Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/3e2c38-f96f-40df-aeac-f0150c81acf5/1/SScSTZgDp95UiDFko3bqcuPGPq8.mft
File: SScSTZgDp95UiDFko3bqcuPGPq8.mft (raw, json)
Hash identifier: NNyNC4agOngNWQgEkTz/UW/f4lVgfv7HF/R7NBj2RgE=
Subject key identifier: 4A:12:41:E4:85:3B:41:2A:FA:FB:59:62:B4:B5:39:67:C4:F3:E5:CB
Authority key identifier: 49:27:12:4D:98:03:A7:DE:54:88:31:64:A3:76:EA:72:E3:C6:3E:AF
Certificate issuer: /CN=4927124d9803a7de54883164a376ea72e3c63eaf
Certificate serial: 0194BCE074BA73A57FE7AF5EB5DA817EB16B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SScSTZgDp95UiDFko3bqcuPGPq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/3e2c38-f96f-40df-aeac-f0150c81acf5/1/SScSTZgDp95UiDFko3bqcuPGPq8.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 15:00:14 +0000
Manifest this update: Fri 31 Jan 2025 15:00:14 +0000
Manifest next update: Sat 01 Feb 2025 15:00:14 +0000
Files and hashes: 1: 6-IQUKyeOlnZ0n7k-mpTFfKu5nA.roa (hash: uwqOWT1eD0xXX0n+hN5F7B5Z9MhYA/dYHW/YSlQ6tT8=)
2: OJmLUcdGyKqyreRJA04sZVowZg0.roa (hash: ZPcGNQNPGXt7sqvYIqkF3ZoSuhuiF050QsXqHbGtgGo=)
3: SScSTZgDp95UiDFko3bqcuPGPq8.crl (hash: 4ONCHmg547xt8GS5eqwtX3s8nndY/AK7bx//ilr7RdA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:74:ba:73:a5:7f:e7:af:5e:b5:da:81:7e:b1:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4927124d9803a7de54883164a376ea72e3c63eaf
Validity
Not Before: Jan 31 15:00:14 2025 GMT
Not After : Feb 1 15:00:14 2025 GMT
Subject: CN=4a1241e4853b412afafb5962b4b53967c4f3e5cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:27:1c:b6:02:a4:26:9e:83:2e:14:86:ee:de:
e3:d0:db:0f:12:60:80:58:b2:f8:28:f3:d1:57:a6:
f2:53:51:a7:2b:f4:bb:c1:fc:ef:b3:3a:f5:5c:a6:
00:6e:33:8c:e7:ee:f6:55:4b:db:e5:01:ea:6e:ea:
d0:9c:9e:41:76:52:69:54:38:5d:11:00:f1:ae:30:
3f:ab:f4:2e:c8:df:79:36:6d:69:d0:d1:d6:90:b4:
13:27:42:ee:d0:19:1f:c8:75:d0:44:f9:14:ce:24:
44:e6:16:af:92:bf:23:3f:4a:51:29:c3:ee:36:b1:
90:c4:52:46:31:14:c0:11:a1:37:62:8e:4d:34:8c:
3e:ef:0a:b6:40:2c:85:bf:16:be:6a:b2:90:96:f0:
cd:af:d7:03:40:58:4b:54:99:63:4e:cb:c7:c1:4f:
2b:5c:db:2b:62:03:a4:1c:20:bf:10:5b:a7:14:4a:
8e:98:f7:0d:d3:8e:79:df:a1:f7:6b:81:28:50:9c:
f3:32:43:56:94:c4:71:35:b4:62:1c:ce:ea:1f:b9:
c3:ac:e5:26:80:14:c7:7d:3e:3e:9c:00:14:9c:fb:
4e:46:4a:59:00:5c:87:39:3a:d2:9c:0b:4d:c1:b6:
cc:8a:ef:82:43:f7:2a:77:8c:e1:49:ca:21:39:44:
32:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:12:41:E4:85:3B:41:2A:FA:FB:59:62:B4:B5:39:67:C4:F3:E5:CB
X509v3 Authority Key Identifier:
keyid:49:27:12:4D:98:03:A7:DE:54:88:31:64:A3:76:EA:72:E3:C6:3E:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SScSTZgDp95UiDFko3bqcuPGPq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/3e2c38-f96f-40df-aeac-f0150c81acf5/1/SScSTZgDp95UiDFko3bqcuPGPq8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/3e2c38-f96f-40df-aeac-f0150c81acf5/1/SScSTZgDp95UiDFko3bqcuPGPq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:0b:2d:58:65:9f:7e:20:f9:f3:73:a2:e8:5f:14:53:d3:29:
79:56:81:11:ab:d2:38:af:97:d4:ca:cb:b4:94:9e:51:8a:3a:
15:37:ec:6e:d5:39:2a:9c:58:1b:84:1e:a5:df:4e:cc:6d:2f:
d9:ed:4c:8e:ec:06:a9:df:64:58:60:d6:96:c2:eb:26:18:82:
fa:66:a3:77:cf:0e:78:80:f6:c8:94:5d:22:7c:d0:ee:20:f5:
83:b7:5c:4f:94:bb:c7:62:83:ad:a7:b2:79:aa:0c:e9:b1:2b:
01:31:e1:a9:b9:8d:ef:9d:b1:b5:10:a8:05:06:5e:20:be:40:
8a:3f:a8:4f:85:8a:fa:bb:a4:42:e4:91:95:81:20:c3:b5:1e:
b1:ee:2e:fa:f8:9b:fe:31:8b:64:0c:6c:85:ad:9f:e1:ee:58:
ea:a7:59:c7:37:1c:30:ea:00:a9:07:6d:57:d9:db:46:9c:78:
86:3e:88:58:34:c3:58:ca:1b:c1:78:d3:f4:71:f2:f6:a5:a0:
7d:9d:68:1b:95:3d:53:b2:7d:54:7f:cf:4f:d1:46:43:0a:b1:
09:4d:0a:1f:a1:6c:f8:3b:8d:cd:b7:34:b0:b8:10:72:28:19:
8e:ba:18:ff:cc:5f:9c:90:6f:be:04:2b:a0:c3:92:c7:63:6c:
b2:e1:c0:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:31 2025 by rpki-client