Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/936dd2-0c9a-48e9-aa71-d4519c539c9a/1/Sojzq5SgdYciDj1xb3txffHZ5tY.mft
File: Sojzq5SgdYciDj1xb3txffHZ5tY.mft (raw, json)
Hash identifier: ZR6GAwCpxYvWY2wP1aKp1iCBR2nbTUuRyUVFziQ8tgc=
Subject key identifier: 76:0E:A4:61:2C:0E:AD:86:E3:6D:BD:ED:11:9E:35:7A:96:43:55:EB
Authority key identifier: 4A:88:F3:AB:94:A0:75:87:22:0E:3D:71:6F:7B:71:7D:F1:D9:E6:D6
Certificate issuer: /CN=4a88f3ab94a07587220e3d716f7b717df1d9e6d6
Certificate serial: 0194BCE0EA5F878A7B142D51DD6E08C0F2D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sojzq5SgdYciDj1xb3txffHZ5tY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/936dd2-0c9a-48e9-aa71-d4519c539c9a/1/Sojzq5SgdYciDj1xb3txffHZ5tY.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 15:00:44 +0000
Manifest this update: Fri 31 Jan 2025 15:00:44 +0000
Manifest next update: Sat 01 Feb 2025 15:00:44 +0000
Files and hashes: 1: Sojzq5SgdYciDj1xb3txffHZ5tY.crl (hash: KU42eIYCSVJlVmVc11US6EoYZQFeLBALTIhlMZU4s0g=)
2: W_W3DuCdWyh1NhDi85D3Q1QNefk.roa (hash: 0G53Kptl2wm5MoiuZgZ3O3JVe7MUe/aT5XxcnGYEqVU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:ea:5f:87:8a:7b:14:2d:51:dd:6e:08:c0:f2:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a88f3ab94a07587220e3d716f7b717df1d9e6d6
Validity
Not Before: Jan 31 15:00:44 2025 GMT
Not After : Feb 1 15:00:44 2025 GMT
Subject: CN=760ea4612c0ead86e36dbded119e357a964355eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d2:4d:18:a3:a2:eb:71:7a:6f:22:91:2e:65:
0a:7a:08:b7:45:38:32:20:ba:f1:cd:52:c3:7b:f6:
1f:2a:f2:2e:3b:e0:25:00:04:ff:17:fb:47:30:ed:
ff:49:6f:f6:3a:0a:36:8e:fa:ae:c3:d8:62:51:1b:
5b:49:9b:2c:38:74:54:6f:93:7d:d4:81:5d:91:f0:
52:47:4f:4f:72:2b:30:83:c0:d6:7c:8b:d7:b4:ff:
20:a8:46:9b:37:55:17:72:18:a9:7a:1f:30:96:1f:
2c:7f:77:38:bc:73:cb:c8:c7:e8:9e:18:28:89:05:
e0:17:c4:e3:ae:3b:4d:2d:e2:71:e1:2d:bc:02:fd:
50:10:41:0e:23:32:5e:fe:fe:fa:82:cf:1f:58:17:
a3:c3:99:62:8b:14:0f:b8:8b:15:3a:20:ec:c8:b7:
0e:8e:a0:0d:51:a9:61:31:35:f0:84:ea:95:45:ae:
0b:b4:f2:f9:fb:64:ab:ea:8c:e3:a2:ec:89:fd:a5:
0b:fd:56:f4:66:69:2e:2a:03:8a:fb:79:40:31:7d:
80:12:cc:6c:53:e1:92:3b:29:ef:2e:e6:53:de:94:
3c:70:99:ff:02:5d:ce:9f:5e:8c:75:9d:df:b8:b8:
87:7b:94:cf:0f:6d:c4:75:b1:0a:42:88:ff:ca:3e:
a5:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:0E:A4:61:2C:0E:AD:86:E3:6D:BD:ED:11:9E:35:7A:96:43:55:EB
X509v3 Authority Key Identifier:
keyid:4A:88:F3:AB:94:A0:75:87:22:0E:3D:71:6F:7B:71:7D:F1:D9:E6:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sojzq5SgdYciDj1xb3txffHZ5tY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/936dd2-0c9a-48e9-aa71-d4519c539c9a/1/Sojzq5SgdYciDj1xb3txffHZ5tY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/936dd2-0c9a-48e9-aa71-d4519c539c9a/1/Sojzq5SgdYciDj1xb3txffHZ5tY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:52:f2:d9:25:06:ef:b2:77:5a:97:69:f7:61:e8:83:57:1e:
61:b6:81:7f:22:98:01:fc:43:f5:21:de:ab:b1:43:84:02:aa:
2d:8f:b4:cb:6a:8a:60:33:ce:66:4c:83:2b:76:e9:cf:7c:9f:
1d:4e:3e:2d:b9:a3:cf:45:4d:5c:ee:d3:44:40:e5:f4:fe:e2:
cd:06:c0:e5:7d:b3:e6:5e:92:1b:37:e7:d0:ec:4a:af:02:4b:
79:ed:a1:43:06:98:88:3c:b6:c3:d3:66:ba:ee:0d:be:03:f6:
f3:9a:59:ad:da:75:d1:29:51:c9:b1:b8:f0:2f:7d:d8:42:f6:
70:6f:7f:a9:12:44:67:8f:08:fd:d2:3f:26:f5:5d:2d:91:72:
2c:fe:63:d5:c7:fe:c5:50:bf:de:ce:89:03:8d:37:0b:91:56:
18:ea:2a:0d:5c:44:fe:75:10:a5:de:c9:b7:19:d9:a8:af:08:
f2:6d:87:ee:ee:55:13:8c:7c:5a:28:e6:5f:c9:02:1c:cc:8a:
83:8c:ec:eb:48:d9:25:72:f2:9b:4e:3c:20:be:d8:ec:4a:4e:
c5:71:d2:4e:56:1b:e2:38:97:02:a7:a1:87:37:d6:53:36:ff:
ba:2b:18:86:9c:5d:f4:23:d1:2d:c7:59:89:e9:e2:a4:b7:f2:
ce:31:35:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:10 2025 by rpki-client