Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/461685-073e-41af-9bb6-cf6c305212eb/1/sUq6i2B0k5NHjoPDYObL110Vb4k.mft
File: sUq6i2B0k5NHjoPDYObL110Vb4k.mft (raw, json)
Hash identifier: Uj2IRoVHTDjyGydYZ29XeUPo9+QHeA0lmUHJZcQmuZM=
Subject key identifier: 4D:E9:38:E7:EE:80:3F:38:4F:17:E0:87:DB:13:81:C5:B1:41:58:31
Authority key identifier: B1:4A:BA:8B:60:74:93:93:47:8E:83:C3:60:E6:CB:D7:5D:15:6F:89
Certificate issuer: /CN=b14aba8b60749393478e83c360e6cbd75d156f89
Certificate serial: 0194BC050B8E5288F61DFD6356C8F8F1F9B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sUq6i2B0k5NHjoPDYObL110Vb4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/461685-073e-41af-9bb6-cf6c305212eb/1/sUq6i2B0k5NHjoPDYObL110Vb4k.mft
Manifest number: 1435
Signing time: Fri 31 Jan 2025 11:00:34 +0000
Manifest this update: Fri 31 Jan 2025 11:00:34 +0000
Manifest next update: Sat 01 Feb 2025 11:00:34 +0000
Files and hashes: 1: 08nP-AR33f0DBt-3CTsle7fcw0U.roa (hash: hjnnL2quK7MRbSgdC71OKxJPL2yglCgGMSLKkqLJLds=)
2: YELUwe4nammHucxrbZyOcSXhQAs.roa (hash: F7evvDSLJ4aaJnnTjKcdJcahJaI+uHzuDY+hV5o5tME=)
3: hsH-e4sppViS3iNq4F4kEU0ep0g.roa (hash: dqKnOJjGSqIH7LzL8ZBxcWScroq9fSiiauAsWgvwoYw=)
4: lAQuczRYGnewQpXm-9DH2Aa2FJM.roa (hash: cpxHeGSggctdEQY5QxkgjLkTiuh9nHgtIGZfv1ijkMo=)
5: sUq6i2B0k5NHjoPDYObL110Vb4k.crl (hash: 6NwIglix5DoeGpifKVqGsN8x9n4rXYNd+aVcoCvSn74=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:0b:8e:52:88:f6:1d:fd:63:56:c8:f8:f1:f9:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b14aba8b60749393478e83c360e6cbd75d156f89
Validity
Not Before: Jan 31 11:00:34 2025 GMT
Not After : Feb 1 11:00:34 2025 GMT
Subject: CN=4de938e7ee803f384f17e087db1381c5b1415831
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f2:db:9a:20:a5:55:35:dd:77:f7:bc:e8:e7:
bc:f7:66:7a:79:a3:37:fc:7c:7c:46:59:0a:0a:15:
29:65:8a:44:23:08:3d:30:84:db:f0:c0:8e:59:f8:
4e:ad:79:5c:60:6c:b4:1a:b6:b5:d5:31:b1:15:a1:
19:c5:fe:df:b1:68:59:5e:ac:56:fe:3b:6f:ca:3b:
a7:90:86:cb:3a:87:60:70:9c:8d:cb:d1:26:c1:8b:
54:b5:41:73:cc:39:16:bf:fd:8b:04:8d:9d:30:6e:
c8:dc:19:30:c2:a8:9d:20:ac:8f:25:35:08:2d:9e:
5e:1a:83:22:2a:0f:21:9c:e4:dd:2d:60:32:2d:cd:
fb:29:fa:75:c7:32:bf:33:22:67:a7:c8:f0:42:a0:
99:e6:e9:f6:60:72:cc:5d:50:41:84:61:2a:4e:a4:
0a:d8:a9:b5:48:b3:f9:7c:7f:1b:56:65:30:89:21:
46:db:08:94:67:b9:40:c5:20:32:fe:c5:76:2b:e9:
22:7e:2d:bf:36:9e:16:23:23:04:d1:84:77:af:9e:
d4:52:ab:f7:69:8c:f1:de:6d:6e:cd:08:c8:a2:c6:
20:d8:1b:e2:6d:59:28:96:68:e0:b7:10:b8:a4:2f:
7a:e0:05:b7:b1:57:20:04:0a:ee:1e:80:65:81:02:
f8:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:E9:38:E7:EE:80:3F:38:4F:17:E0:87:DB:13:81:C5:B1:41:58:31
X509v3 Authority Key Identifier:
keyid:B1:4A:BA:8B:60:74:93:93:47:8E:83:C3:60:E6:CB:D7:5D:15:6F:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sUq6i2B0k5NHjoPDYObL110Vb4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/461685-073e-41af-9bb6-cf6c305212eb/1/sUq6i2B0k5NHjoPDYObL110Vb4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/461685-073e-41af-9bb6-cf6c305212eb/1/sUq6i2B0k5NHjoPDYObL110Vb4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:bb:60:61:02:99:aa:e6:fd:06:14:9e:a2:24:40:7b:e9:50:
87:85:26:81:bd:8b:dc:89:7f:98:4c:da:2f:87:59:ff:f5:a3:
87:36:63:b3:96:fb:19:56:39:c4:98:c3:a2:da:b2:ab:66:9c:
bb:ab:2c:ee:b0:d2:45:68:32:d8:12:dc:9f:71:73:2e:5a:08:
cf:24:4d:79:d4:9a:5f:d1:c0:a6:64:8f:0a:20:4b:90:14:31:
b4:1c:c5:de:93:57:ea:75:75:1a:bc:6f:b0:d6:b8:33:95:00:
7f:84:22:47:c8:0b:59:d4:35:86:a8:bc:b0:a2:be:26:09:17:
e6:dc:d0:1e:b4:b6:7e:e6:05:89:9f:40:2a:19:ae:d4:73:f0:
29:28:54:57:a5:d1:75:1a:87:bd:17:0d:74:3a:5f:25:7a:84:
62:33:e1:2f:67:cc:20:e1:04:a9:ff:f7:d2:55:a8:5d:f2:11:
c6:64:a5:8f:1d:da:d6:a2:3c:79:0d:78:c3:f4:b7:9f:d0:71:
d2:fd:6a:ce:a4:07:62:f6:82:9d:f7:64:ee:65:5b:f2:b8:ca:
70:e8:01:22:ca:26:ab:b1:00:4a:0b:b8:55:d2:20:01:0c:20:
ac:63:94:0f:5f:18:6a:c2:62:e3:2c:13:f6:7e:e8:19:68:67:
87:96:d8:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:42 2025 by rpki-client