Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/48afe0-5a18-4d99-91b6-8073dce09628/1/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.mft
File: SsK8Dj5ZMy9L4sWP8loYYfX96Bk.mft (raw, json)
Hash identifier: yQr2mVg4HG052UONnUngvQRN6xQYPCHBKgJ5hSPUVUY=
Subject key identifier: B8:4D:A4:9A:31:B1:93:E8:6E:DF:3C:30:10:46:EF:15:80:8B:FB:DA
Authority key identifier: 4A:C2:BC:0E:3E:59:33:2F:4B:E2:C5:8F:F2:5A:18:61:F5:FD:E8:19
Certificate issuer: /CN=4ac2bc0e3e59332f4be2c58ff25a1861f5fde819
Certificate serial: 0194BD854491823951E784C4C722E6A27C1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/48afe0-5a18-4d99-91b6-8073dce09628/1/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 18:00:15 +0000
Manifest this update: Fri 31 Jan 2025 18:00:15 +0000
Manifest next update: Sat 01 Feb 2025 18:00:15 +0000
Files and hashes: 1: BlllPFfwzBleeaMQKYCQ6F0B17E.roa (hash: NVG+8qMR5/CCZ9iBnkVvx5PPkG8viGMGtVWfLcED+Ug=)
2: HIJyCiEY4m0B-4I_1fcHAj8ZYfQ.roa (hash: KWAcJ6WMXGoAu/XkPymhO6ZdbPiSQfc1wyZmSQYSlQE=)
3: SsK8Dj5ZMy9L4sWP8loYYfX96Bk.crl (hash: cZP9e2CXOT0bDZcQkueGaHYe+4PwSPSt/IXvCyu3Apw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:44:91:82:39:51:e7:84:c4:c7:22:e6:a2:7c:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ac2bc0e3e59332f4be2c58ff25a1861f5fde819
Validity
Not Before: Jan 31 18:00:15 2025 GMT
Not After : Feb 1 18:00:15 2025 GMT
Subject: CN=b84da49a31b193e86edf3c301046ef15808bfbda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:77:8b:c6:70:e3:cb:f9:3c:28:ba:ad:57:8e:
75:41:5b:3d:e3:2f:63:65:7e:61:af:23:76:86:9a:
22:0f:8e:02:73:f7:bf:65:4f:c6:48:5d:69:4e:3b:
10:1b:5d:f2:ec:51:85:df:d6:09:1d:f7:26:a9:3b:
f0:58:a3:8d:5b:8f:d5:d0:13:f7:e3:79:cb:c2:4a:
d1:42:94:e6:e1:e9:72:18:e5:94:d3:9a:60:22:34:
ea:44:2a:80:8f:b2:f7:06:80:1d:af:be:52:da:4b:
3c:d2:0e:1e:93:f6:50:1f:c2:c5:25:35:92:37:c2:
0e:9f:5b:2b:52:a9:2e:aa:4b:21:48:ab:ea:44:be:
49:52:2b:3a:94:02:44:85:d6:46:dd:3d:40:16:5d:
73:65:1e:a1:41:c7:eb:8b:2f:15:0c:eb:37:be:38:
28:8f:27:b2:71:08:5f:bd:9f:b0:7d:0b:cb:18:8b:
d8:2f:3a:b1:e5:93:25:62:25:6e:f0:2c:59:c4:ab:
59:83:f2:3d:6b:91:26:0c:40:b9:13:69:93:62:21:
15:1e:e5:6b:6a:c1:0f:f2:e8:b4:de:b7:04:4c:10:
d5:67:28:b5:28:8e:63:e5:68:48:85:af:4b:a0:13:
64:69:d8:ce:fc:5e:1c:91:e5:60:4c:61:dd:f3:e8:
7c:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:4D:A4:9A:31:B1:93:E8:6E:DF:3C:30:10:46:EF:15:80:8B:FB:DA
X509v3 Authority Key Identifier:
keyid:4A:C2:BC:0E:3E:59:33:2F:4B:E2:C5:8F:F2:5A:18:61:F5:FD:E8:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/48afe0-5a18-4d99-91b6-8073dce09628/1/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/48afe0-5a18-4d99-91b6-8073dce09628/1/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:3a:91:78:8f:0c:4e:df:c7:71:60:25:71:dc:84:20:da:61:
fc:8a:62:89:31:4c:43:4b:1b:5b:be:6c:5b:82:cb:97:fa:8c:
b1:6b:de:64:44:17:7e:a8:63:83:1e:b5:c4:f4:b2:2b:77:02:
72:ae:61:8a:b7:06:72:65:4c:d3:19:d9:fc:98:b7:45:92:c0:
d0:ef:43:2b:db:5d:95:7b:07:15:cf:0f:e9:35:8e:e1:d2:e2:
bc:e5:a7:82:a0:59:e3:71:52:10:ca:3f:18:a1:63:60:a7:0b:
55:75:6a:a8:11:87:da:74:47:95:69:d2:11:07:42:4e:a5:9e:
3b:35:b3:da:a1:0f:d8:dd:9f:cd:04:2a:0e:d4:12:28:55:1a:
81:03:e9:75:c2:fa:38:00:37:6b:46:dd:a1:3c:8d:25:22:ea:
58:5b:79:6a:ef:35:4f:f7:c2:23:d3:f2:0e:99:36:b6:53:0c:
4f:3d:2b:9d:6b:30:81:3d:47:5f:51:a6:7a:63:cb:59:47:13:
bf:88:a7:2f:8d:87:62:d3:7f:77:f8:d5:e5:01:f6:78:b2:84:
e8:04:8e:f9:38:41:c7:2d:06:69:3b:d7:e5:cc:00:21:26:75:
70:e8:a0:5f:2f:5f:db:39:d1:db:86:95:12:55:00:4a:26:09:
29:38:27:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:43 2025 by rpki-client