Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/75dede-5449-4d47-9b51-9b5df85c1140/1/sxk4vHICgkRLq9OyazSStFats5c.mft
File: sxk4vHICgkRLq9OyazSStFats5c.mft (raw, json)
Hash identifier: 0LWUAgtqQO7EN923UxKwbr+gsl5V5r/qb0GlIhY8zkM=
Subject key identifier: C2:FE:D4:1B:12:47:B3:BE:C5:68:F7:E1:20:DE:F9:D5:C7:EC:56:58
Authority key identifier: B3:19:38:BC:72:02:82:44:4B:AB:D3:B2:6B:34:92:B4:56:AD:B3:97
Certificate issuer: /CN=b31938bc720282444babd3b26b3492b456adb397
Certificate serial: 0194BBCE15D3CA04A3E41C812EB167032680
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sxk4vHICgkRLq9OyazSStFats5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/75dede-5449-4d47-9b51-9b5df85c1140/1/sxk4vHICgkRLq9OyazSStFats5c.mft
Manifest number: 0749
Signing time: Fri 31 Jan 2025 10:00:32 +0000
Manifest this update: Fri 31 Jan 2025 10:00:32 +0000
Manifest next update: Sat 01 Feb 2025 10:00:32 +0000
Files and hashes: 1: mMmymzplWMeJzzgdG7P3tHtpBaQ.roa (hash: /bqXbIc2T1Ug7GTSXeUaRuS3D15TA3H+LDCDm5yP2ts=)
2: sxk4vHICgkRLq9OyazSStFats5c.crl (hash: CTDqXXbxXoZLlKA+7Pu8B33xwCgGVfFHrBsQRfsrItI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:15:d3:ca:04:a3:e4:1c:81:2e:b1:67:03:26:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b31938bc720282444babd3b26b3492b456adb397
Validity
Not Before: Jan 31 10:00:32 2025 GMT
Not After : Feb 1 10:00:32 2025 GMT
Subject: CN=c2fed41b1247b3bec568f7e120def9d5c7ec5658
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:0d:62:c4:1d:5c:be:85:f9:eb:34:c6:4c:ac:
16:8a:d4:20:4a:e8:f6:b2:17:f7:0f:9c:90:ed:9a:
16:37:b0:0c:55:98:a6:d9:08:cb:a3:90:0f:4f:cc:
56:01:fd:2e:6f:19:c8:93:c9:98:65:38:75:f3:94:
8c:95:5d:da:0d:67:53:19:2c:53:f7:02:ef:eb:d4:
b3:1a:f1:bd:9a:11:db:08:cb:6c:2d:a2:22:7c:01:
d1:c6:02:3a:d6:c1:79:e0:97:40:45:a3:64:f6:f6:
b3:14:59:7c:ff:f7:5b:b8:9e:c4:74:ae:3b:8b:56:
36:72:7a:4e:19:17:6a:fc:7f:f4:31:c8:7c:65:85:
5b:41:35:05:a1:9c:ed:45:93:cb:85:b4:a5:75:a4:
11:82:a5:05:07:64:db:8f:66:df:76:ce:ce:67:4f:
0f:9d:92:dd:b9:67:49:5d:34:76:77:8a:63:fe:b8:
2b:69:8b:4f:19:6d:cd:4f:ab:75:47:34:43:c2:36:
e3:51:e6:68:a2:51:e6:5c:7b:c2:69:f7:6d:ed:d5:
28:49:6a:27:03:77:24:d9:63:a7:60:e2:ca:5d:7c:
d4:41:df:ac:2d:ee:fb:2c:57:b7:23:c4:30:f9:c5:
bc:28:9c:88:36:cd:5b:ac:19:7c:d2:44:c8:59:30:
2e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:FE:D4:1B:12:47:B3:BE:C5:68:F7:E1:20:DE:F9:D5:C7:EC:56:58
X509v3 Authority Key Identifier:
keyid:B3:19:38:BC:72:02:82:44:4B:AB:D3:B2:6B:34:92:B4:56:AD:B3:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sxk4vHICgkRLq9OyazSStFats5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/75dede-5449-4d47-9b51-9b5df85c1140/1/sxk4vHICgkRLq9OyazSStFats5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/75dede-5449-4d47-9b51-9b5df85c1140/1/sxk4vHICgkRLq9OyazSStFats5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:ca:c0:01:f5:9d:bf:68:34:f7:cc:3d:2a:ef:80:c7:c1:9f:
d0:8e:74:fc:9c:69:bc:e0:c8:b4:cf:b1:84:72:6b:f9:99:65:
68:f1:08:c5:c1:17:d8:41:9f:66:d2:98:56:95:e9:ec:17:ce:
de:48:ef:31:5f:e7:36:54:a3:ac:04:c9:2b:d1:de:d0:36:b4:
2e:22:f7:ce:9f:3e:d7:68:d9:e5:55:54:ad:44:31:df:a5:d8:
31:46:70:5b:f8:92:14:ba:28:69:b2:fa:80:7e:72:f9:28:3e:
7b:00:92:91:63:d2:48:88:50:09:7e:cb:b5:69:33:84:99:3d:
fc:6e:df:58:c4:f4:d5:c7:fa:e7:d2:fe:1e:2a:d3:76:45:d4:
93:41:7a:59:5a:f3:f9:ea:9e:e3:16:3a:13:17:ee:e9:7c:de:
9a:73:3d:03:8a:ce:2d:97:8d:2b:0c:da:5b:87:0d:cb:6c:84:
47:96:c8:32:cd:87:60:cf:f7:06:db:28:18:51:08:aa:aa:9e:
61:95:0d:a5:20:60:f6:9b:aa:37:4d:fb:0a:b5:a2:91:db:d2:
81:e1:24:5e:27:6c:92:f6:44:de:ac:9f:9b:68:25:a9:72:48:
72:ac:41:a8:70:96:e1:1e:57:ca:5b:ca:e8:42:f6:45:53:0c:
fe:c3:d0:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:56:05 2025 by rpki-client