Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/9700c8-f9ab-42a7-b1fa-e68a08d9e54f/1/SFk-QNpaUvMi21oEwg-0htThVQI.mft
File: SFk-QNpaUvMi21oEwg-0htThVQI.mft (raw, json)
Hash identifier: GSUTtqAL8Pdi2dFGKAfo3nGjLnIU+v5DXbtLEnXG914=
Subject key identifier: C6:C9:0B:5C:2E:74:56:F7:20:E0:58:A7:0B:FE:AF:32:2E:99:79:55
Authority key identifier: 48:59:3E:40:DA:5A:52:F3:22:DB:5A:04:C2:0F:B4:86:D4:E1:55:02
Certificate issuer: /CN=48593e40da5a52f322db5a04c20fb486d4e15502
Certificate serial: 0194BC04EE0EC7A717C0182966F6DBC90B74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SFk-QNpaUvMi21oEwg-0htThVQI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/9700c8-f9ab-42a7-b1fa-e68a08d9e54f/1/SFk-QNpaUvMi21oEwg-0htThVQI.mft
Manifest number: 10E5
Signing time: Fri 31 Jan 2025 11:00:27 +0000
Manifest this update: Fri 31 Jan 2025 11:00:27 +0000
Manifest next update: Sat 01 Feb 2025 11:00:27 +0000
Files and hashes: 1: SFk-QNpaUvMi21oEwg-0htThVQI.crl (hash: JgEwHbWZBfnLup1chT/gYZmPC9VqW8zIKAJKuFq/Dqc=)
2: Xe1gxuRIIOL95lwNFDlJJ4LeD98.roa (hash: E3ThdKoNF/zSVQO/0Rh8O4e1tJqwTsPdKIVV0WmD0l8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:ee:0e:c7:a7:17:c0:18:29:66:f6:db:c9:0b:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48593e40da5a52f322db5a04c20fb486d4e15502
Validity
Not Before: Jan 31 11:00:27 2025 GMT
Not After : Feb 1 11:00:27 2025 GMT
Subject: CN=c6c90b5c2e7456f720e058a70bfeaf322e997955
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:16:28:4a:50:20:b0:ce:36:0a:3a:37:0d:35:
0f:04:41:c7:88:5d:be:69:88:d2:4f:f7:c8:3e:d9:
30:40:5c:7a:da:6a:42:ce:02:de:42:47:99:81:65:
c1:88:0f:19:40:69:c7:04:67:90:96:b1:d1:1f:dc:
41:75:00:0f:97:6c:ea:de:95:dc:d3:4e:37:34:48:
dc:71:21:82:f0:bc:72:7e:f2:56:d8:67:36:da:39:
41:d9:f0:25:eb:95:2d:81:1b:f2:91:48:f3:54:4e:
ad:44:9d:48:bd:59:6e:08:48:f9:02:09:85:f4:d1:
e5:43:65:2e:a6:96:53:bb:15:87:95:76:22:eb:4d:
62:d0:48:cf:87:0b:2c:54:9a:5c:95:b1:c1:04:5e:
3c:15:f8:7c:23:f0:30:0d:7f:a2:2d:7f:35:a5:cc:
d6:44:85:70:20:c8:17:f3:1a:84:b2:92:14:29:c4:
d1:24:db:38:78:b0:58:ba:61:98:8f:43:36:41:13:
2a:25:ea:c9:0f:a3:a1:db:bb:18:c7:df:15:8f:ef:
2e:b4:76:49:fa:4c:7e:1d:3f:e4:1f:b7:f1:49:09:
f3:27:f5:35:3d:29:e6:53:ae:26:74:91:39:40:c4:
a8:d6:c7:23:c3:a1:4a:8b:8c:3a:a6:5f:31:fa:f2:
b1:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:C9:0B:5C:2E:74:56:F7:20:E0:58:A7:0B:FE:AF:32:2E:99:79:55
X509v3 Authority Key Identifier:
keyid:48:59:3E:40:DA:5A:52:F3:22:DB:5A:04:C2:0F:B4:86:D4:E1:55:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SFk-QNpaUvMi21oEwg-0htThVQI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/9700c8-f9ab-42a7-b1fa-e68a08d9e54f/1/SFk-QNpaUvMi21oEwg-0htThVQI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/9700c8-f9ab-42a7-b1fa-e68a08d9e54f/1/SFk-QNpaUvMi21oEwg-0htThVQI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:8e:fb:41:47:e5:d1:ba:2e:72:9e:7b:48:3b:2a:e1:47:26:
83:86:d7:ff:14:f9:76:7e:af:7d:42:79:1b:9b:4c:a1:ba:9a:
1f:18:7d:28:e4:c6:3e:64:bc:86:dc:56:dd:7a:6c:dc:f6:0f:
61:84:9f:79:b4:f1:27:f4:e9:63:7c:f9:98:7f:7d:9e:de:ec:
85:30:d9:60:8a:b1:73:5f:49:32:bb:1a:0b:17:9a:26:93:f2:
19:4d:bc:e7:02:7d:a9:ff:4b:58:9c:21:36:6e:e2:1c:dd:24:
fa:81:7f:13:7c:6e:89:4a:f7:f7:c9:3d:f5:9f:8c:72:8e:df:
b0:56:7b:9b:0c:53:7e:1c:79:ce:3b:08:ac:ec:0a:a1:83:48:
bb:70:2d:b6:b8:bc:63:1a:1f:4e:a2:ef:b1:ea:19:4f:ca:ea:
e8:40:91:ce:a7:70:63:bc:0b:d7:2a:18:12:6f:30:c7:61:2c:
5a:16:c0:66:9b:ff:12:f9:7a:2c:a5:2c:f7:8f:27:b1:60:51:
5b:cb:e9:79:16:08:a1:98:9c:c8:16:de:b4:38:36:e0:1a:0c:
03:47:e9:4e:91:84:43:b3:22:6e:d6:ae:07:ad:81:b6:67:5d:
6f:a7:be:a1:4a:b4:46:38:cb:ad:49:40:59:81:36:29:23:59:
ec:02:d4:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:25:26 2025 by rpki-client