Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Sd2PGmKl1_gCEt4PPv51svozj_4.mft
File: Sd2PGmKl1_gCEt4PPv51svozj_4.mft (raw, json)
Hash identifier: qBW5jYhLD3Ra3L0ik3gB4QxMjRSS/sparXql2CYLWi4=
Subject key identifier: F3:5E:D1:FA:36:2C:DA:B1:49:E3:DB:1B:CA:F2:3E:80:E0:81:16:9E
Authority key identifier: 49:DD:8F:1A:62:A5:D7:F8:02:12:DE:0F:3E:FE:75:B2:FA:33:8F:FE
Certificate issuer: /CN=49dd8f1a62a5d7f80212de0f3efe75b2fa338ffe
Certificate serial: 0194BD4EB990C32D4231F0FFA74254B03699
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sd2PGmKl1_gCEt4PPv51svozj_4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Sd2PGmKl1_gCEt4PPv51svozj_4.mft
Manifest number: 0A86
Signing time: Fri 31 Jan 2025 17:00:40 +0000
Manifest this update: Fri 31 Jan 2025 17:00:40 +0000
Manifest next update: Sat 01 Feb 2025 17:00:40 +0000
Files and hashes: 1: G4PIQhFmstxloqH01mYzW2WE_jo.roa (hash: /lvN/Ib6qimQV84Y1Yl0AM+SQEQKFf7L9iK25AYSIfg=)
2: LNfEMDjY_YTxoMiy_uOumfnfyNk.roa (hash: jizecjae1peDBQRvjMSF893NWH3lcHT+Ec4yKOzqo74=)
3: Sd2PGmKl1_gCEt4PPv51svozj_4.crl (hash: xEZ9SrdT8y5Am5fnL2Cyk1Zlo8d7ICkr+4j0ugEBuaE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:b9:90:c3:2d:42:31:f0:ff:a7:42:54:b0:36:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49dd8f1a62a5d7f80212de0f3efe75b2fa338ffe
Validity
Not Before: Jan 31 17:00:40 2025 GMT
Not After : Feb 1 17:00:40 2025 GMT
Subject: CN=f35ed1fa362cdab149e3db1bcaf23e80e081169e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:8e:84:cc:2a:aa:1a:a9:39:dd:07:72:28:44:
ea:78:27:1d:10:6f:7c:fe:0b:c0:b5:ab:7a:52:23:
52:11:8f:13:c2:99:8a:de:13:b5:40:a1:45:5b:cf:
c7:90:e6:53:a3:9a:af:33:a0:48:21:14:7f:57:5a:
1b:28:94:ba:1c:54:da:88:0c:ad:18:f8:ec:dc:59:
b0:7c:04:eb:27:5b:fa:24:e3:e3:17:7c:5d:4c:af:
e4:53:f5:cc:03:7d:03:a1:ba:56:f9:74:2f:bf:35:
92:ba:cf:8e:41:db:2c:f7:b4:1b:0e:4d:03:f3:0d:
d4:d5:bc:02:ab:c1:d8:a0:bf:76:40:58:6f:91:ae:
58:54:ab:e6:d4:db:38:71:f4:d0:07:b1:7c:5d:81:
57:89:9e:e0:ba:98:eb:e6:58:95:ce:53:24:46:3a:
ef:5e:10:34:3c:fc:7c:e6:37:cf:b4:d9:59:25:f5:
e8:29:21:a6:b7:33:aa:29:84:d9:bc:a7:fa:c1:fa:
66:bd:71:33:f7:96:58:b4:7d:92:b9:94:a3:45:cb:
d8:db:0f:8b:86:50:3b:bb:fe:66:8a:e1:e2:c9:ce:
c3:e4:fa:e2:83:45:de:4e:6d:7e:88:a4:eb:e0:94:
5c:c8:2e:f0:6f:4c:c2:3f:0a:e4:9c:ec:e9:95:a1:
f8:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:5E:D1:FA:36:2C:DA:B1:49:E3:DB:1B:CA:F2:3E:80:E0:81:16:9E
X509v3 Authority Key Identifier:
keyid:49:DD:8F:1A:62:A5:D7:F8:02:12:DE:0F:3E:FE:75:B2:FA:33:8F:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sd2PGmKl1_gCEt4PPv51svozj_4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Sd2PGmKl1_gCEt4PPv51svozj_4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Sd2PGmKl1_gCEt4PPv51svozj_4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:3d:8a:cc:e6:20:bd:5d:77:c7:38:dd:b2:e5:77:9f:57:86:
c7:b9:de:b7:14:ad:c6:6a:04:0e:a0:1f:08:85:07:20:b1:7c:
fb:24:f9:9a:b4:fb:8e:da:da:46:cf:31:9e:f0:71:84:2c:65:
2f:b3:8b:bc:f0:aa:14:4b:04:d3:16:16:d4:84:6c:3a:e0:65:
98:13:31:f1:bd:44:8f:31:8a:e8:7a:a7:cf:5f:91:5f:7a:f9:
54:21:a6:d5:95:57:62:52:37:7b:2c:48:3d:d6:ea:e4:13:30:
93:13:83:6b:0f:3b:19:43:f7:ff:a0:f9:1b:6d:55:fa:47:11:
8b:08:cc:9b:71:a4:16:6c:b7:51:17:50:34:82:b6:5f:2b:f4:
17:a6:9e:dc:c4:17:46:08:61:3d:c8:b6:b6:7d:03:9f:f1:b7:
59:3a:7d:da:a8:b9:5b:0d:3c:11:b3:d3:48:c9:d0:64:3b:d7:
69:dd:5c:24:58:92:c7:48:2b:42:51:b9:0d:f9:8a:96:b8:38:
8c:c7:5f:83:aa:15:2a:ca:1f:2b:d6:87:87:ec:11:a5:79:b3:
21:95:90:03:38:93:2e:62:69:f2:1c:67:00:23:84:e2:36:9a:
49:db:55:0a:c6:71:bf:29:9e:a5:02:bb:26:2c:77:da:e9:ab:
85:95:aa:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 09:54:28 2025 by rpki-client