Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/53696f-f973-47fb-8d79-addc6d4bb2e7/1/SanokeBtQid9xPtfvWnpq9jimIM.mft
File: SanokeBtQid9xPtfvWnpq9jimIM.mft (raw, json)
Hash identifier: 9umwUNsz66ITCQXznObO/K3/eRgCjsujqGhX421x5Wo=
Subject key identifier: A6:8E:A5:7B:78:AD:E7:30:8C:62:EC:D2:66:D3:CA:94:2E:3B:DE:A8
Authority key identifier: 49:A9:E8:91:E0:6D:42:27:7D:C4:FB:5F:BD:69:E9:AB:D8:E2:98:83
Certificate issuer: /CN=49a9e891e06d42277dc4fb5fbd69e9abd8e29883
Certificate serial: 0194BBCE69C1A6947AA73DA887C5E2971962
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SanokeBtQid9xPtfvWnpq9jimIM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/53696f-f973-47fb-8d79-addc6d4bb2e7/1/SanokeBtQid9xPtfvWnpq9jimIM.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 10:00:54 +0000
Manifest this update: Fri 31 Jan 2025 10:00:54 +0000
Manifest next update: Sat 01 Feb 2025 10:00:54 +0000
Files and hashes: 1: SanokeBtQid9xPtfvWnpq9jimIM.crl (hash: ScH41avJogB6mrbfephv/odUoz7WdZ4MMDabxarco64=)
2: xNQR2jyCo-wMte68YS73m1IZ9O0.roa (hash: BWuMWNUBHZ2TpJe9eyJrXKCjlVJ/6BKirHJr21VbUdA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:69:c1:a6:94:7a:a7:3d:a8:87:c5:e2:97:19:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49a9e891e06d42277dc4fb5fbd69e9abd8e29883
Validity
Not Before: Jan 31 10:00:54 2025 GMT
Not After : Feb 1 10:00:54 2025 GMT
Subject: CN=a68ea57b78ade7308c62ecd266d3ca942e3bdea8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:6c:c3:cb:d8:2d:3d:b8:83:28:4f:08:d0:55:
42:0d:18:4a:1f:74:84:79:9d:77:77:bf:ea:da:07:
2b:0c:3e:dc:b2:ac:85:1d:43:44:9f:75:3a:d0:f8:
94:c7:c0:b1:56:88:a6:77:9e:76:1f:23:19:16:03:
c2:9e:f1:30:d1:69:51:b0:35:c8:00:53:8e:88:9e:
27:60:65:07:20:29:fb:df:12:fb:de:8d:85:2c:8a:
68:0b:d0:13:9f:13:40:a3:b4:6a:e6:09:d4:e7:03:
9e:63:aa:b9:d0:62:21:b2:a9:72:33:54:c2:be:31:
67:da:6b:5f:e9:ed:7d:c8:3e:e2:fc:9a:c0:66:f2:
7f:ee:1f:da:29:30:4a:e6:b8:38:4f:d3:b4:cf:68:
bd:f3:84:f3:ad:6b:7e:ac:e4:64:36:81:78:da:97:
d9:b1:63:6d:54:9d:61:bb:20:0b:92:b7:c4:c5:db:
54:aa:8e:61:1d:fc:53:8a:fa:31:47:d3:3d:9d:e2:
8a:0c:3c:13:8a:e6:15:4d:be:f1:79:27:0a:7f:e1:
04:7e:2d:1f:d7:61:f6:c0:86:30:05:b5:1f:f2:84:
72:37:ee:ea:56:ab:03:b7:46:ba:dc:c1:ee:c4:cb:
69:6c:53:6c:ab:5d:05:c0:af:92:56:91:2e:90:56:
ce:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:8E:A5:7B:78:AD:E7:30:8C:62:EC:D2:66:D3:CA:94:2E:3B:DE:A8
X509v3 Authority Key Identifier:
keyid:49:A9:E8:91:E0:6D:42:27:7D:C4:FB:5F:BD:69:E9:AB:D8:E2:98:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SanokeBtQid9xPtfvWnpq9jimIM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/53696f-f973-47fb-8d79-addc6d4bb2e7/1/SanokeBtQid9xPtfvWnpq9jimIM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/53696f-f973-47fb-8d79-addc6d4bb2e7/1/SanokeBtQid9xPtfvWnpq9jimIM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:0f:3a:ed:1e:79:97:30:5b:dd:bb:33:93:99:6f:20:7c:4a:
12:0f:89:51:4e:6e:4f:41:5b:ad:2f:00:bc:0d:a8:25:ad:02:
71:6e:46:60:82:9c:11:8f:09:30:aa:a6:2a:af:ab:5a:e5:72:
9d:3b:7a:6d:fe:98:17:08:ab:ed:86:e9:8a:0b:a0:9c:fb:fe:
d4:d5:6d:e3:f5:0f:b2:46:69:ec:da:74:dc:c1:4b:a2:aa:f1:
e2:89:b7:ea:b4:be:0d:40:b7:5e:0c:16:23:2c:70:44:6a:3e:
6d:30:86:73:7b:d6:87:bf:b6:72:07:bb:42:f5:c4:c1:7d:88:
ae:db:70:b9:ba:8d:c1:66:37:1a:92:de:a0:4a:27:6f:41:f4:
6c:ba:1c:1e:7b:fb:c9:43:39:74:89:22:43:99:26:bc:3f:12:
c1:43:f4:ee:c4:3a:bb:37:a0:2b:c5:13:2a:d5:c4:23:e6:3c:
df:38:14:1e:fd:9d:3a:5a:90:05:2b:db:04:49:43:86:98:c0:
99:c6:94:33:b9:83:4c:56:d3:cb:ef:d1:56:ab:87:88:9b:ed:
d9:1d:85:86:fd:92:b8:a4:2a:cc:2b:61:93:8e:8e:74:aa:0f:
d9:13:1c:be:ae:00:7f:bf:d3:fe:84:f1:c3:c9:f9:ec:0f:3a:
ba:73:50:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:46 2025 by rpki-client