Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/513e8a-ad5b-42be-9b6e-b4269463bce8/1/SoPufcwyg3sLpbiR2PFFQ1qztgo.mft
File: SoPufcwyg3sLpbiR2PFFQ1qztgo.mft (raw, json)
Hash identifier: tqO0hNdfTJ32AGzK1QJLQTpvkWBk/LzY8UBYKV6oPqc=
Subject key identifier: 75:71:03:A6:B6:B8:EA:64:2E:77:2C:64:B9:A2:A9:F4:17:85:FB:8C
Authority key identifier: 4A:83:EE:7D:CC:32:83:7B:0B:A5:B8:91:D8:F1:45:43:5A:B3:B6:0A
Certificate issuer: /CN=4a83ee7dcc32837b0ba5b891d8f145435ab3b60a
Certificate serial: 0194BCAA20D29EBA91BCFD91600526D98B4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SoPufcwyg3sLpbiR2PFFQ1qztgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/513e8a-ad5b-42be-9b6e-b4269463bce8/1/SoPufcwyg3sLpbiR2PFFQ1qztgo.mft
Manifest number: 0E34
Signing time: Fri 31 Jan 2025 14:00:53 +0000
Manifest this update: Fri 31 Jan 2025 14:00:53 +0000
Manifest next update: Sat 01 Feb 2025 14:00:53 +0000
Files and hashes: 1: SoPufcwyg3sLpbiR2PFFQ1qztgo.crl (hash: rkW8tCbetPjl/uw4oUDaV52l/wCgiS3tkVhu34RE50s=)
2: sN71VdE_vP-brkQYYHxei4Ctk7k.roa (hash: Ng80yhJSUZ9ywzwtEcf5TCIYC5bSHVuPL+nXnqyIEIk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:20:d2:9e:ba:91:bc:fd:91:60:05:26:d9:8b:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a83ee7dcc32837b0ba5b891d8f145435ab3b60a
Validity
Not Before: Jan 31 14:00:53 2025 GMT
Not After : Feb 1 14:00:53 2025 GMT
Subject: CN=757103a6b6b8ea642e772c64b9a2a9f41785fb8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:16:1e:9e:1a:06:1a:4a:42:90:34:5c:cf:c0:
c0:c8:94:da:82:63:b9:46:f1:67:d4:ca:d8:89:43:
99:c2:0f:be:07:37:cd:56:fd:96:0c:6d:e7:c6:2e:
f1:7f:59:22:a6:b4:ee:61:0c:e7:5d:30:32:4c:d6:
af:23:38:49:50:9c:9c:26:f1:06:ec:ec:7b:5c:b3:
8a:44:a7:9d:3b:94:47:dc:ab:d0:c3:e1:01:78:bc:
f1:ea:57:09:11:ab:2f:b3:a3:f9:2f:b7:7f:d2:e8:
ab:cb:d9:c9:70:a9:07:5e:55:2d:99:49:9c:ea:c8:
19:f5:b7:33:e8:11:55:8e:f9:05:00:56:1c:21:eb:
63:fc:2d:16:e0:70:c8:dc:3a:64:ff:0f:3d:57:a6:
12:46:3b:66:1e:eb:b5:36:1c:b7:c3:95:b1:23:69:
da:58:09:b8:62:09:d9:d7:e8:0a:89:a3:71:09:75:
d3:8e:e2:1d:e7:b8:1e:6a:6c:39:3d:63:27:56:83:
05:d2:d0:f4:bb:23:21:ac:d6:6c:de:47:64:01:ab:
4c:35:44:84:cc:89:db:ca:70:fe:12:92:fc:58:e1:
a0:a8:f6:00:84:cc:e5:7b:ff:38:86:8a:73:8e:1b:
46:a7:59:07:2d:27:99:69:bd:2b:f9:4e:fe:3e:92:
94:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:71:03:A6:B6:B8:EA:64:2E:77:2C:64:B9:A2:A9:F4:17:85:FB:8C
X509v3 Authority Key Identifier:
keyid:4A:83:EE:7D:CC:32:83:7B:0B:A5:B8:91:D8:F1:45:43:5A:B3:B6:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SoPufcwyg3sLpbiR2PFFQ1qztgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/513e8a-ad5b-42be-9b6e-b4269463bce8/1/SoPufcwyg3sLpbiR2PFFQ1qztgo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/513e8a-ad5b-42be-9b6e-b4269463bce8/1/SoPufcwyg3sLpbiR2PFFQ1qztgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:4c:14:3c:4a:50:32:08:ec:c0:86:7e:aa:2e:94:34:4b:44:
b7:c2:17:0a:98:bd:78:e6:4c:ff:c3:c6:77:7e:15:89:1c:ef:
06:d9:a1:7f:7b:61:97:84:73:9d:30:19:8b:56:e9:4b:65:df:
88:46:2d:31:ef:c7:bf:4d:d2:bc:ac:7b:62:a4:de:69:2b:a6:
62:79:4f:39:38:8a:4e:02:ca:00:6a:65:f9:da:3c:48:68:e2:
9a:88:06:b3:e3:b5:1e:46:d2:3e:11:a6:d2:3c:69:93:31:13:
16:41:76:b0:f1:49:24:d2:2e:18:d1:ba:d8:c0:0f:9a:f9:b7:
ff:fe:22:c9:6e:95:b7:29:86:f4:6b:75:d1:76:13:e4:d9:18:
0b:97:cb:f4:b7:b6:39:e1:87:e2:e0:dd:ba:53:0f:c4:6f:54:
2b:41:c6:1a:e3:71:7c:aa:72:e4:88:d0:89:a6:00:1f:d0:e6:
9a:a7:cb:1f:2a:5c:20:cf:75:c6:02:da:e3:df:26:09:2f:cb:
f1:21:77:1a:2f:d4:fa:de:8a:bf:8a:b2:4a:e9:4d:66:08:3f:
32:df:1f:f8:2f:dd:56:98:58:89:24:65:28:31:d4:3d:cc:d6:
45:9e:c3:50:cb:49:41:53:bc:a6:d9:f5:92:cc:94:15:5f:f9:
ca:64:8c:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:19:34 2025 by rpki-client