Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9ce449-5ea6-4f80-ba5d-97bb1a7c4316/1/SA4-gK7rhMMmEvT60RbiaQpUbHo.mft
File: SA4-gK7rhMMmEvT60RbiaQpUbHo.mft (raw, json)
Hash identifier: 1133ywGy8StmHfikOHAn5ReBv7Elj7oTV+ZyY/GuWuQ=
Subject key identifier: AD:CC:77:5E:1C:D4:D9:0C:F4:32:41:18:86:A0:AD:16:EC:2A:9C:7B
Authority key identifier: 48:0E:3E:80:AE:EB:84:C3:26:12:F4:FA:D1:16:E2:69:0A:54:6C:7A
Certificate issuer: /CN=480e3e80aeeb84c32612f4fad116e2690a546c7a
Certificate serial: 0194BCE073BFB48272FE33AC09AC1511C03C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SA4-gK7rhMMmEvT60RbiaQpUbHo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9ce449-5ea6-4f80-ba5d-97bb1a7c4316/1/SA4-gK7rhMMmEvT60RbiaQpUbHo.mft
Manifest number: 03E3
Signing time: Fri 31 Jan 2025 15:00:13 +0000
Manifest this update: Fri 31 Jan 2025 15:00:13 +0000
Manifest next update: Sat 01 Feb 2025 15:00:13 +0000
Files and hashes: 1: SA4-gK7rhMMmEvT60RbiaQpUbHo.crl (hash: RPwiqpMdesrbvrdr6L/6Q7SKKOEDycfzRE3qVLEYxpo=)
2: UgsM9IySNlxMAMu3nxLBQeRmBwM.roa (hash: iWc/Vehzon/VP/j65KvlMpaDrurTE8lXeWv7jdRc8u4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:73:bf:b4:82:72:fe:33:ac:09:ac:15:11:c0:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=480e3e80aeeb84c32612f4fad116e2690a546c7a
Validity
Not Before: Jan 31 15:00:13 2025 GMT
Not After : Feb 1 15:00:13 2025 GMT
Subject: CN=adcc775e1cd4d90cf432411886a0ad16ec2a9c7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:c7:18:8a:57:0a:47:41:54:34:32:61:25:0c:
d0:e2:83:30:a6:9f:39:04:39:eb:8e:f7:00:24:85:
bc:49:0e:65:86:e2:7f:06:2c:4d:8b:5e:f9:f6:39:
ac:3e:02:33:64:57:44:74:de:da:cc:13:c1:87:da:
98:bb:a4:28:7e:df:83:a2:52:aa:31:23:46:45:9e:
c3:ca:5f:2f:15:48:22:ba:af:67:a4:17:a0:ac:84:
10:07:3e:86:11:db:f0:20:11:78:7c:c7:1d:02:cd:
ad:b1:06:9f:e3:59:83:69:64:59:98:6c:11:aa:e6:
55:87:d6:f7:6e:42:be:5d:84:c6:08:82:ee:c6:de:
bd:99:b6:a2:7d:05:8b:2a:a7:b5:2f:05:22:cc:f9:
cd:cc:88:df:c5:e1:c4:bc:53:bc:36:4d:eb:e4:da:
bf:a2:4c:14:c4:8b:91:53:66:a6:55:cd:62:ee:bf:
3e:93:7c:a5:9d:9a:d5:83:f6:3c:fb:a9:d5:20:86:
c2:d7:fc:0b:0c:98:c4:5b:84:30:8a:66:aa:8b:1a:
5e:18:7a:b4:73:fd:f3:f5:48:ad:f8:f0:03:ce:fa:
f8:5e:b5:e3:91:b2:c7:80:fe:7d:fd:ea:6c:c6:c9:
de:b8:35:12:3d:71:fd:b7:82:8c:cb:40:2c:47:44:
d4:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:CC:77:5E:1C:D4:D9:0C:F4:32:41:18:86:A0:AD:16:EC:2A:9C:7B
X509v3 Authority Key Identifier:
keyid:48:0E:3E:80:AE:EB:84:C3:26:12:F4:FA:D1:16:E2:69:0A:54:6C:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SA4-gK7rhMMmEvT60RbiaQpUbHo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9ce449-5ea6-4f80-ba5d-97bb1a7c4316/1/SA4-gK7rhMMmEvT60RbiaQpUbHo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9ce449-5ea6-4f80-ba5d-97bb1a7c4316/1/SA4-gK7rhMMmEvT60RbiaQpUbHo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:56:0d:a4:f7:7f:b1:5f:e9:b7:66:eb:93:21:40:9d:d7:2b:
45:78:97:12:7e:32:89:5f:1d:ac:b4:39:e4:05:5d:4a:40:cb:
ee:07:64:09:2d:89:5d:0e:ab:3d:dd:c6:2f:e0:66:3b:8c:d4:
35:c3:2a:e4:34:bb:cc:a0:5c:e7:ab:17:12:90:71:ef:b4:7a:
e8:86:27:f2:40:b0:9e:cc:42:e1:cc:98:24:d2:8a:da:38:ca:
de:12:b7:80:6a:a2:d6:42:1c:85:4e:0a:63:95:41:20:fc:f6:
a7:ca:d0:45:36:28:8d:15:9c:44:7e:a1:bb:de:5b:ba:ab:42:
5c:97:20:90:f8:d5:d9:21:6a:99:b4:80:60:ad:18:a2:22:03:
4c:e1:20:86:e5:47:92:59:b6:2c:2f:ca:e1:10:9f:1e:50:54:
28:d8:fd:35:c5:18:01:0d:11:e1:58:21:ba:60:9e:a0:16:6e:
dc:50:45:86:a9:f8:76:cc:90:0d:33:da:1e:44:a6:c1:67:d7:
2f:dc:31:7e:9c:0f:8a:0d:4f:f7:8b:46:fc:ae:65:d3:a2:69:
c0:1e:70:54:9b:24:05:de:12:54:7a:e3:23:2c:e8:e5:db:e8:
12:e8:4b:bc:a2:ad:62:13:69:3c:b5:da:2f:ee:da:44:24:53:
75:be:ff:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:04 2025 by rpki-client