Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/6e6f51-4e13-465e-b4d6-2e8dcdd51651/1/SFldSlTtZEITxEYZXjb3jsGig5k.mft
File: SFldSlTtZEITxEYZXjb3jsGig5k.mft (raw, json)
Hash identifier: thYzTLBXSn1T9jWm60TMyetE0uAc/jKt9nF+ULakPIg=
Subject key identifier: 46:33:A3:C6:17:91:9F:DF:0D:19:C1:34:32:1C:3E:8E:D5:09:97:3E
Authority key identifier: 48:59:5D:4A:54:ED:64:42:13:C4:46:19:5E:36:F7:8E:C1:A2:83:99
Certificate issuer: /CN=48595d4a54ed644213c446195e36f78ec1a28399
Certificate serial: 0194BCAA0C71196420FA0B8ACD40D91EE819
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SFldSlTtZEITxEYZXjb3jsGig5k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/6e6f51-4e13-465e-b4d6-2e8dcdd51651/1/SFldSlTtZEITxEYZXjb3jsGig5k.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 14:00:48 +0000
Manifest this update: Fri 31 Jan 2025 14:00:48 +0000
Manifest next update: Sat 01 Feb 2025 14:00:48 +0000
Files and hashes: 1: 5TwfULMH-unHdDYOcT1BkwSNVj4.roa (hash: MnqaA2gAqS7okflGRdl3L2EkczyiAqyp5YnJcnh49kE=)
2: SFldSlTtZEITxEYZXjb3jsGig5k.crl (hash: fyzzFWexRQOvzYsEZ6kgiEVObg4NVOEEdhsabs9AWgk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:0c:71:19:64:20:fa:0b:8a:cd:40:d9:1e:e8:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48595d4a54ed644213c446195e36f78ec1a28399
Validity
Not Before: Jan 31 14:00:48 2025 GMT
Not After : Feb 1 14:00:48 2025 GMT
Subject: CN=4633a3c617919fdf0d19c134321c3e8ed509973e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:40:8e:77:bb:3a:a8:0a:0a:52:4c:30:9b:86:
46:bd:f2:c7:1d:e5:49:20:ae:d0:12:e5:16:19:00:
25:1c:8d:3b:11:15:64:36:52:5d:c4:13:ff:17:54:
cf:28:09:a6:63:d2:11:29:f2:10:94:6b:eb:5b:1d:
21:b7:30:fc:9e:7b:57:78:09:f2:d7:de:1a:0b:d7:
f9:ec:29:a2:1a:4b:03:10:64:15:18:73:96:14:61:
8b:b8:38:0f:c9:51:f3:1f:d3:b5:dc:4d:43:fd:27:
22:6f:99:66:a9:68:ee:12:71:ea:9d:b7:04:f3:16:
99:1c:ae:9a:5b:77:2a:20:0b:30:5b:5a:8d:1c:70:
bd:01:be:42:1d:f5:74:6d:34:d4:fe:b2:03:b9:fc:
38:c5:8e:62:2c:21:53:a2:e4:9f:c9:9e:31:e2:fa:
dd:7e:ae:71:84:ac:f3:57:b3:5b:a1:1d:fd:85:cf:
13:c2:58:36:70:13:22:45:e4:5e:43:52:02:b0:3a:
af:29:36:95:33:a9:53:d3:f8:97:e8:69:e9:39:f4:
d9:ef:67:b9:f3:81:cf:c3:44:3f:8f:1d:8d:8d:f9:
48:73:81:88:6b:43:ca:07:40:cc:4b:d0:44:8c:f0:
7e:77:07:c6:48:14:34:0a:59:be:99:c7:6f:49:86:
9d:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:33:A3:C6:17:91:9F:DF:0D:19:C1:34:32:1C:3E:8E:D5:09:97:3E
X509v3 Authority Key Identifier:
keyid:48:59:5D:4A:54:ED:64:42:13:C4:46:19:5E:36:F7:8E:C1:A2:83:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SFldSlTtZEITxEYZXjb3jsGig5k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6e6f51-4e13-465e-b4d6-2e8dcdd51651/1/SFldSlTtZEITxEYZXjb3jsGig5k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6e6f51-4e13-465e-b4d6-2e8dcdd51651/1/SFldSlTtZEITxEYZXjb3jsGig5k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:3f:da:77:15:21:6f:04:89:17:60:20:40:58:65:b4:34:9f:
0f:b8:d5:42:87:50:46:85:f3:26:a0:6a:83:ce:85:0e:df:c2:
01:9a:d9:fc:b7:0b:7d:c0:fa:5a:7a:c5:68:e0:00:90:1a:0e:
8c:71:1f:b1:a3:d7:16:66:f6:c1:da:62:49:75:3e:56:bb:29:
13:1b:b4:17:48:60:52:29:9e:cb:d1:c1:eb:c7:b1:13:7d:69:
22:d8:f1:06:44:da:c8:41:f1:bc:b2:72:11:94:e2:ca:d8:39:
14:df:40:ef:dc:ef:cb:97:fb:fc:62:0f:a3:d1:92:29:80:6e:
29:dd:e6:bc:8e:a6:ae:f6:2b:17:e0:33:d3:5a:e7:5f:ba:47:
b1:55:f3:81:bb:5e:f8:13:71:59:c7:2e:52:c9:8a:02:42:0d:
2d:0f:c1:68:50:a3:6f:98:b3:4d:1c:cf:95:48:04:45:89:5d:
75:ac:46:33:38:40:38:5b:ab:40:da:74:f2:a6:03:99:e8:d8:
a2:ca:a7:7b:cf:68:f8:d2:b2:bd:5c:0a:48:4b:c4:46:68:7f:
ea:d1:77:ad:b6:8e:0e:7a:f4:4e:bc:e3:a8:55:53:44:41:92:
51:74:23:20:90:b6:ca:a8:23:7c:68:43:85:04:8e:81:4d:20:
93:00:e7:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:55:20 2025 by rpki-client