Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/77ff2a-dd6b-40ca-997c-80a7eba6f8e9/1/S84INADK9hbzUCAynI1288S4OaU.mft
File: S84INADK9hbzUCAynI1288S4OaU.mft (raw, json)
Hash identifier: cG39YCTWlSGlYLubuEbF5gw/G+ATiHr3MTpkTXtknXk=
Subject key identifier: F4:70:C7:2C:D7:3A:FD:97:72:A4:14:91:68:8C:BF:82:54:B9:83:3C
Authority key identifier: 4B:CE:08:34:00:CA:F6:16:F3:50:20:32:9C:8D:76:F3:C4:B8:39:A5
Certificate issuer: /CN=4bce083400caf616f35020329c8d76f3c4b839a5
Certificate serial: 0194BC04D7493B9961F44268A079144E0AA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S84INADK9hbzUCAynI1288S4OaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/77ff2a-dd6b-40ca-997c-80a7eba6f8e9/1/S84INADK9hbzUCAynI1288S4OaU.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 11:00:21 +0000
Manifest this update: Fri 31 Jan 2025 11:00:21 +0000
Manifest next update: Sat 01 Feb 2025 11:00:21 +0000
Files and hashes: 1: S84INADK9hbzUCAynI1288S4OaU.crl (hash: +8NczclyCdB8iNgAQR1OPOe5W9dO3KrSpfJxr0YBsd0=)
2: xu8AVZlYRkARGQOdM9wgzlgLlPk.roa (hash: z2f5UKfOO2uXvhmwbBAmMbbk0ctXWHQsq/ILki97gKY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:d7:49:3b:99:61:f4:42:68:a0:79:14:4e:0a:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bce083400caf616f35020329c8d76f3c4b839a5
Validity
Not Before: Jan 31 11:00:21 2025 GMT
Not After : Feb 1 11:00:21 2025 GMT
Subject: CN=f470c72cd73afd9772a41491688cbf8254b9833c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:87:8a:f1:03:ef:51:3c:ca:e1:50:06:c6:b9:
42:48:45:30:0a:bb:80:af:4b:f4:12:35:c9:5c:f6:
23:4d:7e:a0:a8:40:9e:20:b3:e7:33:a0:87:f2:e6:
4e:5a:45:46:7f:36:21:c3:f8:56:27:a2:d8:b9:86:
6f:52:dc:ef:f6:59:3f:04:9b:f1:6d:38:e1:66:6f:
e0:33:7d:61:20:bc:5b:79:4e:4f:38:19:a6:5d:13:
4d:14:f7:1e:5d:79:06:62:85:08:31:4c:e1:fb:c6:
25:e3:1a:22:91:e5:f7:58:05:42:7e:2e:3b:1a:16:
34:0a:d5:60:7e:35:eb:10:ff:97:86:4f:65:42:fe:
4b:3a:85:79:2c:44:7f:ec:8b:b9:99:0c:b1:23:7b:
b1:e2:41:fc:a0:db:52:16:2a:d7:61:77:a6:05:54:
db:3a:e6:31:6d:c2:b8:42:66:1e:07:0b:e9:cd:d4:
20:6a:dc:51:65:3b:48:4f:78:06:d7:2e:ff:77:1d:
75:42:2e:57:4b:b6:30:96:e0:2a:b9:ed:2f:7e:cb:
fb:2a:62:de:0a:d3:ce:aa:52:9e:ff:05:1b:a1:75:
57:85:0c:3f:d8:6e:82:50:aa:25:75:17:45:3d:de:
bb:81:f7:6a:24:c9:56:ac:6f:bb:92:53:68:e3:51:
c9:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:70:C7:2C:D7:3A:FD:97:72:A4:14:91:68:8C:BF:82:54:B9:83:3C
X509v3 Authority Key Identifier:
keyid:4B:CE:08:34:00:CA:F6:16:F3:50:20:32:9C:8D:76:F3:C4:B8:39:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S84INADK9hbzUCAynI1288S4OaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/77ff2a-dd6b-40ca-997c-80a7eba6f8e9/1/S84INADK9hbzUCAynI1288S4OaU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/77ff2a-dd6b-40ca-997c-80a7eba6f8e9/1/S84INADK9hbzUCAynI1288S4OaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:a7:2b:a0:8c:19:d0:85:a9:0a:33:ec:b3:1f:f8:71:ec:af:
89:c8:0f:1a:f8:c5:8f:49:93:f3:8b:53:92:73:fb:7b:9e:9e:
ab:04:19:e7:ac:73:eb:71:be:62:48:2e:54:71:b5:8a:22:fa:
ae:58:93:c6:f3:73:ae:78:28:1e:51:e4:42:1c:0e:67:1f:7e:
19:f0:4b:43:f1:42:10:3a:27:f6:11:c6:fb:f5:f5:3d:5b:d2:
73:cf:9d:db:ad:91:b8:06:b6:40:37:48:92:a1:11:d2:cc:22:
44:f6:d1:ae:8d:da:69:b6:35:12:9a:07:a7:66:4b:ba:ee:14:
72:83:6d:04:e7:be:70:e4:c7:a8:22:60:c0:93:44:81:ff:76:
48:85:7a:f8:ed:17:07:e7:52:71:5f:c8:cc:6b:bd:10:18:f7:
f7:d1:84:20:2c:29:48:33:f5:60:93:65:14:17:fa:29:d3:45:
3a:e4:ae:f1:58:8c:8c:b4:a9:86:6c:ea:33:15:0d:34:f0:d9:
45:43:f9:61:9e:20:ed:23:c5:de:49:19:59:a8:88:a5:87:f3:
b9:0d:44:ee:0b:d3:09:e5:27:70:f1:d4:67:80:78:b5:66:aa:
fa:36:27:a0:7a:9a:41:0e:4a:c5:8b:36:76:4f:e5:59:56:e3:
56:47:dc:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:28:13 2025 by rpki-client