Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/821572-3445-4910-a15c-f4c166c83f88/1/SdAfcM9fTe7ZOowV5JQCnpOr7VU.mft
File: SdAfcM9fTe7ZOowV5JQCnpOr7VU.mft (raw, json)
Hash identifier: 2bfOaUD6Kf5h7k9zrhlUcT4L+SBbrxn8VKtCTuf2vuc=
Subject key identifier: 3A:C1:78:38:45:BB:5E:90:A7:C9:38:1A:3B:73:67:20:57:2D:F7:64
Authority key identifier: 49:D0:1F:70:CF:5F:4D:EE:D9:3A:8C:15:E4:94:02:9E:93:AB:ED:55
Certificate issuer: /CN=49d01f70cf5f4deed93a8c15e494029e93abed55
Certificate serial: 0194BCE0CC187270C905D0A2DB184B1CCBE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SdAfcM9fTe7ZOowV5JQCnpOr7VU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/821572-3445-4910-a15c-f4c166c83f88/1/SdAfcM9fTe7ZOowV5JQCnpOr7VU.mft
Manifest number: 4D
Signing time: Fri 31 Jan 2025 15:00:36 +0000
Manifest this update: Fri 31 Jan 2025 15:00:36 +0000
Manifest next update: Sat 01 Feb 2025 15:00:36 +0000
Files and hashes: 1: SdAfcM9fTe7ZOowV5JQCnpOr7VU.crl (hash: KpJTgySt7Bb+Bl5q1JFDwr6vJEhzXbjQY8By7CU5uzs=)
2: WxZz3Xq4Dubhk-2v4KkyD3DjymY.roa (hash: TcPVaB9byF2mn4BjYUtIE/4fQoQybO53Dwd3vhK7Z5U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:cc:18:72:70:c9:05:d0:a2:db:18:4b:1c:cb:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49d01f70cf5f4deed93a8c15e494029e93abed55
Validity
Not Before: Jan 31 15:00:36 2025 GMT
Not After : Feb 1 15:00:36 2025 GMT
Subject: CN=3ac1783845bb5e90a7c9381a3b736720572df764
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f0:fc:88:1c:85:6f:4f:0b:68:89:e1:31:76:
56:ca:16:9d:ac:27:d8:1c:3b:6f:3f:37:b5:ca:56:
d3:ad:03:4c:9b:e0:e0:d9:12:5d:12:52:c4:81:5c:
a1:30:dd:87:ff:e3:2a:38:a0:2c:fd:ad:4e:32:90:
c5:16:95:ed:84:0a:28:1a:10:d2:a2:12:91:a5:57:
f4:a5:38:5d:49:b4:21:17:98:2d:bb:d2:5b:8f:4f:
1f:1d:90:85:89:0a:94:69:d6:24:b7:8c:76:89:77:
62:f3:2d:ec:83:5f:7f:21:01:92:99:ad:0a:8a:24:
c4:ad:53:a5:ec:fd:78:ff:72:8a:cf:69:ff:50:d7:
5b:69:9e:08:ad:e7:74:a5:67:e2:36:b2:d6:3e:b5:
70:19:c0:02:ee:e6:86:5d:b5:1f:f3:33:ff:fb:47:
0a:b1:53:39:5e:44:ff:7f:bc:42:b4:49:9d:d5:06:
90:af:05:d0:87:52:70:49:9d:04:0e:88:e4:94:18:
1a:66:41:23:50:69:f7:e4:8c:18:54:03:fd:26:b4:
85:a1:fd:d0:37:b6:61:bf:cd:14:10:2d:8f:d7:60:
3e:e5:53:e7:a1:1d:0b:de:5a:ca:f9:db:e1:dc:35:
f7:20:62:ea:c6:ca:05:5b:0f:62:a0:0a:f8:82:4c:
91:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:C1:78:38:45:BB:5E:90:A7:C9:38:1A:3B:73:67:20:57:2D:F7:64
X509v3 Authority Key Identifier:
keyid:49:D0:1F:70:CF:5F:4D:EE:D9:3A:8C:15:E4:94:02:9E:93:AB:ED:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SdAfcM9fTe7ZOowV5JQCnpOr7VU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/821572-3445-4910-a15c-f4c166c83f88/1/SdAfcM9fTe7ZOowV5JQCnpOr7VU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/821572-3445-4910-a15c-f4c166c83f88/1/SdAfcM9fTe7ZOowV5JQCnpOr7VU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:bf:aa:30:77:15:e3:ba:30:ea:50:1b:0f:a2:ee:ad:44:b6:
0c:28:c4:55:d4:99:ff:80:1c:ef:fe:78:a2:93:21:16:12:c6:
1c:05:e6:63:75:1d:ec:66:41:bb:7d:72:17:26:ef:52:7b:fe:
07:0b:53:d4:ef:4a:ed:28:fd:fd:f7:d7:03:84:31:12:31:8b:
4b:f7:82:44:7e:09:a0:c3:3b:c2:7c:92:af:65:ab:75:29:9a:
39:5e:8e:06:c2:df:39:53:52:72:c7:90:3e:54:1b:69:d3:df:
77:26:60:5b:5a:b3:bb:fb:83:ba:de:6d:ff:6a:fd:65:13:ae:
18:b9:96:f4:a8:6a:c8:68:31:77:66:4c:ae:b4:2b:5f:75:3e:
64:b8:85:ab:b6:e4:55:29:07:1c:ad:08:69:28:37:ad:ce:53:
93:4f:36:39:6c:00:5a:06:81:fd:22:3d:05:a6:c9:ce:df:67:
ee:42:84:ae:3c:9e:aa:09:84:e3:ba:d4:83:19:44:2e:b4:23:
d8:25:71:34:49:64:56:7a:55:b0:5a:11:88:7b:50:48:ab:02:
17:93:4d:d1:9b:9f:00:dc:54:ab:59:35:1f:2c:ca:5c:e3:54:
42:48:08:28:8a:f0:af:1c:39:43:71:79:b6:27:b7:8d:b9:3e:
74:f1:91:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:52:56 2025 by rpki-client