Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/597638-713c-44b7-9b70-25017ec94095/1/sgTq-NsT70M8-YIp0jLTMKX14lY.mft
File: sgTq-NsT70M8-YIp0jLTMKX14lY.mft (raw, json)
Hash identifier: Oguov7kph5ZOEkBIjKDq0qVx1dUvU6rgVKusxNV7+ak=
Subject key identifier: 79:62:54:F0:5B:C2:EB:EC:39:98:45:D0:19:A5:51:2F:85:71:0E:EA
Authority key identifier: B2:04:EA:F8:DB:13:EF:43:3C:F9:82:29:D2:32:D3:30:A5:F5:E2:56
Certificate issuer: /CN=b204eaf8db13ef433cf98229d232d330a5f5e256
Certificate serial: 0194BC04B23E8EC417908052302BFFAF22EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sgTq-NsT70M8-YIp0jLTMKX14lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/597638-713c-44b7-9b70-25017ec94095/1/sgTq-NsT70M8-YIp0jLTMKX14lY.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 11:00:11 +0000
Manifest this update: Fri 31 Jan 2025 11:00:11 +0000
Manifest next update: Sat 01 Feb 2025 11:00:11 +0000
Files and hashes: 1: sgTq-NsT70M8-YIp0jLTMKX14lY.crl (hash: DrBmgO1HssYWl5omHd6AB/o4k51xWupX8NBQOn/AJRk=)
2: xgKcu0KPsxc8M315Trs0GW1UUwk.roa (hash: ICZ6+2Jz2veLFc1cLdSpid822PA3P/5mVBK8JthGSW0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:b2:3e:8e:c4:17:90:80:52:30:2b:ff:af:22:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b204eaf8db13ef433cf98229d232d330a5f5e256
Validity
Not Before: Jan 31 11:00:11 2025 GMT
Not After : Feb 1 11:00:11 2025 GMT
Subject: CN=796254f05bc2ebec399845d019a5512f85710eea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:12:7c:26:10:81:04:f2:f8:20:23:20:ae:88:
7f:94:6c:41:bd:3b:4a:34:33:c2:60:92:a9:0e:a8:
cb:77:40:2a:a2:a8:11:50:50:61:f7:af:db:ce:22:
19:18:86:4c:3b:82:0d:a4:72:4d:ba:59:fa:fd:3d:
22:f1:cc:59:83:22:85:68:08:56:04:e0:4e:ed:35:
47:05:5c:50:0d:3e:96:2e:7e:df:d5:b7:c2:87:6d:
02:b0:1c:5d:9e:2c:43:d9:fd:f1:72:17:27:9c:5a:
69:a5:86:13:9d:04:a6:d2:6c:69:7f:f2:ca:85:a1:
38:de:a2:d6:11:dc:aa:90:78:fb:80:b6:ac:3c:9a:
83:a7:c2:a4:87:10:b7:1f:6c:8e:c3:41:ac:8f:51:
7a:2a:20:3f:91:c7:30:59:1e:97:22:a4:71:a0:be:
7f:d3:84:97:f0:29:a3:b6:55:01:0f:c6:f4:40:5b:
e3:92:7c:b6:75:3b:f7:0b:e2:d8:8a:54:bc:6a:1d:
c8:bb:73:32:7f:ff:8b:05:e8:95:5d:f3:0f:70:d3:
fe:9b:73:81:fd:97:0c:95:52:29:37:5b:fe:ce:07:
f6:5b:ec:3f:92:1e:fa:10:c7:07:2e:a9:70:28:3a:
dc:31:e2:d3:44:01:5f:a5:1c:96:6a:13:8e:95:a6:
e8:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:62:54:F0:5B:C2:EB:EC:39:98:45:D0:19:A5:51:2F:85:71:0E:EA
X509v3 Authority Key Identifier:
keyid:B2:04:EA:F8:DB:13:EF:43:3C:F9:82:29:D2:32:D3:30:A5:F5:E2:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sgTq-NsT70M8-YIp0jLTMKX14lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/597638-713c-44b7-9b70-25017ec94095/1/sgTq-NsT70M8-YIp0jLTMKX14lY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/597638-713c-44b7-9b70-25017ec94095/1/sgTq-NsT70M8-YIp0jLTMKX14lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:58:93:5e:66:e4:e2:ee:07:3c:b5:1b:49:c5:2e:ae:7c:89:
3f:47:0d:72:fa:ee:b5:48:46:2b:bd:43:ea:db:86:77:f2:dd:
51:da:3e:31:6b:04:fa:16:87:44:64:db:60:5a:cf:c0:d0:58:
e8:79:db:8b:5c:ba:7e:af:86:ab:ec:7a:8b:4b:21:21:74:2f:
f9:1d:4e:f1:27:a9:39:dc:9c:03:c2:5d:ea:1f:ce:e3:76:cf:
68:cd:f8:e8:a0:01:84:d4:eb:82:c2:59:5b:af:c8:1b:24:10:
7b:ec:f2:fd:f0:2f:34:0e:7d:0e:23:60:c4:00:1e:44:ac:47:
5c:11:e4:04:9d:5b:83:b8:20:f1:50:66:8a:32:16:c5:2f:c7:
92:b2:32:16:6f:d8:65:ec:3d:f6:2a:9c:73:c1:75:12:51:86:
f8:f2:c4:45:52:1e:74:e9:38:f4:8b:70:63:13:28:32:66:8d:
1f:8d:86:fb:88:8f:c9:44:ca:56:b0:70:6b:b5:5d:a2:2a:89:
a4:89:79:3a:be:75:99:80:a2:29:54:c2:60:ee:3d:28:cb:e9:
c2:f0:8e:71:ba:56:a8:ba:6f:51:ed:36:29:4f:48:6c:c1:61:
cc:50:67:e2:91:39:1e:3e:55:3c:f0:44:ff:4e:d4:a2:01:4b:
bd:68:5d:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:33 2025 by rpki-client