Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.mft
File: 89SUuLJxr7fGLxOX9xLPLc02QYU.mft (raw, json)
Hash identifier: kVjAp0pX/sdwWJAXRwSA5kP8z/hoCoSQ6q8zfBT8aj4=
Subject key identifier: 49:77:57:01:B4:0B:2F:05:7D:E8:77:15:13:57:0F:57:F4:E9:C8:D6
Authority key identifier: F3:D4:94:B8:B2:71:AF:B7:C6:2F:13:97:F7:12:CF:2D:CD:36:41:85
Certificate issuer: /CN=f3d494b8b271afb7c62f1397f712cf2dcd364185
Certificate serial: 0194BC72A268833DFB06BBA1B294D77A9F5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/89SUuLJxr7fGLxOX9xLPLc02QYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 13:00:16 +0000
Manifest this update: Fri 31 Jan 2025 13:00:16 +0000
Manifest next update: Sat 01 Feb 2025 13:00:16 +0000
Files and hashes: 1: 2XS2qKu1oL_DsuI3OSXAyPPmXaM.roa (hash: 1rGV+fsNs0SO2Zvvg0olbcFYooCwn1FYxZF5w23Xb0A=)
2: 89SUuLJxr7fGLxOX9xLPLc02QYU.crl (hash: 2mEx+2aM7rvQmdVIlM2CM0JxxLuzb1x2wPMnlNO3SY8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:a2:68:83:3d:fb:06:bb:a1:b2:94:d7:7a:9f:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3d494b8b271afb7c62f1397f712cf2dcd364185
Validity
Not Before: Jan 31 13:00:16 2025 GMT
Not After : Feb 1 13:00:16 2025 GMT
Subject: CN=49775701b40b2f057de8771513570f57f4e9c8d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a9:37:9c:86:c2:dd:77:ad:97:5c:96:bc:6b:
7d:f3:19:e7:c7:b2:79:8d:f5:c7:b6:61:b9:97:35:
60:80:11:89:3a:f6:51:d0:c1:be:76:fe:01:5d:76:
ba:85:f1:ef:fa:df:c8:1e:bc:5e:03:e3:f0:9e:a0:
d1:8f:af:e9:ea:f4:af:1e:61:3e:c5:db:c3:29:76:
ba:c2:6d:71:d6:cb:0c:bd:0a:b6:a1:fc:72:42:d7:
a0:ec:a4:69:1e:15:c4:4f:b1:7a:31:e4:b2:0f:4c:
1f:c1:2b:94:0d:fb:8b:b0:09:4b:80:a3:64:af:70:
48:b3:3f:fb:1c:5d:c6:9a:8f:22:6b:84:70:88:b5:
a3:84:0b:a9:53:24:87:56:68:c2:89:00:fe:14:74:
37:46:0b:d2:bf:0a:d8:5b:35:b3:0d:5c:30:94:da:
33:f7:af:59:45:4f:58:8c:f5:a0:a1:ab:c6:3f:eb:
c0:cd:46:5f:42:8c:e9:cc:22:02:8c:32:5f:80:53:
ab:17:9a:25:04:df:e6:28:2a:f3:88:35:f0:fe:a9:
3a:f1:63:32:b4:cd:c2:c9:d7:a7:e0:5e:01:49:ef:
b9:b1:6b:ec:17:a9:03:6e:af:53:56:91:38:cb:05:
d1:ca:c9:b5:e2:bc:d5:56:f1:66:30:bd:30:16:94:
a6:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:77:57:01:B4:0B:2F:05:7D:E8:77:15:13:57:0F:57:F4:E9:C8:D6
X509v3 Authority Key Identifier:
keyid:F3:D4:94:B8:B2:71:AF:B7:C6:2F:13:97:F7:12:CF:2D:CD:36:41:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/89SUuLJxr7fGLxOX9xLPLc02QYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:4e:5e:10:c8:c3:92:0d:72:65:23:63:23:d3:bb:0c:e4:59:
68:a6:eb:8b:b5:84:ae:95:6b:3c:97:b6:84:1c:0b:97:b5:ce:
68:3d:1b:e3:ea:7f:63:be:42:56:14:61:7d:fd:b5:d9:94:c2:
dc:38:ca:1c:c3:0e:97:a5:1e:9e:8c:18:f3:22:bc:ed:84:6e:
27:34:85:9d:46:cf:24:13:18:ff:58:9b:f4:c1:af:d6:d9:67:
23:9c:e3:15:51:fc:32:94:87:5e:03:6c:b6:46:a4:d1:80:8a:
b3:86:e7:6d:30:ef:60:95:eb:d1:72:47:4c:55:ee:6a:e8:91:
df:0a:62:5b:79:35:67:f4:27:91:95:01:7c:36:6e:04:c2:88:
41:95:38:a9:b7:90:56:8d:fb:69:9f:bd:b4:60:1d:e8:7b:f4:
60:c1:77:f8:d8:20:31:35:5b:b7:82:6a:42:18:e4:37:7b:d7:
fc:f3:e9:ff:fe:5c:48:b8:90:1f:ef:9f:ff:ca:43:35:0c:0d:
09:6e:da:9d:ba:87:0e:5d:02:b7:b0:13:56:8d:e4:5e:ad:f8:
2c:0b:14:a7:ae:74:bd:a9:84:9a:0f:f4:e4:0f:15:d5:7c:f1:
3e:4f:bd:c5:04:f7:6f:41:1d:b6:4f:02:43:86:59:e0:9c:26:
e1:55:44:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:06:08 2025 by rpki-client