Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/090638-8a99-4063-93a0-6e9938972708/1/SPR6MRcvtUnGlhMogMaCT7B3e1U.mft
File: SPR6MRcvtUnGlhMogMaCT7B3e1U.mft (raw, json)
Hash identifier: uXfhfgbiZ9sxYQdZA7GzEy8cdGQMO9o2uNDARtdQv/w=
Subject key identifier: 9C:84:DB:8A:63:DE:5E:CA:BF:0E:50:E7:B3:DA:3B:97:FA:3B:96:CA
Authority key identifier: 48:F4:7A:31:17:2F:B5:49:C6:96:13:28:80:C6:82:4F:B0:77:7B:55
Certificate issuer: /CN=48f47a31172fb549c696132880c6824fb0777b55
Certificate serial: 0194BC7307EF62EA9EB26C7BB4493762D604
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SPR6MRcvtUnGlhMogMaCT7B3e1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/090638-8a99-4063-93a0-6e9938972708/1/SPR6MRcvtUnGlhMogMaCT7B3e1U.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 13:00:42 +0000
Manifest this update: Fri 31 Jan 2025 13:00:42 +0000
Manifest next update: Sat 01 Feb 2025 13:00:42 +0000
Files and hashes: 1: AOl46xQ60-QCOAEt4Y7U_AeVWdg.roa (hash: JjD74+whnpwh7/CCzOGd30L1sGSD0wPAHrCX3Jyi2FI=)
2: HtsTG6s-kcm9WojEK08774k0rJc.roa (hash: /wQlqHI/CmQ5Pya/uTc2dYg4WEQ4lzOuNWS6NcGcmr0=)
3: SPR6MRcvtUnGlhMogMaCT7B3e1U.crl (hash: 9KEGpwA5vjn6/A/bbMYrDToWCXJWrCf3Cq/cXVtsbZg=)
4: V_dMITyg0o4yHp4v8D9mTe6CxKs.roa (hash: 5xss2ydVOa64bp1JjgZlBG0W1rKDvC4+6oZPPOh4X4M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:07:ef:62:ea:9e:b2:6c:7b:b4:49:37:62:d6:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48f47a31172fb549c696132880c6824fb0777b55
Validity
Not Before: Jan 31 13:00:42 2025 GMT
Not After : Feb 1 13:00:42 2025 GMT
Subject: CN=9c84db8a63de5ecabf0e50e7b3da3b97fa3b96ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:61:1a:2c:95:d9:84:25:83:07:3f:e2:6b:2d:
83:b1:d5:b0:f7:1a:93:85:01:a1:1c:c3:5b:4b:6e:
0a:a7:98:22:17:50:47:b4:bc:7b:20:23:36:dc:ca:
94:9b:a5:94:9c:b9:2d:48:29:0f:da:b0:2a:13:50:
c8:db:6c:fe:fa:d0:47:af:b4:ed:7c:4c:64:01:00:
e1:d4:37:53:0b:88:4c:3c:90:96:12:82:b2:43:c0:
33:da:2b:5a:7c:cc:ae:10:05:3f:2d:cd:9c:87:12:
13:f1:c3:8a:0e:47:3b:92:48:7e:ce:17:9f:2c:b8:
af:84:d8:ad:6c:79:2b:05:5c:1a:1a:12:20:c8:db:
3f:ef:33:a5:66:5c:e1:f2:50:2a:51:ba:24:96:f4:
37:78:c1:44:9a:c9:2d:0c:5b:04:20:1e:ed:5c:71:
f9:90:11:5d:91:b8:ba:1c:65:10:e2:82:85:cd:76:
66:aa:18:4b:d8:f1:11:41:85:8b:aa:bc:a9:2c:b7:
3b:18:2f:0b:e6:68:a9:6c:94:79:6f:7c:56:48:af:
da:77:ab:37:e6:7c:9f:65:17:ab:6f:8d:b2:4d:cd:
2b:5a:48:88:d1:5f:1d:11:b6:13:a2:06:b7:a2:18:
cb:72:5d:36:24:98:8d:94:8c:08:58:29:6f:72:5e:
f2:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:84:DB:8A:63:DE:5E:CA:BF:0E:50:E7:B3:DA:3B:97:FA:3B:96:CA
X509v3 Authority Key Identifier:
keyid:48:F4:7A:31:17:2F:B5:49:C6:96:13:28:80:C6:82:4F:B0:77:7B:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SPR6MRcvtUnGlhMogMaCT7B3e1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/090638-8a99-4063-93a0-6e9938972708/1/SPR6MRcvtUnGlhMogMaCT7B3e1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/090638-8a99-4063-93a0-6e9938972708/1/SPR6MRcvtUnGlhMogMaCT7B3e1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:15:2d:16:f4:cf:bb:f8:41:46:ed:bd:b9:b7:3e:4e:d8:fd:
4a:92:e6:ca:a1:ca:c0:5a:d7:4c:85:46:6a:e9:5a:ea:9e:60:
76:4a:c4:3e:c5:9f:d7:e2:43:09:13:2c:55:37:d8:41:ec:8c:
8b:42:92:99:e9:c2:cd:cf:5f:0e:e4:86:24:fb:a2:28:bc:6b:
eb:2a:66:cb:2e:38:ea:18:98:0f:eb:32:cb:d6:07:48:7a:a7:
65:3e:59:d6:41:8f:f0:5f:ea:ce:29:ec:ab:74:ab:8e:68:44:
bc:7b:53:79:c5:84:4f:1a:94:a7:ec:ef:26:7c:0f:84:50:ec:
17:c9:eb:70:48:31:d9:2a:72:a6:40:a3:51:44:67:65:37:00:
20:a4:ca:85:0d:53:8d:f1:f6:66:84:f0:6a:89:d1:fe:94:71:
28:59:04:2c:ad:03:4e:39:70:09:b0:dd:1b:18:ef:cf:f5:40:
61:8f:a5:f8:b7:ce:19:56:be:f1:1a:de:dc:f7:3e:9d:62:c7:
58:d3:11:7d:8e:31:02:a8:aa:1f:8d:17:86:d0:5b:5d:f1:9e:
70:f7:1c:e0:8e:05:98:61:ce:ff:fc:a0:c1:43:fb:44:c8:a0:
75:66:32:6e:f5:21:44:bb:13:47:25:ee:57:51:c0:33:f6:45:
f9:91:9e:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:27:21 2025 by rpki-client