Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/213a95-aacf-40a9-9753-94c0b0b76029/1/S2MqdYtZMJ6GEInWVTruBnprNT8.mft
File: S2MqdYtZMJ6GEInWVTruBnprNT8.mft (raw, json)
Hash identifier: 6bWTRFeYQMQD8hBH0/ef6zLsC1f/SmPVgTPYjh6wF4c=
Subject key identifier: 58:67:95:49:EA:5A:81:E7:78:73:B5:83:02:99:B8:B7:AF:1A:8E:3D
Authority key identifier: 4B:63:2A:75:8B:59:30:9E:86:10:89:D6:55:3A:EE:06:7A:6B:35:3F
Certificate issuer: /CN=4b632a758b59309e861089d6553aee067a6b353f
Certificate serial: 0194BD17ED17AA893D300701C5C95E3EC93A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S2MqdYtZMJ6GEInWVTruBnprNT8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/213a95-aacf-40a9-9753-94c0b0b76029/1/S2MqdYtZMJ6GEInWVTruBnprNT8.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 16:00:49 +0000
Manifest this update: Fri 31 Jan 2025 16:00:49 +0000
Manifest next update: Sat 01 Feb 2025 16:00:49 +0000
Files and hashes: 1: BFmKhRFnCi2AJyutOk-Yxml708c.roa (hash: 30fgE+QkDlz/nOmXI9WzL3BXCW8rLDMyhnps4H9jCSs=)
2: S2MqdYtZMJ6GEInWVTruBnprNT8.crl (hash: jurF2scXEk2DIWSKqw2o41qcFXBecDkO8gUb7+e3l6o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:ed:17:aa:89:3d:30:07:01:c5:c9:5e:3e:c9:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b632a758b59309e861089d6553aee067a6b353f
Validity
Not Before: Jan 31 16:00:49 2025 GMT
Not After : Feb 1 16:00:49 2025 GMT
Subject: CN=58679549ea5a81e77873b5830299b8b7af1a8e3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:cb:b2:eb:3f:94:0b:9f:0e:d2:9d:06:a8:73:
ad:d8:ad:ad:92:c3:b1:bd:2c:97:9d:58:46:d5:d6:
86:0d:c6:8c:cf:f3:64:e7:e2:74:46:21:be:8e:12:
d8:af:98:ef:a6:4f:69:94:2a:6b:37:f1:5f:88:43:
9c:bd:35:a5:ba:31:d9:bf:ec:42:16:71:27:6c:14:
67:a6:15:6c:45:5e:c3:c1:bb:da:f3:59:b7:30:cb:
1b:54:84:85:d6:1d:96:1c:35:c1:36:c3:71:66:3f:
43:11:b7:ba:f5:25:45:d1:0a:c5:7a:9c:e7:8f:94:
10:27:a2:59:fc:f5:bc:83:1e:68:eb:7a:e5:19:23:
c8:2b:30:f9:f1:5e:9e:f9:ee:3b:06:69:dd:e4:ed:
78:7e:4f:eb:2e:54:aa:bd:57:45:41:70:06:28:c3:
66:07:d2:0b:68:b4:f1:6c:1f:1a:cf:0b:62:86:75:
57:a3:36:ea:06:99:c1:51:79:d2:47:ee:a1:b8:94:
43:10:84:53:77:85:6f:48:f6:de:6d:5c:8a:eb:7a:
17:19:62:5c:e6:ce:b2:05:27:9c:7c:ba:46:0f:b3:
e0:e8:0e:c9:67:46:b7:5c:22:f2:ce:72:05:e5:27:
31:be:af:0e:ca:87:99:b0:04:7f:b0:0c:98:27:be:
b1:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:67:95:49:EA:5A:81:E7:78:73:B5:83:02:99:B8:B7:AF:1A:8E:3D
X509v3 Authority Key Identifier:
keyid:4B:63:2A:75:8B:59:30:9E:86:10:89:D6:55:3A:EE:06:7A:6B:35:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S2MqdYtZMJ6GEInWVTruBnprNT8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/213a95-aacf-40a9-9753-94c0b0b76029/1/S2MqdYtZMJ6GEInWVTruBnprNT8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/213a95-aacf-40a9-9753-94c0b0b76029/1/S2MqdYtZMJ6GEInWVTruBnprNT8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:6e:0e:32:fb:26:2f:fc:16:89:a4:0a:5a:66:7d:5e:b4:a7:
d1:62:0e:ee:47:08:84:e9:6a:2f:ff:e1:b3:80:27:a4:b7:d4:
cc:1b:bb:57:78:68:6a:6d:f9:79:54:98:8f:f1:39:56:bb:68:
2a:32:e6:0b:99:0b:c5:eb:06:e3:10:e9:b6:13:33:ec:3c:15:
6f:26:33:89:4c:ce:3e:bb:20:49:3d:e1:15:c6:88:e8:cf:e4:
dd:34:f0:60:25:78:76:e3:42:e5:bf:99:7e:f3:8d:b3:b2:7e:
0d:49:6d:cd:c6:14:35:e6:a8:26:af:b8:90:8e:56:55:3d:6b:
d1:c0:c3:96:51:b1:f6:2d:48:1c:79:74:2a:12:d7:47:2b:3d:
1d:ef:6d:21:88:42:b5:d0:08:b9:08:14:8e:d1:71:06:4d:99:
34:30:7b:7c:8b:a2:dd:f2:29:ae:27:29:8d:8d:3b:77:0c:8e:
38:43:65:cc:7c:b3:ef:7e:ac:b6:95:ef:8c:47:26:0d:88:2e:
c5:72:40:7b:bd:5f:f3:96:ed:08:85:02:76:da:2f:3a:5b:a2:
1c:a1:96:d3:b3:54:96:44:db:dd:5a:b6:85:da:85:2c:2a:b8:
80:91:a1:93:b2:6c:15:2b:47:5b:c3:bf:67:fd:69:52:20:0a:
e0:87:25:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:23:19 2025 by rpki-client