Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/e7c7eb-f7c6-43b7-a6ff-63e020feecf9/1/Sd5Xjax5LZXiF9mHHgT2aXO7frA.mft
File: Sd5Xjax5LZXiF9mHHgT2aXO7frA.mft (raw, json)
Hash identifier: NM76qKMN+G158EzLFBsa0kIBcwH8LxZ8k9MkCKNrj5Q=
Subject key identifier: A2:AD:C4:C3:25:08:32:1F:CC:A4:81:22:DE:45:A8:01:1E:DF:9C:64
Authority key identifier: 49:DE:57:8D:AC:79:2D:95:E2:17:D9:87:1E:04:F6:69:73:BB:7E:B0
Certificate issuer: /CN=49de578dac792d95e217d9871e04f66973bb7eb0
Certificate serial: 0194BC3C3269252264C2DF7B0AFC206BF966
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sd5Xjax5LZXiF9mHHgT2aXO7frA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/e7c7eb-f7c6-43b7-a6ff-63e020feecf9/1/Sd5Xjax5LZXiF9mHHgT2aXO7frA.mft
Manifest number: 045C
Signing time: Fri 31 Jan 2025 12:00:49 +0000
Manifest this update: Fri 31 Jan 2025 12:00:49 +0000
Manifest next update: Sat 01 Feb 2025 12:00:49 +0000
Files and hashes: 1: Mz51AcN2wZIHDhS3_4YmvmIRGhQ.roa (hash: uO7pu6+EQ/hXwHNJ2EqENUuB+uo9LMGBRXK6r0igHMI=)
2: Sd5Xjax5LZXiF9mHHgT2aXO7frA.crl (hash: Ad6URXNLC1cdN3I98Dc1IkBeLB1WYCe4BZz2jbOEdOI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:32:69:25:22:64:c2:df:7b:0a:fc:20:6b:f9:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49de578dac792d95e217d9871e04f66973bb7eb0
Validity
Not Before: Jan 31 12:00:49 2025 GMT
Not After : Feb 1 12:00:49 2025 GMT
Subject: CN=a2adc4c32508321fcca48122de45a8011edf9c64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:fe:63:eb:07:09:95:39:66:ac:44:ff:b0:e2:
cc:18:fc:fd:21:7d:b0:7d:e3:73:35:13:03:2d:ba:
8e:93:77:cb:92:7d:08:2b:c8:12:84:01:d2:10:8b:
00:64:17:27:f5:e8:43:d8:49:71:30:0c:1c:5b:30:
1f:e1:2f:40:f9:35:5c:07:a7:7d:e7:92:db:db:d1:
d5:ad:10:c5:4c:33:74:56:6b:29:e9:f4:4f:c4:cd:
18:2b:c3:c3:2e:ff:09:11:3a:96:ce:79:61:62:ab:
17:51:f1:43:ef:43:63:25:e1:01:92:06:1b:de:8b:
55:7b:05:86:3e:6a:64:55:2f:98:0b:5b:65:f0:98:
03:53:33:37:41:ad:72:6e:30:ec:8c:46:0d:d7:d2:
a5:7d:bc:a9:79:d9:89:36:27:3b:57:9f:4b:c0:5f:
5b:52:63:41:87:ae:2c:71:f0:21:5d:8d:8d:e0:23:
fd:77:9b:08:c5:5a:e5:2b:83:8c:20:ce:d5:0e:b8:
79:df:81:91:29:84:94:58:40:9b:cd:7b:56:e3:50:
91:48:de:ad:9f:52:c4:af:39:36:f1:76:85:69:18:
01:5b:2d:d6:3b:8d:11:f0:e6:2a:62:2f:4e:3c:6e:
08:22:28:19:9e:87:5d:cc:a0:3f:cc:b5:50:04:17:
aa:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:AD:C4:C3:25:08:32:1F:CC:A4:81:22:DE:45:A8:01:1E:DF:9C:64
X509v3 Authority Key Identifier:
keyid:49:DE:57:8D:AC:79:2D:95:E2:17:D9:87:1E:04:F6:69:73:BB:7E:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sd5Xjax5LZXiF9mHHgT2aXO7frA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e7c7eb-f7c6-43b7-a6ff-63e020feecf9/1/Sd5Xjax5LZXiF9mHHgT2aXO7frA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e7c7eb-f7c6-43b7-a6ff-63e020feecf9/1/Sd5Xjax5LZXiF9mHHgT2aXO7frA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:34:68:5b:b9:a1:16:77:41:53:f3:53:e7:d4:05:a7:f5:03:
57:96:be:1e:91:6b:10:ff:47:4d:fa:91:aa:55:84:7a:85:52:
b9:bf:5d:7e:47:eb:e1:d6:08:ce:b7:42:68:d4:35:9d:2d:b6:
a3:da:99:55:20:3e:32:5c:dd:7f:11:e1:06:7a:5f:e0:3f:40:
e2:86:a8:17:e5:3a:b5:b7:f7:f5:96:7b:b0:55:f7:d0:50:d7:
7e:28:66:b7:7f:fb:9a:5c:cd:68:82:b7:e2:0e:28:d7:db:80:
1e:e2:91:61:14:5a:51:c3:13:79:fe:bf:19:76:2f:a4:b6:ea:
86:de:cc:db:b5:c6:f6:8f:1f:be:2c:d3:34:96:b6:38:7e:37:
a9:88:0c:ba:33:66:a7:20:14:30:9f:1e:8f:e4:94:e5:04:c5:
b3:0f:ba:eb:d7:67:cf:e0:6f:d7:61:e0:2d:57:3e:8b:ca:26:
99:34:5d:f3:1e:f3:54:29:19:da:52:b6:e0:6b:20:32:f7:e5:
21:03:08:4d:e6:86:84:f1:53:92:27:d8:4d:a9:a6:f6:86:60:
15:1d:73:d6:84:a2:52:e8:72:af:e2:56:d5:c8:a1:98:c0:df:
a5:eb:f1:45:ce:e4:84:9c:92:9e:c9:c6:94:9d:73:14:79:87:
97:bd:8d:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 03:53:15 2025 by rpki-client