Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/99e08d-b4f5-4353-9602-6031d5de3f39/1/Sagbp1iajhvw4aCc9KoPTpCQHVc.mft
File: Sagbp1iajhvw4aCc9KoPTpCQHVc.mft (raw, json)
Hash identifier: GcgTAOeViwvN75bcuJr2kIq7bIKOLJQnSPtEcADstBw=
Subject key identifier: D0:37:3E:D0:13:F7:8C:24:B6:46:52:72:97:8D:F9:52:C5:C1:A6:A7
Authority key identifier: 49:A8:1B:A7:58:9A:8E:1B:F0:E1:A0:9C:F4:AA:0F:4E:90:90:1D:57
Certificate issuer: /CN=49a81ba7589a8e1bf0e1a09cf4aa0f4e90901d57
Certificate serial: 0194BBCE7541C6ED60C8D29617EA038AF334
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sagbp1iajhvw4aCc9KoPTpCQHVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/99e08d-b4f5-4353-9602-6031d5de3f39/1/Sagbp1iajhvw4aCc9KoPTpCQHVc.mft
Manifest number: 1057
Signing time: Fri 31 Jan 2025 10:00:57 +0000
Manifest this update: Fri 31 Jan 2025 10:00:57 +0000
Manifest next update: Sat 01 Feb 2025 10:00:57 +0000
Files and hashes: 1: Sagbp1iajhvw4aCc9KoPTpCQHVc.crl (hash: uq9dHrEO16nqiRboefba2XCzJaA4MlKmtSaZji4/Z6E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:75:41:c6:ed:60:c8:d2:96:17:ea:03:8a:f3:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49a81ba7589a8e1bf0e1a09cf4aa0f4e90901d57
Validity
Not Before: Jan 31 10:00:57 2025 GMT
Not After : Feb 1 10:00:57 2025 GMT
Subject: CN=d0373ed013f78c24b6465272978df952c5c1a6a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:27:84:6b:2d:f5:58:17:7d:5c:41:d5:9b:36:
d1:27:0b:db:fd:57:b6:d1:ab:2b:cd:72:40:5a:91:
7f:3a:f2:65:96:e6:75:14:cc:7f:c5:87:08:99:6a:
1e:86:2f:15:ee:97:ea:0a:f1:f0:dd:3c:1d:06:c9:
d1:66:07:31:90:af:d8:30:d6:ee:24:76:e2:41:bd:
a4:64:11:41:31:ae:5d:4c:b4:bc:8d:61:d2:6a:6f:
ba:fa:e7:c6:f7:df:43:2c:19:cc:60:da:e5:21:72:
fc:fa:ba:72:66:27:eb:ba:f5:1e:e7:03:69:9c:76:
01:1f:48:bc:75:b4:43:79:d4:46:42:fb:f3:91:77:
4e:67:d9:f2:b2:fa:c1:74:3c:3f:ff:48:7f:14:33:
0b:b3:1e:a7:37:4e:39:8f:6e:c7:dc:45:1a:7b:d7:
74:43:5f:53:7b:44:af:8e:12:58:df:16:86:0a:c9:
f0:13:0c:96:9f:ca:d3:bd:e9:88:7f:e9:d3:c6:6c:
46:86:fd:0c:98:93:01:f7:96:2d:11:7f:90:3e:08:
17:72:8e:72:7a:74:67:72:9b:af:8d:ca:42:a2:6c:
22:9e:c7:c5:13:7a:46:f8:99:45:1f:72:0a:d1:9f:
a4:b4:66:e3:a8:25:8c:45:7b:c1:06:1f:8f:d9:db:
0b:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:37:3E:D0:13:F7:8C:24:B6:46:52:72:97:8D:F9:52:C5:C1:A6:A7
X509v3 Authority Key Identifier:
keyid:49:A8:1B:A7:58:9A:8E:1B:F0:E1:A0:9C:F4:AA:0F:4E:90:90:1D:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sagbp1iajhvw4aCc9KoPTpCQHVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/99e08d-b4f5-4353-9602-6031d5de3f39/1/Sagbp1iajhvw4aCc9KoPTpCQHVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/99e08d-b4f5-4353-9602-6031d5de3f39/1/Sagbp1iajhvw4aCc9KoPTpCQHVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:9b:47:85:76:6d:a6:9e:8e:cc:d5:d7:a6:7e:4f:bb:6a:c8:
76:23:d9:3d:76:3b:7d:0c:0c:ff:24:13:dc:9d:7b:7f:49:62:
1f:b1:ac:b6:83:99:c6:fc:19:f1:cc:15:98:59:77:40:fe:fd:
73:44:04:60:40:d8:a3:eb:39:e5:22:a9:27:d5:51:d3:27:e6:
fe:dd:0d:91:bb:4e:ae:4a:11:92:a4:2b:b6:c7:08:7d:d4:c0:
a8:2b:a1:81:19:b9:af:1b:13:62:40:ed:90:03:b9:9e:cc:6a:
63:0d:eb:32:33:34:25:54:65:0d:14:06:c1:25:20:13:76:0e:
13:ba:9c:a4:3f:b7:aa:9b:a9:31:08:cd:ab:bd:fe:ba:95:c3:
2f:31:e5:db:db:80:a9:a4:2f:8f:5f:4e:8d:29:26:af:3a:0b:
e6:3a:c0:2b:e4:8e:31:96:6e:6d:7f:23:ad:eb:d2:56:72:7f:
2d:11:89:3e:0a:cf:b9:3f:04:f7:29:9c:9a:04:a2:79:45:9d:
e7:53:11:4b:1f:17:c2:f2:4b:16:c6:40:75:89:81:d7:22:dd:
e9:15:98:3b:2d:6c:00:31:0f:a1:e5:9c:65:05:dc:d0:7e:5e:
86:7a:cf:00:7c:7e:96:0e:64:75:c6:78:ca:7c:de:00:40:97:
e0:ca:6d:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:14:13 2025 by rpki-client