Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/0b58ab-f707-4ab6-9ae8-0240e74476a7/1/S4x70MRIa6Bzzi3lO6B01w5Ftec.mft
File: S4x70MRIa6Bzzi3lO6B01w5Ftec.mft (raw, json)
Hash identifier: mJLtYg7ob8y824CzI1WR+56HohbIJeKtQ92AXpTHdk0=
Subject key identifier: 4A:C1:B1:0B:76:F7:51:AC:9B:2C:1B:C4:DA:A3:A7:81:73:AF:8B:33
Authority key identifier: 4B:8C:7B:D0:C4:48:6B:A0:73:CE:2D:E5:3B:A0:74:D7:0E:45:B5:E7
Certificate issuer: /CN=4b8c7bd0c4486ba073ce2de53ba074d70e45b5e7
Certificate serial: 0194BC3CA4BA839B79B3CFB5CD6211C5CC32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S4x70MRIa6Bzzi3lO6B01w5Ftec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/0b58ab-f707-4ab6-9ae8-0240e74476a7/1/S4x70MRIa6Bzzi3lO6B01w5Ftec.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 12:01:18 +0000
Manifest this update: Fri 31 Jan 2025 12:01:18 +0000
Manifest next update: Sat 01 Feb 2025 12:01:18 +0000
Files and hashes: 1: 3JM1DqiUyjfx5MdpsDwZLHS0SmA.roa (hash: q6Ea605SgtRXxY5NI/ZcpQt4PK8j0Kx+z2u5Y/QaL0k=)
2: S4x70MRIa6Bzzi3lO6B01w5Ftec.crl (hash: Bk8x3jorjrp977c/QyFhTgfls7zJ0GxtwNe6qSeVas8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:a4:ba:83:9b:79:b3:cf:b5:cd:62:11:c5:cc:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b8c7bd0c4486ba073ce2de53ba074d70e45b5e7
Validity
Not Before: Jan 31 12:01:18 2025 GMT
Not After : Feb 1 12:01:18 2025 GMT
Subject: CN=4ac1b10b76f751ac9b2c1bc4daa3a78173af8b33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:4c:12:82:0f:b3:df:6f:01:91:96:ca:bb:49:
07:4e:3f:ae:a2:11:96:a2:23:c4:21:97:2e:c8:35:
5b:d8:36:51:17:7a:64:9f:24:fb:87:0d:ef:19:60:
b0:ce:e7:2d:75:b6:b8:31:29:24:ab:9f:2d:de:83:
11:e8:50:af:24:5d:19:51:a9:75:19:d9:8e:e4:94:
bf:86:a8:40:35:21:27:1b:b0:2f:2c:bf:44:10:53:
83:83:ab:b4:39:5f:c3:97:24:75:62:4c:e4:34:91:
ea:58:f4:5e:a4:80:c0:5c:58:4b:8d:67:27:ab:fd:
2a:86:a8:ff:06:8d:7a:20:bd:fa:66:17:af:c9:4d:
b2:73:f3:44:73:42:2a:2f:58:b5:c6:dc:f0:02:72:
6f:56:09:38:1f:f0:f1:5c:12:67:0b:65:54:55:37:
4c:3c:41:c3:6a:cf:59:d9:18:b1:c3:63:21:34:4a:
92:08:60:29:33:3e:94:78:cc:07:07:0a:d6:6a:ab:
34:95:0d:61:a8:89:3d:70:8e:82:06:1e:7f:eb:e2:
e9:8f:11:ea:58:8c:e9:32:a0:34:4c:63:f8:41:5a:
e9:ce:19:64:4d:64:3e:a7:e0:b2:f3:d2:48:17:09:
d7:d5:35:dd:5c:4e:dd:28:8a:1b:e6:f4:61:8b:75:
89:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:C1:B1:0B:76:F7:51:AC:9B:2C:1B:C4:DA:A3:A7:81:73:AF:8B:33
X509v3 Authority Key Identifier:
keyid:4B:8C:7B:D0:C4:48:6B:A0:73:CE:2D:E5:3B:A0:74:D7:0E:45:B5:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S4x70MRIa6Bzzi3lO6B01w5Ftec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0b58ab-f707-4ab6-9ae8-0240e74476a7/1/S4x70MRIa6Bzzi3lO6B01w5Ftec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0b58ab-f707-4ab6-9ae8-0240e74476a7/1/S4x70MRIa6Bzzi3lO6B01w5Ftec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:8a:e8:eb:ad:7c:af:cc:81:66:7a:ba:29:5d:6f:9d:f2:7b:
fe:2e:cb:c2:e7:20:54:39:1d:91:8a:9f:cc:18:1c:31:30:56:
ca:13:00:16:96:46:3c:c0:0b:41:55:b7:f7:f8:1a:58:bd:8b:
39:0b:f7:1d:b1:89:82:45:f8:50:fb:49:d8:a5:fd:ae:d2:95:
0c:4b:8a:12:e4:0b:f4:fc:6f:fe:10:78:c0:7e:bd:a6:2b:74:
b5:dd:4f:e0:89:07:d9:23:43:2a:b1:d3:a4:5f:27:ac:e4:68:
ac:05:e2:cb:aa:bf:4d:8c:5a:32:63:b9:a7:45:de:df:f2:49:
88:40:ed:a3:50:2b:07:c0:ed:ff:96:24:e5:43:7e:9e:3c:ae:
e0:7d:fc:1d:3b:56:82:12:8b:e8:1f:32:6d:81:cf:7d:29:7b:
b3:b8:13:bf:d1:3b:04:e9:0f:da:52:fb:7f:b3:76:df:e9:72:
b8:47:7a:c6:66:ec:d1:ea:1a:9d:f9:69:c0:d9:71:41:52:c9:
7d:03:c1:2a:29:ef:89:e8:ab:e8:3b:86:6b:8e:94:ce:ce:3b:
56:38:11:c2:cd:a1:9e:7c:09:f4:89:62:bc:2f:19:53:42:fd:
2a:7e:39:20:c0:6b:a2:64:97:62:63:48:23:ab:8b:40:bb:57:
77:c9:c1:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:32 2025 by rpki-client