Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/4ffe92-00ce-4faa-885c-e9617d66a74b/1/SfCTu46K0RxMg07f0t9U1By0n3k.mft
File: SfCTu46K0RxMg07f0t9U1By0n3k.mft (raw, json)
Hash identifier: J0h74uAvDqCCzI3ilLbNqa88sY1mV40EKH/GJFHVeoA=
Subject key identifier: C5:22:13:81:EB:35:1E:27:00:44:23:50:FB:91:88:25:4E:7C:68:4F
Authority key identifier: 49:F0:93:BB:8E:8A:D1:1C:4C:83:4E:DF:D2:DF:54:D4:1C:B4:9F:79
Certificate issuer: /CN=49f093bb8e8ad11c4c834edfd2df54d41cb49f79
Certificate serial: 0194BC7283F77AD85AD2136C708748287F0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SfCTu46K0RxMg07f0t9U1By0n3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/4ffe92-00ce-4faa-885c-e9617d66a74b/1/SfCTu46K0RxMg07f0t9U1By0n3k.mft
Manifest number: 0282
Signing time: Fri 31 Jan 2025 13:00:08 +0000
Manifest this update: Fri 31 Jan 2025 13:00:08 +0000
Manifest next update: Sat 01 Feb 2025 13:00:08 +0000
Files and hashes: 1: QWkT31GYhkK2dZU3UMSr2Ck3CMY.roa (hash: bsZQ/G0U8862JpB88PTG8FxX7m4i8ha16ESClmf3E34=)
2: SfCTu46K0RxMg07f0t9U1By0n3k.crl (hash: YkpcbVKC6lVdSD0gsxd90YstALAxMdu/c25EanY/EUY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:83:f7:7a:d8:5a:d2:13:6c:70:87:48:28:7f:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49f093bb8e8ad11c4c834edfd2df54d41cb49f79
Validity
Not Before: Jan 31 13:00:08 2025 GMT
Not After : Feb 1 13:00:08 2025 GMT
Subject: CN=c5221381eb351e2700442350fb9188254e7c684f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:52:56:f0:1b:b4:a9:fa:f7:83:09:a8:9e:e2:
85:e2:4e:8d:a3:76:64:13:0a:56:b3:8b:c6:8c:bb:
c3:ef:d0:ad:03:de:de:d0:48:5c:1c:55:dc:a6:22:
b7:58:8c:33:58:a4:d3:8f:12:f7:6e:41:94:60:ba:
1c:61:48:69:57:c5:75:3f:34:57:60:4c:d5:8b:b1:
d6:08:20:57:59:09:2b:99:3f:33:31:f1:3b:07:5c:
2a:bd:5f:9c:6a:7e:80:c0:d0:bb:ba:fb:4d:86:4c:
3f:53:98:46:1f:5a:4a:b1:6c:f1:8f:4c:0d:c2:89:
ea:b7:8a:0b:90:12:14:fc:ac:6c:9b:e1:0b:6d:5c:
f7:e2:b6:06:b9:28:9a:4d:3b:67:58:0f:cb:04:1d:
e5:88:3e:fe:a4:f7:5d:cf:54:72:ea:cd:60:0e:c8:
fa:f4:32:1d:98:4c:90:5a:e8:04:7d:0e:03:9a:8f:
26:57:91:e6:f9:f9:bf:99:ca:84:f5:8d:92:2c:73:
11:e7:af:2d:a6:59:43:af:58:6b:99:5c:45:fe:6b:
c6:da:40:12:48:61:4a:a8:af:04:3d:5f:70:6e:44:
69:af:d2:fa:02:62:f1:31:3a:dc:91:a0:72:5f:76:
3a:dc:d3:cf:ba:cb:c0:5a:82:3a:9e:02:62:92:4f:
fa:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:22:13:81:EB:35:1E:27:00:44:23:50:FB:91:88:25:4E:7C:68:4F
X509v3 Authority Key Identifier:
keyid:49:F0:93:BB:8E:8A:D1:1C:4C:83:4E:DF:D2:DF:54:D4:1C:B4:9F:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SfCTu46K0RxMg07f0t9U1By0n3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/4ffe92-00ce-4faa-885c-e9617d66a74b/1/SfCTu46K0RxMg07f0t9U1By0n3k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/4ffe92-00ce-4faa-885c-e9617d66a74b/1/SfCTu46K0RxMg07f0t9U1By0n3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:5f:5a:d6:e7:e0:a9:3b:3c:f1:7c:45:88:46:3e:3a:5f:86:
69:1c:6a:2d:1c:1f:03:13:eb:04:41:b9:d1:59:44:6f:9b:9a:
23:4c:06:d9:a3:40:93:c2:1e:29:00:2e:9e:92:45:95:10:32:
0a:cc:d4:15:2c:2a:aa:0d:89:42:54:6f:25:4a:97:bf:4a:60:
f8:6c:99:15:20:28:6b:75:3e:1e:8d:c2:f9:67:8c:e8:41:fb:
f3:4a:1a:b6:e2:6b:32:ba:1e:da:c6:5b:a6:3e:70:03:b9:53:
d0:d3:43:df:46:27:89:eb:40:4d:51:32:27:48:03:c6:8e:bf:
d9:7b:4d:73:4b:09:02:4c:fd:2e:db:aa:cc:4d:14:c0:f6:1d:
ec:f0:82:16:14:b9:0d:ae:da:ec:f4:64:a0:47:62:55:eb:a8:
fa:d8:33:4b:24:8f:ad:4c:39:61:a3:15:6b:b8:bb:1c:2b:3b:
e5:20:2d:9e:57:23:94:de:0e:3f:62:c5:7e:71:bc:53:ca:0a:
90:2a:a6:29:cf:74:09:d4:9f:aa:1a:45:63:38:86:be:4a:62:
c2:9a:ec:85:b5:92:7f:87:49:4a:4d:36:2a:c9:66:56:d4:11:
7a:c4:62:7b:ce:9b:72:af:27:50:54:0c:99:90:24:ab:11:85:
a9:11:60:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:43 2025 by rpki-client