Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/S42CIWXn8B9yLJc5Z_dVRgUkCAI.mft
File: S42CIWXn8B9yLJc5Z_dVRgUkCAI.mft (raw, json)
Hash identifier: z2MPMp/B3cQueaZghQdA/c0XXnlRyFP180u9vU0SM9w=
Subject key identifier: D8:99:A6:12:87:01:D6:7B:9E:F3:1A:72:B2:49:60:A5:92:1B:C4:27
Authority key identifier: 4B:8D:82:21:65:E7:F0:1F:72:2C:97:39:67:F7:55:46:05:24:08:02
Certificate issuer: /CN=4b8d822165e7f01f722c973967f7554605240802
Certificate serial: 0194BC04FFEC5E75035E6A868276FCBD6450
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S42CIWXn8B9yLJc5Z_dVRgUkCAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/S42CIWXn8B9yLJc5Z_dVRgUkCAI.mft
Manifest number: 114D
Signing time: Fri 31 Jan 2025 11:00:31 +0000
Manifest this update: Fri 31 Jan 2025 11:00:31 +0000
Manifest next update: Sat 01 Feb 2025 11:00:31 +0000
Files and hashes: 1: S42CIWXn8B9yLJc5Z_dVRgUkCAI.crl (hash: E6eKDM/MwD9EMFDNkfqYkPSnVWEdJLRa7KFSYQbnXLI=)
2: bL9sAOLGYhfURofnKnFBFn1wsJo.roa (hash: MQ9wm3ykSQpWjdkgAkUhN5KBzQ/fKRTzO8IDNPZe+jY=)
3: kjcDWuGIuX0pVG6bb41NnKIPOqs.roa (hash: YFnfiVE6rUbpB2uXyovY7NmRfmouuM77f2tO5i352qM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:ff:ec:5e:75:03:5e:6a:86:82:76:fc:bd:64:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b8d822165e7f01f722c973967f7554605240802
Validity
Not Before: Jan 31 11:00:31 2025 GMT
Not After : Feb 1 11:00:31 2025 GMT
Subject: CN=d899a6128701d67b9ef31a72b24960a5921bc427
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:51:84:6e:b2:3e:bf:b6:5f:68:5e:22:9e:83:
db:c4:cd:d5:ab:f8:40:e3:82:11:6c:89:22:74:f0:
3a:d6:a3:81:a2:58:39:d1:21:5c:95:2c:70:21:d7:
ae:46:cf:cd:35:7d:54:e1:0a:2a:34:45:01:28:14:
41:ed:27:87:d5:63:83:c5:3d:31:60:6d:35:d7:03:
d1:83:6c:e8:3d:6f:0b:55:96:29:86:82:c1:11:ce:
c9:84:79:bf:e5:af:e8:4d:46:01:6e:26:94:48:9e:
95:d7:ff:45:31:ae:ff:26:89:c0:96:d1:cb:dd:f9:
d7:e2:8a:f9:bc:d9:3a:b1:d4:10:a3:73:d5:7a:89:
66:01:b0:86:5a:82:f6:0c:f7:4a:04:1f:55:f5:a9:
3b:30:79:20:da:b3:82:43:3c:7f:f7:9f:e4:fb:eb:
e3:90:12:a5:8a:b1:d9:a7:d7:d9:24:b4:f7:1f:2c:
0d:a7:cd:f6:cd:44:37:d3:b1:91:97:5f:ab:d9:0e:
b0:89:a2:a1:90:1e:ad:93:e3:e1:cd:57:9d:75:26:
05:8d:76:bc:bf:7b:58:5d:dd:ea:3f:48:5e:4e:8c:
b9:2f:de:76:21:9d:c2:cb:7f:61:d1:90:69:0e:64:
3b:f2:56:d4:e9:3d:28:34:a2:24:c2:07:60:55:69:
ef:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:99:A6:12:87:01:D6:7B:9E:F3:1A:72:B2:49:60:A5:92:1B:C4:27
X509v3 Authority Key Identifier:
keyid:4B:8D:82:21:65:E7:F0:1F:72:2C:97:39:67:F7:55:46:05:24:08:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S42CIWXn8B9yLJc5Z_dVRgUkCAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/S42CIWXn8B9yLJc5Z_dVRgUkCAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/S42CIWXn8B9yLJc5Z_dVRgUkCAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:3f:a2:34:c0:fc:75:75:5a:16:3f:07:0e:62:97:7d:a9:94:
3b:cd:da:28:70:fa:ec:6a:eb:59:ac:df:7d:f0:8d:17:4c:16:
31:d8:fb:55:8c:b4:08:09:3f:73:38:3e:ac:6b:b0:f2:2b:51:
ba:ca:6e:12:72:e2:52:47:a2:2e:37:0d:8d:da:f9:d5:18:8d:
c9:e8:39:dd:52:59:31:d2:99:23:34:91:fc:21:0c:20:9f:98:
dd:89:4a:39:68:a1:63:4f:3a:ee:bc:9c:ba:12:e0:ac:29:00:
4d:29:35:de:88:1c:20:fe:6f:a3:73:2b:cd:9a:8a:08:27:cc:
2b:c7:c9:6f:dc:48:83:ef:ac:1c:75:f5:97:a5:ac:f2:1e:a1:
c5:db:73:90:3d:fb:17:55:70:13:dc:75:a4:e7:52:3b:83:11:
d8:c1:b1:9c:fd:d6:f1:fc:90:f9:85:df:b9:86:59:f8:73:70:
08:b7:39:7a:a7:55:7c:a7:6c:de:54:ab:f2:08:2f:a2:23:71:
0d:6b:ca:76:85:bf:42:25:08:7b:c6:07:60:6a:c1:69:de:3e:
cf:e7:38:e7:fb:75:5b:1f:7c:05:f7:b7:ab:64:f8:cb:e9:a8:
69:f0:31:29:38:78:80:89:83:c0:a4:ba:2b:8d:d3:66:0f:ad:
a0:6f:11:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:04:22 2025 by rpki-client