Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/f0f5ff-a820-4dba-8ee1-cda57426de22/1/SAQjqhfQT1bGkAQDRdZ2K7_R-Is.mft
File: SAQjqhfQT1bGkAQDRdZ2K7_R-Is.mft (raw, json)
Hash identifier: ajcOto7/IfM/wxXbLNY5V5LUO7+hD6nw69qUsZTZ4gk=
Subject key identifier: 8A:C7:4E:4C:02:47:92:E6:65:4D:3F:A5:EB:BC:3F:B2:4D:2F:E5:04
Authority key identifier: 48:04:23:AA:17:D0:4F:56:C6:90:04:03:45:D6:76:2B:BF:D1:F8:8B
Certificate issuer: /CN=480423aa17d04f56c690040345d6762bbfd1f88b
Certificate serial: 0194BBCE536638D900BDC094D4E3B96AE9A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAQjqhfQT1bGkAQDRdZ2K7_R-Is.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/f0f5ff-a820-4dba-8ee1-cda57426de22/1/SAQjqhfQT1bGkAQDRdZ2K7_R-Is.mft
Manifest number: 0EE2
Signing time: Fri 31 Jan 2025 10:00:48 +0000
Manifest this update: Fri 31 Jan 2025 10:00:48 +0000
Manifest next update: Sat 01 Feb 2025 10:00:48 +0000
Files and hashes: 1: SAQjqhfQT1bGkAQDRdZ2K7_R-Is.crl (hash: I+XmDf/dyjKnOlZpe5BxiVBHuoM6bxhsaMFHsMcbB28=)
2: a4eWXe9mLzZdOuJF4g-i_sTPTK8.roa (hash: Nl6At3QtcKnCDV2p7jnqUB0ktT1iDDCBQexgyMCnTTI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:53:66:38:d9:00:bd:c0:94:d4:e3:b9:6a:e9:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=480423aa17d04f56c690040345d6762bbfd1f88b
Validity
Not Before: Jan 31 10:00:48 2025 GMT
Not After : Feb 1 10:00:48 2025 GMT
Subject: CN=8ac74e4c024792e6654d3fa5ebbc3fb24d2fe504
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f4:37:cb:10:53:df:f0:31:e3:35:d4:bc:5b:
b8:4b:9b:f2:3d:9b:ac:63:72:45:fe:e1:77:43:1a:
3d:73:7a:6d:32:da:71:46:ad:c5:90:ec:82:4b:ac:
cc:4d:25:6a:cf:05:f9:ff:4d:f6:14:9e:3b:19:bd:
34:f6:21:e6:36:2d:29:56:e9:59:c0:ac:be:e4:01:
fd:71:e0:38:30:a7:e3:25:48:0f:4b:1a:e6:76:e1:
5a:e3:ac:de:75:36:30:40:ea:52:6b:89:08:92:1d:
60:31:88:3c:24:0a:e5:e7:18:cf:49:0e:7b:c5:9a:
a3:af:1c:a3:8d:3a:c4:9b:ce:94:da:02:d0:53:e5:
9b:72:68:5d:96:a8:d1:77:b0:c3:38:88:ee:5b:db:
8c:c1:26:cb:ff:98:0e:fa:2d:51:4e:61:68:24:70:
52:22:e3:6c:66:03:80:68:d7:4f:20:b2:66:ce:0d:
0b:52:91:8a:64:ca:61:c9:3e:b7:b9:e2:06:e3:d8:
c0:2b:77:01:35:24:5d:6f:0f:e2:22:3e:1b:52:c1:
2d:e7:d3:e5:e9:04:7b:e6:cc:e8:b0:93:e5:fd:c1:
33:12:6e:53:ff:0b:21:21:98:e9:6d:cf:15:05:e7:
2e:88:66:d5:cd:b4:89:15:ca:ce:cd:17:b2:1e:c0:
f2:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:C7:4E:4C:02:47:92:E6:65:4D:3F:A5:EB:BC:3F:B2:4D:2F:E5:04
X509v3 Authority Key Identifier:
keyid:48:04:23:AA:17:D0:4F:56:C6:90:04:03:45:D6:76:2B:BF:D1:F8:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAQjqhfQT1bGkAQDRdZ2K7_R-Is.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/f0f5ff-a820-4dba-8ee1-cda57426de22/1/SAQjqhfQT1bGkAQDRdZ2K7_R-Is.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/f0f5ff-a820-4dba-8ee1-cda57426de22/1/SAQjqhfQT1bGkAQDRdZ2K7_R-Is.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:fa:e2:c2:6a:7e:5c:85:63:72:cc:ce:00:52:02:21:d2:24:
6b:a3:0c:99:db:ae:a1:42:49:4f:7b:57:13:6d:af:ce:12:c0:
7b:da:4d:94:ba:57:12:eb:d2:94:32:1d:c6:f6:94:17:0a:c1:
ff:7c:27:c2:d0:c6:15:d9:c3:74:80:f8:b0:05:db:46:fb:85:
fe:1d:79:24:58:b4:f9:87:fe:50:2d:d6:82:1e:13:a4:d8:ca:
03:b8:8c:20:3c:e3:db:e0:42:06:ef:c8:7b:0f:f4:7b:f9:24:
37:38:1b:87:3a:3f:0b:dc:a5:97:c1:8d:f4:2d:85:3e:63:4e:
b4:4e:43:22:f8:d5:15:5c:7e:de:b8:4a:0f:0e:1d:c8:80:8b:
19:e3:00:d3:d3:75:6d:b2:8d:62:2f:d2:df:30:cd:83:68:9e:
8a:cd:33:aa:05:f8:60:ae:65:9f:ce:f1:5c:19:42:67:47:c3:
8d:7a:20:34:2f:06:58:b1:45:2e:e3:21:0b:c4:78:b0:0c:69:
0b:93:76:c8:d2:80:25:a6:c9:3f:10:78:54:00:08:8b:1b:94:
ba:34:8d:f3:d2:ba:23:44:c8:ec:27:c7:9b:d3:97:21:8a:c1:
67:1e:83:b8:2c:98:34:9f:5b:35:0c:1b:ce:d7:61:15:bb:22:
ef:85:99:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:25:53 2025 by rpki-client