Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/30879c-9766-4a05-adbf-9ac81ef4592c/1/Sk4s8ALUX_mt4quGQ62_4IPKEtA.mft
File: Sk4s8ALUX_mt4quGQ62_4IPKEtA.mft (raw, json)
Hash identifier: uFO7ycaP7t6E8Wm2UOq1IW0C2iy7wAm8HzplqQi+2Nk=
Subject key identifier: DA:55:B4:E5:7B:C7:C8:A3:E6:21:AD:FA:7E:7C:CB:89:75:66:80:66
Authority key identifier: 4A:4E:2C:F0:02:D4:5F:F9:AD:E2:AB:86:43:AD:BF:E0:83:CA:12:D0
Certificate issuer: /CN=4a4e2cf002d45ff9ade2ab8643adbfe083ca12d0
Certificate serial: 0194BCE09DF57491F2A7ED668C3E22D11E97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sk4s8ALUX_mt4quGQ62_4IPKEtA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/30879c-9766-4a05-adbf-9ac81ef4592c/1/Sk4s8ALUX_mt4quGQ62_4IPKEtA.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 15:00:24 +0000
Manifest this update: Fri 31 Jan 2025 15:00:24 +0000
Manifest next update: Sat 01 Feb 2025 15:00:24 +0000
Files and hashes: 1: E_IIvSbgDnePwa4szd7VMD6gnys.roa (hash: XolhJaC158fPYvnn4RwApw3vI0d4xDumHbsdRnhLiB8=)
2: Sk4s8ALUX_mt4quGQ62_4IPKEtA.crl (hash: u2g/dfstpOPKM3pNPfkHp3MqOqo/nu96tkRwCH1uD+Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:9d:f5:74:91:f2:a7:ed:66:8c:3e:22:d1:1e:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a4e2cf002d45ff9ade2ab8643adbfe083ca12d0
Validity
Not Before: Jan 31 15:00:24 2025 GMT
Not After : Feb 1 15:00:24 2025 GMT
Subject: CN=da55b4e57bc7c8a3e621adfa7e7ccb8975668066
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:29:81:e7:24:8f:ad:97:f4:54:fa:c7:f6:17:
44:28:fe:79:a2:53:08:83:e5:6e:81:14:25:7f:ae:
6e:1d:89:32:aa:39:c7:f1:25:56:ba:74:5d:94:b3:
9b:87:dd:64:56:f1:d5:cd:16:84:6f:c8:f9:a5:dc:
e2:6f:18:5f:4f:bb:f2:1a:2c:9b:42:7a:b6:54:cf:
a1:f8:2e:98:be:38:5f:0e:69:09:b2:6a:49:fd:e4:
bb:a6:59:6b:fb:75:2f:b0:1e:6b:f1:c4:32:74:8c:
79:7d:8d:fc:d7:99:22:f7:52:4e:92:f9:4d:43:7e:
4a:d8:a9:3d:5e:e0:ee:aa:e2:df:c1:be:7f:b8:f8:
ee:dc:46:d2:a3:81:a4:8c:ed:ab:9f:8c:b0:cc:4a:
7d:01:50:15:20:e8:16:e8:ad:53:c8:df:87:59:ba:
b6:1a:f0:b5:cd:05:a3:b1:0e:8f:14:96:87:63:47:
b0:c4:15:7a:b3:f0:7a:44:2a:02:26:d8:5e:c7:88:
a6:86:f5:0a:68:ba:e7:5d:20:94:f8:05:57:64:85:
1f:4e:78:a5:a5:8b:d1:dc:3b:5a:ed:bc:31:c9:0b:
54:22:2d:d2:f4:55:ed:73:ba:02:c1:ee:cf:a6:18:
4a:41:a6:03:8b:c1:16:d8:b6:e9:57:01:a1:d7:6e:
d9:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:55:B4:E5:7B:C7:C8:A3:E6:21:AD:FA:7E:7C:CB:89:75:66:80:66
X509v3 Authority Key Identifier:
keyid:4A:4E:2C:F0:02:D4:5F:F9:AD:E2:AB:86:43:AD:BF:E0:83:CA:12:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sk4s8ALUX_mt4quGQ62_4IPKEtA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/30879c-9766-4a05-adbf-9ac81ef4592c/1/Sk4s8ALUX_mt4quGQ62_4IPKEtA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/30879c-9766-4a05-adbf-9ac81ef4592c/1/Sk4s8ALUX_mt4quGQ62_4IPKEtA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:9a:bf:25:e1:64:73:d6:cd:8a:e8:2c:a7:d3:a2:75:01:0f:
39:b6:56:4d:f4:c1:3a:82:bb:47:85:bf:52:a2:4f:eb:bc:50:
a8:3a:b8:71:b1:91:c2:9f:80:06:3b:7d:d4:59:49:b4:3e:81:
5d:08:21:ac:eb:e5:68:45:c8:1e:4d:5b:59:6d:2c:9e:76:f9:
95:7a:db:73:b6:bc:93:a5:c4:ec:6b:15:50:1c:c8:43:ff:85:
23:38:87:f3:6d:37:29:9a:a9:f9:a0:e0:51:7a:c0:71:e2:13:
9c:35:6c:ac:cb:60:49:7a:34:4d:ca:c9:bb:17:aa:33:e9:3b:
ec:82:ba:1e:68:3b:77:3b:8f:e0:c5:31:a8:e0:a5:90:31:64:
23:2c:e7:99:a6:b7:69:d9:ec:e4:e9:1e:3d:a8:44:a0:8d:bc:
fe:da:c0:9d:41:47:c3:dc:2e:29:e8:a6:56:f0:f0:bf:e0:6e:
dd:fb:c7:18:3e:24:51:16:c4:02:62:1b:96:60:d0:04:cb:e7:
fb:dd:d9:d1:8e:f9:50:c1:14:ce:6a:10:99:9e:a1:66:bf:6c:
9a:9f:d1:91:4a:ad:e4:df:1d:c9:b6:38:cf:06:70:d7:c8:7f:
63:a7:6d:19:f6:f0:44:a1:5c:cb:46:70:a3:a9:05:be:6d:38:
8b:1f:a0:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:16 2025 by rpki-client