Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/30523b-8b3c-46cb-abbc-e101477efb8a/1/49UVmILnemf3l_j4uZa2LE66vCA.mft
File: 49UVmILnemf3l_j4uZa2LE66vCA.mft (raw, json)
Hash identifier: q3IAeHwLCQHcFIeqoNeoNOOJS5I6trPsQ8KJLDj2wk0=
Subject key identifier: 97:2E:4F:E8:81:8F:7D:0E:DF:B1:03:09:84:01:85:8C:E3:EF:C9:2E
Authority key identifier: E3:D5:15:98:82:E7:7A:67:F7:97:F8:F8:B9:96:B6:2C:4E:BA:BC:20
Certificate issuer: /CN=e3d5159882e77a67f797f8f8b996b62c4ebabc20
Certificate serial: 0194BBCEE26EE5AB98BF64DE2598243BFBE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49UVmILnemf3l_j4uZa2LE66vCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/30523b-8b3c-46cb-abbc-e101477efb8a/1/49UVmILnemf3l_j4uZa2LE66vCA.mft
Manifest number: 08B0
Signing time: Fri 31 Jan 2025 10:01:25 +0000
Manifest this update: Fri 31 Jan 2025 10:01:25 +0000
Manifest next update: Sat 01 Feb 2025 10:01:25 +0000
Files and hashes: 1: 49UVmILnemf3l_j4uZa2LE66vCA.crl (hash: yVe/KZDQ0hciIQsbtknABRC6DN8y/0EsAs3YLMoQyXI=)
2: cZFUFzEKgC-gv5r0QzjC3ajp5aE.roa (hash: J7XkWB53jAfy4bD9ukAZFnRAiXvLkNsGXjIsW/vOCx4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:e2:6e:e5:ab:98:bf:64:de:25:98:24:3b:fb:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d5159882e77a67f797f8f8b996b62c4ebabc20
Validity
Not Before: Jan 31 10:01:25 2025 GMT
Not After : Feb 1 10:01:25 2025 GMT
Subject: CN=972e4fe8818f7d0edfb103098401858ce3efc92e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:c4:83:8b:da:db:9a:c9:04:9e:e8:ad:e3:0d:
5e:4b:3d:e1:cc:e3:7e:e0:f9:02:af:ae:25:d1:68:
8c:bc:2c:9e:7a:cb:3a:60:5d:ae:79:1f:b2:c1:c8:
95:54:34:dd:7d:fd:4d:9c:cc:8e:c9:0d:9d:6f:08:
6c:fb:5d:3f:b5:85:b0:0b:70:5c:d2:1f:8c:3c:7e:
6a:e6:d5:e8:24:79:e5:e0:a6:58:ba:9a:04:7a:a5:
22:c1:a4:a7:0f:7f:9c:7f:99:f5:a9:26:84:2f:32:
eb:75:c3:33:8c:e1:03:82:16:eb:59:93:63:c4:d1:
60:3f:73:fe:b9:81:43:ac:3a:72:cb:d9:8b:13:a2:
fd:28:37:6b:84:9a:ad:bd:21:d2:27:5e:f6:76:8a:
a3:53:88:9c:9b:0e:14:04:4e:03:0f:9c:cb:d6:ea:
2f:23:1e:4d:16:f5:80:f2:f2:91:bf:d4:de:63:bc:
7f:2c:57:0d:82:9b:e0:27:f0:13:f9:e9:66:2b:51:
35:13:13:9e:16:d1:3a:eb:da:20:91:a2:6f:e5:3c:
71:c7:e2:61:78:fc:31:77:a2:c2:e2:91:aa:13:a9:
34:07:07:85:b8:43:18:ce:c3:4e:8a:e5:13:16:ad:
21:08:4a:42:07:6b:b9:07:d6:e6:cf:19:b0:5e:f9:
9a:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:2E:4F:E8:81:8F:7D:0E:DF:B1:03:09:84:01:85:8C:E3:EF:C9:2E
X509v3 Authority Key Identifier:
keyid:E3:D5:15:98:82:E7:7A:67:F7:97:F8:F8:B9:96:B6:2C:4E:BA:BC:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49UVmILnemf3l_j4uZa2LE66vCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/30523b-8b3c-46cb-abbc-e101477efb8a/1/49UVmILnemf3l_j4uZa2LE66vCA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/30523b-8b3c-46cb-abbc-e101477efb8a/1/49UVmILnemf3l_j4uZa2LE66vCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:8e:4b:7b:20:e2:88:7e:46:07:bf:bd:68:8c:50:87:f9:0d:
3c:56:af:30:3e:44:ee:b3:c9:2f:00:a0:46:b3:a2:7b:be:4e:
52:db:2e:8b:68:d7:44:3f:51:63:ed:80:20:31:f9:ca:51:90:
15:b5:29:0c:96:72:4c:1b:f8:12:ff:be:44:57:a5:97:06:16:
22:aa:2f:78:5d:1b:c4:c6:93:e3:aa:ec:85:c5:d3:74:f8:84:
9e:2f:57:08:e6:2d:e6:7a:c2:24:8a:c9:b2:7a:b0:d5:2b:b2:
5c:42:e8:91:9b:f2:42:aa:c0:5f:79:ae:d6:0a:02:05:4d:72:
c8:70:5a:0b:d1:0e:e0:35:69:11:ab:20:d7:32:7c:99:c3:68:
fb:17:96:e3:10:20:13:3b:39:99:79:0d:74:73:c8:14:d0:34:
fe:60:12:e3:1a:a8:4c:c5:1d:af:4f:e0:5d:b5:79:2b:ac:06:
ba:fd:ea:ec:39:1d:b2:ac:12:56:47:b1:d4:39:ac:de:3d:d0:
6f:40:b5:4a:79:a1:30:f4:66:19:d6:4a:b9:43:dd:a6:b2:f0:
15:79:f9:1d:37:22:d1:66:a2:9b:74:1f:87:6a:c7:c7:ad:a2:
71:b1:44:3c:e0:4a:bb:e6:07:b0:d2:06:b1:41:12:07:26:50:
32:80:56:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:37:43 2025 by rpki-client