Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/af4879-05de-4268-9ad2-d8c44d604bc2/1/1SGSgT0i76BLy7JOC_D-NNjfukg.mft
File: 1SGSgT0i76BLy7JOC_D-NNjfukg.mft (raw, json)
Hash identifier: SSRGqP+19q1eUtTk++xTY1+X/sdRYeax4bPiajNurFQ=
Subject key identifier: C1:50:00:C1:DC:EB:B7:8B:E8:EF:4A:79:C4:43:57:28:CE:FE:21:CB
Authority key identifier: D5:21:92:81:3D:22:EF:A0:4B:CB:B2:4E:0B:F0:FE:34:D8:DF:BA:48
Certificate issuer: /CN=d52192813d22efa04bcbb24e0bf0fe34d8dfba48
Certificate serial: 0194BD4EBB656DE5322B3C9B86182FE29DF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1SGSgT0i76BLy7JOC_D-NNjfukg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/af4879-05de-4268-9ad2-d8c44d604bc2/1/1SGSgT0i76BLy7JOC_D-NNjfukg.mft
Manifest number: 4D
Signing time: Fri 31 Jan 2025 17:00:41 +0000
Manifest this update: Fri 31 Jan 2025 17:00:41 +0000
Manifest next update: Sat 01 Feb 2025 17:00:41 +0000
Files and hashes: 1: 1SGSgT0i76BLy7JOC_D-NNjfukg.crl (hash: J0J7a7TPFQSNivUAEZzqQn21S9+h11bVTCK+0uav27k=)
2: eDQ7Rqa20D_hI8gI5USdLHd-gF8.roa (hash: r3EJNmKQgbbo4j5pe3uk2ZFcWeVkHRAZ7TxCivW3QgQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:bb:65:6d:e5:32:2b:3c:9b:86:18:2f:e2:9d:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d52192813d22efa04bcbb24e0bf0fe34d8dfba48
Validity
Not Before: Jan 31 17:00:41 2025 GMT
Not After : Feb 1 17:00:41 2025 GMT
Subject: CN=c15000c1dcebb78be8ef4a79c4435728cefe21cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:69:02:2f:06:21:a2:a6:5c:fd:ac:d7:ac:4f:
d1:fe:93:ec:bf:89:a4:09:3b:bb:48:3b:d0:1a:77:
fb:c9:ed:db:61:2e:25:e3:af:a8:07:44:05:dc:47:
b9:1c:ab:1d:7b:31:fb:d2:89:e9:34:da:7f:e5:07:
0c:81:ed:82:43:f2:ed:f3:b6:82:b1:b7:8b:6d:94:
7a:8b:12:1f:30:62:7f:d2:8a:a4:ae:33:ff:83:7d:
be:23:55:cf:e2:f0:6a:a2:f9:20:23:2c:10:b5:48:
36:d8:4f:98:97:ce:d1:79:a0:2d:a0:97:1e:e3:69:
b4:b1:39:d7:30:ee:f5:10:fc:71:8b:c6:e0:49:42:
08:8a:81:82:dd:cd:86:6a:89:ca:0a:bb:45:d8:41:
c5:e0:d1:0c:f0:20:44:e1:a5:f3:aa:45:ac:55:13:
ff:ab:b7:00:17:c0:9d:74:1e:97:92:60:46:c8:1a:
81:fa:06:b0:6d:34:bb:56:dd:c5:0d:78:eb:9c:de:
76:42:47:5e:53:14:3f:a0:8e:af:cc:fe:c1:05:42:
09:71:62:d9:eb:7f:8e:57:b4:29:95:d1:34:df:a6:
de:55:93:27:f4:71:44:8d:d2:56:2c:95:bf:d7:20:
d0:01:c4:4e:17:40:e8:10:bb:f0:bb:a1:e6:2a:70:
3a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:50:00:C1:DC:EB:B7:8B:E8:EF:4A:79:C4:43:57:28:CE:FE:21:CB
X509v3 Authority Key Identifier:
keyid:D5:21:92:81:3D:22:EF:A0:4B:CB:B2:4E:0B:F0:FE:34:D8:DF:BA:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1SGSgT0i76BLy7JOC_D-NNjfukg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/af4879-05de-4268-9ad2-d8c44d604bc2/1/1SGSgT0i76BLy7JOC_D-NNjfukg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/af4879-05de-4268-9ad2-d8c44d604bc2/1/1SGSgT0i76BLy7JOC_D-NNjfukg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:a7:18:8d:a1:e9:8b:97:6e:a6:2d:0a:b0:0a:b2:79:1c:4d:
00:5c:59:a2:cb:be:3f:6a:9d:06:3d:88:70:46:f2:26:26:0a:
03:ea:1c:c2:85:80:10:22:c7:a0:e6:95:cb:e3:9a:ce:17:58:
67:5d:ad:10:9f:5a:b1:e0:2b:50:f3:7b:25:ab:d2:06:cf:3b:
6a:16:54:03:18:e5:00:7e:22:a0:92:c4:1e:c9:40:6c:2b:0b:
92:91:05:14:b5:7a:77:99:59:05:45:c1:62:8e:c4:c4:fa:6b:
0e:a0:da:7f:a7:07:49:4e:ce:35:ec:67:b7:eb:77:17:5c:cd:
cc:dc:40:1b:85:cf:a0:10:08:38:71:5f:3c:73:68:5b:b2:c4:
a2:ae:29:d2:85:ea:a9:07:8f:e2:91:3f:68:83:f1:84:2c:37:
ee:16:41:17:c2:e1:80:53:89:f3:4b:e3:a1:4f:c2:7d:d2:e9:
19:83:ab:37:2c:59:a8:d2:78:ec:70:9e:bd:c6:4e:18:6a:07:
4b:97:20:18:91:e4:76:97:35:c6:22:34:d2:2f:1e:eb:82:26:
74:a2:3b:81:a7:26:a5:36:2d:70:9b:6d:fa:13:27:81:62:65:
10:64:e2:5e:64:b4:ca:bf:d9:1c:06:14:82:ae:45:80:77:1d:
cf:60:67:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:18:57 2025 by rpki-client