9b:bf:36:0f:96:c7:88:4a:ab:ca:cd:8e:eb:43:f2:35:c5:
6f:39:82:95:d6:6b:ba:6c:44:39:ee:e8:36:28:70:82:b8:7b:
d9:65:7b:e1:48:c1:a0:7e:35:55:ea:00:48:f8:11:91:ee:78:
6d:31:5b:ed:eb:41:d7:40:cb:a6:b6:1b:ed:7b:9e:8c:4a:53:
28:a5:28:c3:38:8c:e9:7a:0f:e0:8f:c4:a6:8d:b8:a7:96:11:
2b:ce:c7:1d:d7:f6:ee:cd:77:f5:7a:54:f2:ea:96:55:92:91:
0e:95:ad:ef:46:48:c5:d9:a6:7f:f4:5d:8d:0a:f6:f8:fb:d7:
48:89:5b:8e:40:42:e8:8f:82:1a:54:80:39:e0:ac:a7:8f:69:
e2:26:87:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:46 2025 by rpki-client