Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/c3dc1b-d1ee-4ff2-a5aa-f0c4be8e240a/1/SeRO7qJladDdvQ6GN_Es9QWk7ek.mft
File: SeRO7qJladDdvQ6GN_Es9QWk7ek.mft (raw, json)
Hash identifier: zrNp3ArWLli6OhgRizLfZEOhZU5FMUm8GFeH1aFAZaE=
Subject key identifier: 2D:E8:42:9A:FD:15:AA:E6:A2:9D:50:3C:E2:4C:7F:24:F3:93:6F:82
Authority key identifier: 49:E4:4E:EE:A2:65:69:D0:DD:BD:0E:86:37:F1:2C:F5:05:A4:ED:E9
Certificate issuer: /CN=49e44eeea26569d0ddbd0e8637f12cf505a4ede9
Certificate serial: 0194BD4E9047780608599A22ED3F7EEB3191
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeRO7qJladDdvQ6GN_Es9QWk7ek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/c3dc1b-d1ee-4ff2-a5aa-f0c4be8e240a/1/SeRO7qJladDdvQ6GN_Es9QWk7ek.mft
Manifest number: 1433
Signing time: Fri 31 Jan 2025 17:00:30 +0000
Manifest this update: Fri 31 Jan 2025 17:00:30 +0000
Manifest next update: Sat 01 Feb 2025 17:00:30 +0000
Files and hashes: 1: SeRO7qJladDdvQ6GN_Es9QWk7ek.crl (hash: 9MvC5N+CWcOINcxNeTsILwJ+IYOKrbqmZxYa3dXLAiU=)
2: ZLZClTfuDKfBFAb78-Sh9gGUq9o.roa (hash: ZjgvTzOG0NWN+AmJ71kj5d0LbF11Gt0UdOZExqIqebk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:90:47:78:06:08:59:9a:22:ed:3f:7e:eb:31:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e44eeea26569d0ddbd0e8637f12cf505a4ede9
Validity
Not Before: Jan 31 17:00:30 2025 GMT
Not After : Feb 1 17:00:30 2025 GMT
Subject: CN=2de8429afd15aae6a29d503ce24c7f24f3936f82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6b:e1:5c:88:83:74:6a:ba:d1:cc:e1:82:cb:
b4:b3:4b:2b:2c:c6:25:95:16:a5:a8:4e:ac:97:67:
c4:c6:f5:f7:64:e7:ea:10:94:17:38:dc:95:6e:c2:
14:de:04:78:96:d0:da:fe:f0:d2:9a:63:07:fd:c8:
7f:cf:42:11:91:3b:a3:41:08:8a:cb:ab:4b:65:a3:
1b:2f:8c:32:62:c7:b2:b4:0a:82:8c:ad:1e:77:69:
75:78:1d:7f:30:86:90:46:95:90:5a:5a:27:bc:c8:
c3:e4:f2:59:4c:0a:1f:50:3a:b4:1c:a5:af:85:48:
0b:4e:68:9b:ef:26:f3:ac:6e:92:19:7e:85:ce:32:
85:42:5d:e3:0c:9a:17:ed:cc:7b:4e:d1:6c:e4:4d:
5e:eb:29:46:80:7b:9c:a0:20:9e:c7:8e:ae:8b:b6:
1e:fa:cc:c1:c8:a3:fb:12:32:c2:ee:7a:00:cd:e1:
b2:92:f2:d4:65:ab:c5:43:0a:f9:9b:5e:10:0a:6f:
1a:fb:73:2e:f5:b2:7b:73:3f:4b:7c:2e:03:3e:c9:
38:48:a8:c2:b8:1a:d9:90:f2:db:04:05:d0:85:9d:
86:6c:d3:7e:0e:9c:b9:b9:28:85:f4:e4:a3:e0:c3:
83:32:58:dc:dc:db:73:af:a0:9a:4f:56:bd:a7:0a:
8d:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:E8:42:9A:FD:15:AA:E6:A2:9D:50:3C:E2:4C:7F:24:F3:93:6F:82
X509v3 Authority Key Identifier:
keyid:49:E4:4E:EE:A2:65:69:D0:DD:BD:0E:86:37:F1:2C:F5:05:A4:ED:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeRO7qJladDdvQ6GN_Es9QWk7ek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c3dc1b-d1ee-4ff2-a5aa-f0c4be8e240a/1/SeRO7qJladDdvQ6GN_Es9QWk7ek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c3dc1b-d1ee-4ff2-a5aa-f0c4be8e240a/1/SeRO7qJladDdvQ6GN_Es9QWk7ek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:4c:5e:f9:5e:ab:1a:f2:5a:80:d8:b7:24:09:3f:53:e1:52:
7c:43:74:db:71:d9:19:d4:e5:98:c4:38:4e:85:c9:bd:eb:ec:
c2:1a:21:be:47:36:57:85:b6:e7:fc:f0:ef:25:b7:4d:f2:2d:
88:20:88:c4:56:4e:5b:9e:e8:ca:33:a2:75:27:d8:1f:a0:a2:
8c:c9:0e:70:18:3a:43:a1:32:da:19:76:c5:07:48:21:ee:57:
2b:cd:bf:20:bd:24:4b:3b:a0:4b:ff:8b:1e:12:f3:f1:26:68:
84:89:fe:51:f2:2d:54:82:32:8c:27:2f:8f:fb:03:6e:c5:a3:
fd:e6:38:73:17:ec:89:69:63:3f:a8:c4:7d:8a:58:6c:c9:da:
4b:a1:24:77:ea:5b:7d:a2:cf:e4:67:fa:e9:5f:f7:a9:57:f8:
d8:a6:33:48:72:95:8c:2c:64:f2:f5:af:52:e0:df:c3:70:c9:
d6:41:97:a5:8b:52:c4:49:10:e6:60:16:2d:f4:fa:01:6e:8c:
7c:bd:e3:c3:5f:dd:5f:f5:75:a1:1b:be:a1:e0:2a:9d:44:5c:
48:44:6c:5c:c6:96:6a:22:76:2d:d8:f6:05:be:3c:24:9b:6b:
ae:6b:62:eb:4e:fb:a1:6a:e0:39:f4:ce:49:45:64:d9:da:7d:
5a:64:72:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:05 2025 by rpki-client