Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/d55dc1-7604-4c8d-a1b4-39f8e2b4675d/1/SWsAWJcdKZOlelscts3_XS60Tj8.mft
File: SWsAWJcdKZOlelscts3_XS60Tj8.mft (raw, json)
Hash identifier: Hzs6LwgoEnU0TE6jTOu6Pmj+ZDNGzxENgp40otrudBY=
Subject key identifier: 25:84:D0:30:97:9D:0D:4A:E1:8A:F2:D1:FB:24:B5:3D:BB:C1:76:39
Authority key identifier: 49:6B:00:58:97:1D:29:93:A5:7A:5B:1C:B6:CD:FF:5D:2E:B4:4E:3F
Certificate issuer: /CN=496b0058971d2993a57a5b1cb6cdff5d2eb44e3f
Certificate serial: 0194BC3BBC6827D072F65DC5819ABEE69263
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SWsAWJcdKZOlelscts3_XS60Tj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/d55dc1-7604-4c8d-a1b4-39f8e2b4675d/1/SWsAWJcdKZOlelscts3_XS60Tj8.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 12:00:18 +0000
Manifest this update: Fri 31 Jan 2025 12:00:18 +0000
Manifest next update: Sat 01 Feb 2025 12:00:18 +0000
Files and hashes: 1: SWsAWJcdKZOlelscts3_XS60Tj8.crl (hash: yOQoNw2IxuB2pP40Qu4ZrSzs9XST8nbu+ihqCrWmSR0=)
2: p14blZvuyTFQl4sjyccJsTsvOjE.roa (hash: jmb5FTKTJY5Nob/oSTDpf4n6KA9LOz58wdEIfxeBJdo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:bc:68:27:d0:72:f6:5d:c5:81:9a:be:e6:92:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=496b0058971d2993a57a5b1cb6cdff5d2eb44e3f
Validity
Not Before: Jan 31 12:00:18 2025 GMT
Not After : Feb 1 12:00:18 2025 GMT
Subject: CN=2584d030979d0d4ae18af2d1fb24b53dbbc17639
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:3d:d2:d3:f5:34:a5:53:a6:e3:21:b1:4a:b1:
f9:50:5d:5f:76:7a:bc:41:f7:8c:ff:dc:90:77:6b:
c6:f5:47:84:ea:03:31:64:3d:23:cb:4b:05:31:0a:
2b:4a:18:9e:d1:b2:02:82:0e:5d:75:c0:9d:b4:ad:
e2:3f:1f:05:54:10:ab:1f:a3:d3:ef:50:5f:f4:11:
fb:c7:7f:b1:7a:04:6a:52:3a:45:79:75:53:04:fa:
ee:3d:45:b6:34:55:11:2c:63:54:c9:8b:0f:e0:e5:
06:b0:62:51:a1:53:c1:3a:47:63:9f:01:c1:5d:1d:
a9:1f:9a:e7:2a:35:7c:a8:07:6a:95:8d:5e:1e:5c:
06:22:d1:af:32:14:29:fc:1c:a2:ef:a7:bf:5e:bb:
52:04:c5:fe:e0:b5:1c:d7:07:10:7d:10:d3:d1:18:
78:8b:3f:4c:ee:49:7a:8e:4f:d5:ad:7e:8e:08:3a:
95:88:4a:7a:c5:37:94:2d:1c:12:45:91:5e:db:26:
e2:fc:f9:17:7a:4b:2f:96:26:51:b5:ca:5b:c9:f7:
2f:a8:bd:b4:bc:c2:fa:05:b7:e1:3d:0e:70:4d:21:
ab:f6:9a:6c:4f:d3:66:ee:0f:2c:1b:2b:52:22:40:
6f:7a:e2:77:fc:11:8c:e3:d6:25:8a:0d:1e:56:7c:
96:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:84:D0:30:97:9D:0D:4A:E1:8A:F2:D1:FB:24:B5:3D:BB:C1:76:39
X509v3 Authority Key Identifier:
keyid:49:6B:00:58:97:1D:29:93:A5:7A:5B:1C:B6:CD:FF:5D:2E:B4:4E:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SWsAWJcdKZOlelscts3_XS60Tj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/d55dc1-7604-4c8d-a1b4-39f8e2b4675d/1/SWsAWJcdKZOlelscts3_XS60Tj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/d55dc1-7604-4c8d-a1b4-39f8e2b4675d/1/SWsAWJcdKZOlelscts3_XS60Tj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:af:d8:a7:a9:a3:1f:94:d3:1a:92:f2:24:31:d8:26:55:61:
75:d6:e6:db:1b:5d:7b:3f:ac:f0:7e:ca:72:06:dd:43:7a:c5:
05:3d:9f:ea:60:b2:20:aa:3c:40:e5:c7:69:fd:b2:01:ea:9f:
79:e1:36:05:25:48:78:d8:65:ae:34:a2:b4:5b:5c:01:da:d5:
0d:9b:6c:58:1b:0e:c2:4d:f7:ea:e0:2e:8a:aa:d4:7e:df:3a:
df:63:7c:82:af:67:90:45:da:73:91:a2:06:cd:e1:29:61:fc:
7b:9a:95:f8:9d:46:53:0c:29:ee:87:80:74:8c:67:73:b4:42:
98:da:d3:76:51:f2:d7:df:31:1c:95:09:d8:96:5b:b8:16:86:
13:7e:35:9c:46:28:6e:70:6f:5a:e8:6b:fa:e8:07:f1:15:95:
65:21:30:30:6b:0d:2b:f3:07:22:c4:c1:02:df:68:52:7b:19:
09:b2:89:59:9b:08:61:26:72:07:a2:39:96:33:20:21:d8:6d:
06:bb:5a:86:42:76:b3:cb:56:5a:40:5a:ab:0e:e7:f3:cf:fb:
48:23:83:96:48:12:2b:0b:fd:34:32:56:0b:fa:18:cd:8f:8f:
d6:fb:e9:e3:e4:85:e0:48:ec:b0:47:aa:8b:d0:28:a7:4b:fc:
ec:ed:f6:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:30:45 2025 by rpki-client