Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/28f7a6-e1ba-4978-9122-e18e7b2ac536/1/SU14c0FlEKL7I0bvNCKAFVUicTs.mft
File: SU14c0FlEKL7I0bvNCKAFVUicTs.mft (raw, json)
Hash identifier: DKdXMJIvOliyBDyQ/u0Q5qhF4h5kAW4KJvXuu0OvVjs=
Subject key identifier: 8D:8E:B1:A4:DB:AA:6C:76:D9:ED:BB:80:AF:2F:0E:EA:17:49:53:94
Authority key identifier: 49:4D:78:73:41:65:10:A2:FB:23:46:EF:34:22:80:15:55:22:71:3B
Certificate issuer: /CN=494d7873416510a2fb2346ef342280155522713b
Certificate serial: 0194BC730C6A757A61239BDC8931B11F01AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SU14c0FlEKL7I0bvNCKAFVUicTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/28f7a6-e1ba-4978-9122-e18e7b2ac536/1/SU14c0FlEKL7I0bvNCKAFVUicTs.mft
Manifest number: 113B
Signing time: Fri 31 Jan 2025 13:00:43 +0000
Manifest this update: Fri 31 Jan 2025 13:00:43 +0000
Manifest next update: Sat 01 Feb 2025 13:00:43 +0000
Files and hashes: 1: B8HrelUy9bYGyo-udBZpXQ76dPg.roa (hash: 1JcwupsyhEziaGEtjnyo+5LdSyy6jIrto6vLWzkI9l8=)
2: SU14c0FlEKL7I0bvNCKAFVUicTs.crl (hash: OMIvvcll+rU3xjkwGVKPETSErb0JxjK1oywYccLq8tQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:0c:6a:75:7a:61:23:9b:dc:89:31:b1:1f:01:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=494d7873416510a2fb2346ef342280155522713b
Validity
Not Before: Jan 31 13:00:43 2025 GMT
Not After : Feb 1 13:00:43 2025 GMT
Subject: CN=8d8eb1a4dbaa6c76d9edbb80af2f0eea17495394
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:1b:30:e5:e7:79:8a:c5:a3:ca:9c:7a:78:fd:
a2:b1:76:b5:8b:b7:a8:b9:b4:8e:83:d8:5c:08:2e:
bf:ec:3d:ca:07:55:0a:38:d3:7e:80:6b:93:49:a3:
2e:28:d2:3d:dd:93:19:ae:83:19:11:3e:4b:f1:17:
21:77:97:fc:7b:76:d2:58:08:c0:be:a5:9e:97:db:
43:51:ee:4f:c4:53:46:17:d6:4d:4e:32:91:b9:58:
df:55:b3:87:da:3b:43:96:8e:1c:80:b7:cd:b5:24:
cd:79:65:5a:fa:bb:d5:79:21:d5:6c:ab:32:8b:be:
6f:d8:55:f1:5e:0e:6d:e9:5f:d1:59:d2:37:05:e9:
04:0d:80:55:d4:9d:29:1b:02:bd:b0:21:a3:07:c5:
ab:86:a8:32:e2:6c:56:83:c1:73:4c:1b:7c:90:ae:
01:ad:77:d0:c9:9a:fb:6d:96:e7:7f:02:c2:59:80:
3b:8e:e6:70:6f:d6:0f:39:28:5b:6e:3d:46:0b:2c:
f6:3e:e3:bd:f9:20:5e:ac:ca:30:11:f9:3e:03:ea:
9f:33:2d:47:82:01:fb:86:4a:3a:cc:d3:0a:90:07:
f7:f0:3c:0b:09:92:16:8f:85:56:f8:ae:49:ba:51:
ca:04:5b:b4:ba:72:18:13:e0:1c:d3:bb:a2:df:ef:
6c:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:8E:B1:A4:DB:AA:6C:76:D9:ED:BB:80:AF:2F:0E:EA:17:49:53:94
X509v3 Authority Key Identifier:
keyid:49:4D:78:73:41:65:10:A2:FB:23:46:EF:34:22:80:15:55:22:71:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SU14c0FlEKL7I0bvNCKAFVUicTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/28f7a6-e1ba-4978-9122-e18e7b2ac536/1/SU14c0FlEKL7I0bvNCKAFVUicTs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/28f7a6-e1ba-4978-9122-e18e7b2ac536/1/SU14c0FlEKL7I0bvNCKAFVUicTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:e0:a7:55:ac:30:ae:4c:bc:22:04:4c:7f:66:62:9b:3c:29:
03:79:81:43:10:bb:03:62:a7:26:23:1a:0b:18:5c:62:14:64:
da:c8:ae:e2:51:3a:1f:49:68:25:3e:ec:9f:85:c8:d2:85:c8:
25:5a:32:3e:45:95:62:03:1a:99:73:8f:b6:2b:85:11:19:14:
a3:07:70:27:72:a6:93:e2:c3:35:78:9a:a5:f1:59:d0:0b:42:
6c:f7:1e:96:a4:88:a8:a8:9d:2f:33:70:59:06:90:bf:c6:63:
67:d2:a7:08:82:9a:06:3a:7f:b5:07:bd:8b:4e:11:3b:da:63:
a2:f7:4e:3f:0d:eb:a4:7b:38:0a:e1:5a:f1:99:16:72:7e:d1:
34:c0:f2:f0:b7:a6:e1:ef:c2:a2:55:c3:9c:bd:04:e7:27:b6:
53:02:2a:dd:14:e9:dd:af:53:70:38:d4:76:8a:2c:95:5a:9c:
b9:af:c0:3a:bb:1b:78:89:21:13:85:81:de:77:d8:c1:b4:c3:
ec:1e:92:11:97:37:9a:8f:d2:a1:6a:6a:b8:90:16:7b:a4:b5:
33:8d:f8:6b:87:b0:ad:79:d9:30:c2:ed:a9:4a:2e:c3:c6:92:
61:d8:f1:87:01:48:17:57:a3:42:cd:7a:eb:b4:36:4c:f4:8f:
9a:9d:17:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:59:21 2025 by rpki-client