Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/599740-b96e-49c4-b604-63f197fb1c96/1/SgS8wv7hw6LgQ4gmDhBkS2XnAfM.mft
File: SgS8wv7hw6LgQ4gmDhBkS2XnAfM.mft (raw, json)
Hash identifier: A9F2bNlCT/JVJP/O6gwAj7fmabPU1r+FjAxJ/v63+iE=
Subject key identifier: B8:D7:8C:2F:D0:A8:C6:8C:EA:AD:C2:EC:ED:0B:B9:F9:CD:D7:98:2F
Authority key identifier: 4A:04:BC:C2:FE:E1:C3:A2:E0:43:88:26:0E:10:64:4B:65:E7:01:F3
Certificate issuer: /CN=4a04bcc2fee1c3a2e04388260e10644b65e701f3
Certificate serial: 0194BC72E9C1D42A03DBF5BC6A2151E20CB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SgS8wv7hw6LgQ4gmDhBkS2XnAfM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/599740-b96e-49c4-b604-63f197fb1c96/1/SgS8wv7hw6LgQ4gmDhBkS2XnAfM.mft
Manifest number: E3
Signing time: Fri 31 Jan 2025 13:00:35 +0000
Manifest this update: Fri 31 Jan 2025 13:00:35 +0000
Manifest next update: Sat 01 Feb 2025 13:00:35 +0000
Files and hashes: 1: 8m2tBlzpxiqL6kK0VrkHkgcTou4.roa (hash: 0P8p9ZGo9OL3ArRsj5WLpA2L7n8Ub+2jDkN4NpO9vF0=)
2: SgS8wv7hw6LgQ4gmDhBkS2XnAfM.crl (hash: Alq3+UL6ngLuvOsxVxy+xiRmyFfu1mKCK8faIKyPdOk=)
3: qU7NS3z4dR2Yct7lYNkAomkkhy4.roa (hash: A8aF09Arb1zd931tk4sAEkJct2PD6hOi6RvyzXv8HWc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:e9:c1:d4:2a:03:db:f5:bc:6a:21:51:e2:0c:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a04bcc2fee1c3a2e04388260e10644b65e701f3
Validity
Not Before: Jan 31 13:00:35 2025 GMT
Not After : Feb 1 13:00:35 2025 GMT
Subject: CN=b8d78c2fd0a8c68ceaadc2eced0bb9f9cdd7982f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:39:01:e3:f3:70:3a:90:98:5e:09:dc:cd:51:
63:15:70:b2:e8:8c:70:49:24:11:55:c9:6d:ba:14:
fa:05:1b:af:7d:97:c3:95:b2:31:c6:36:3a:21:67:
c1:5b:3b:bd:c3:02:0e:40:0e:de:04:36:1d:ac:9c:
9e:cd:fe:22:d8:cf:f3:b5:07:e3:73:eb:48:7d:22:
ab:80:c0:ce:f4:58:5e:8e:c6:77:37:fb:ac:e6:c0:
7e:16:bc:5e:d9:d3:98:12:6d:21:6f:96:26:4c:01:
4d:4e:14:9e:2c:48:54:32:70:f8:65:67:b0:74:21:
de:61:62:d5:1a:76:1d:ab:78:98:9c:ce:b9:6a:a9:
a9:83:34:50:71:c8:bb:da:2a:09:4c:17:4d:9e:2d:
04:d9:7f:c7:f9:17:30:b9:c5:e4:00:3b:d9:e7:86:
48:be:15:8d:37:05:b9:4d:18:e4:4e:6b:01:4c:d1:
74:4e:21:cb:bd:eb:24:ed:b3:94:99:c6:fa:67:1c:
00:a7:cb:5c:28:b1:3a:9a:0e:14:fe:e3:29:d7:f7:
74:3d:72:d0:02:0e:3f:e9:ad:80:2c:0f:62:f2:c3:
19:0e:b3:ac:d6:0e:db:fa:60:b5:48:17:d6:16:79:
b6:ee:52:ca:3c:46:80:9f:ce:6e:38:7a:64:d4:0e:
e1:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:D7:8C:2F:D0:A8:C6:8C:EA:AD:C2:EC:ED:0B:B9:F9:CD:D7:98:2F
X509v3 Authority Key Identifier:
keyid:4A:04:BC:C2:FE:E1:C3:A2:E0:43:88:26:0E:10:64:4B:65:E7:01:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SgS8wv7hw6LgQ4gmDhBkS2XnAfM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/599740-b96e-49c4-b604-63f197fb1c96/1/SgS8wv7hw6LgQ4gmDhBkS2XnAfM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/599740-b96e-49c4-b604-63f197fb1c96/1/SgS8wv7hw6LgQ4gmDhBkS2XnAfM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:39:5c:eb:cd:ba:e7:d9:12:6b:70:74:da:d4:b6:e1:bd:1d:
99:4c:71:55:ad:b5:42:dd:65:6c:8a:29:f0:82:75:be:6e:a6:
77:f9:0c:95:23:bd:bb:16:84:e4:d8:d3:8b:96:3e:73:b3:90:
ee:47:5e:d0:d8:cb:2e:e0:55:d0:5f:9b:b4:93:58:2f:a3:b1:
bb:8f:6f:22:23:2b:a3:5b:36:53:43:da:a5:79:f2:e0:cd:86:
9a:ef:fc:fb:b0:4a:18:bf:0a:47:ed:a6:48:60:72:e8:ad:7d:
d6:71:66:70:ee:e0:42:c4:29:d3:e2:f0:0e:0c:33:d6:fa:fc:
1e:88:bb:af:40:68:dd:e7:4f:51:24:59:42:bd:26:0f:a9:41:
01:22:45:70:c7:7d:ad:f4:c6:b4:7d:21:dd:21:9d:f9:40:73:
a6:e6:71:1d:86:2e:f2:aa:63:92:08:a2:19:2e:6a:7d:19:1b:
8b:d3:26:93:20:cc:bf:60:1d:56:ff:54:17:98:53:0c:5d:96:
73:8e:0e:de:8c:cb:07:9b:03:bf:e8:aa:41:c4:fd:4f:a6:a5:
ed:48:d6:5f:2e:d6:7a:2c:83:99:7e:d0:a1:0b:c2:ad:d3:9d:
5f:f8:a4:0e:f6:8a:b9:0c:fd:c3:24:d8:ca:be:4a:71:eb:9d:
bd:26:6f:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:24 2025 by rpki-client