Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/c88555-abb7-4b10-ab64-19c5427e416f/1/SU0Or4AlCrgkiYm-caQDlxjWk1o.mft
File: SU0Or4AlCrgkiYm-caQDlxjWk1o.mft (raw, json)
Hash identifier: 667m1BX5Cihy+v3DPyUPcEEDP5POXkxDrIL2ndFRndk=
Subject key identifier: 19:A5:5E:9C:49:23:50:9E:63:23:8E:20:BC:96:91:F0:0D:D5:95:76
Authority key identifier: 49:4D:0E:AF:80:25:0A:B8:24:89:89:BE:71:A4:03:97:18:D6:93:5A
Certificate issuer: /CN=494d0eaf80250ab8248989be71a4039718d6935a
Certificate serial: 0194BC049D6C1519994DF1A20625E337D942
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SU0Or4AlCrgkiYm-caQDlxjWk1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/c88555-abb7-4b10-ab64-19c5427e416f/1/SU0Or4AlCrgkiYm-caQDlxjWk1o.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 11:00:06 +0000
Manifest this update: Fri 31 Jan 2025 11:00:06 +0000
Manifest next update: Sat 01 Feb 2025 11:00:06 +0000
Files and hashes: 1: Ad7sRIt_14WqsoXSVJnhtt5pR6I.roa (hash: d1H2UkdaZjL8z/VCs5Y8T9oYvq5D7T8CQrV9qDD8uXE=)
2: SU0Or4AlCrgkiYm-caQDlxjWk1o.crl (hash: 2cgoHFB2veHhp2+SFtDDTA5ABRSLjco2v6nr6GAkZHE=)
3: fbnqy98yfE_Lzn_9R-s84dMZn3s.roa (hash: RB1a5+/ABy4Ucs2InLVoqKGALjdVGmuLcFN8wD1kPqA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:9d:6c:15:19:99:4d:f1:a2:06:25:e3:37:d9:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=494d0eaf80250ab8248989be71a4039718d6935a
Validity
Not Before: Jan 31 11:00:06 2025 GMT
Not After : Feb 1 11:00:06 2025 GMT
Subject: CN=19a55e9c4923509e63238e20bc9691f00dd59576
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:50:c9:b8:fc:0f:d8:49:d2:d4:88:2e:27:b3:
b9:ec:03:3f:39:b6:1f:6e:e1:7d:c3:85:d7:49:b4:
4c:df:15:33:61:b8:59:13:10:63:6e:89:83:d1:ba:
5d:53:0e:c3:7e:8c:c3:7f:b5:12:a1:df:b1:87:87:
1b:51:02:cd:98:ef:89:1e:cf:d8:d6:e7:91:16:ef:
07:fb:b8:19:2e:b9:03:55:5a:df:0e:44:a5:ee:e3:
4e:49:c9:4a:43:02:7d:74:d0:fb:9c:cc:8e:3b:2e:
b5:e1:1b:b6:aa:e5:ee:07:2f:e5:a2:82:05:92:cd:
cc:5b:3c:bc:fb:eb:6e:24:cd:e3:a0:18:cf:a6:6e:
59:7f:15:27:aa:0b:d2:28:5b:55:33:a9:80:37:74:
99:0c:a3:5c:5b:ba:ea:6c:17:72:cb:b3:17:92:a6:
15:de:ad:44:41:27:9c:a1:74:57:55:35:06:e2:38:
d4:52:24:92:fe:6f:09:c0:82:2b:16:4b:48:23:54:
bc:82:83:7a:6f:c5:65:f9:94:4d:35:8d:12:35:58:
cc:87:31:70:0a:85:9d:0b:e5:c1:bd:da:1c:f8:bd:
75:9f:e1:3c:5d:15:c9:9c:2f:a3:33:67:bc:ef:78:
74:4d:d5:52:ea:6e:ae:10:1f:b6:d8:a6:88:50:67:
ee:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:A5:5E:9C:49:23:50:9E:63:23:8E:20:BC:96:91:F0:0D:D5:95:76
X509v3 Authority Key Identifier:
keyid:49:4D:0E:AF:80:25:0A:B8:24:89:89:BE:71:A4:03:97:18:D6:93:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SU0Or4AlCrgkiYm-caQDlxjWk1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c88555-abb7-4b10-ab64-19c5427e416f/1/SU0Or4AlCrgkiYm-caQDlxjWk1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c88555-abb7-4b10-ab64-19c5427e416f/1/SU0Or4AlCrgkiYm-caQDlxjWk1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:f6:8b:98:03:37:97:c2:39:e1:8c:bf:44:82:ec:78:7c:2a:
c5:90:9f:1a:56:f6:7b:34:c2:6a:26:84:ae:ff:cf:57:d3:1f:
70:ef:11:e6:06:c5:f5:37:80:e5:6e:9d:de:35:b1:24:52:c6:
cb:57:e3:a7:1e:9b:ab:0d:8c:61:fe:e3:38:84:b6:1b:27:96:
18:c2:73:27:16:62:17:50:9a:fc:cd:ac:61:23:c0:78:57:78:
0a:0c:59:73:2b:3d:96:41:07:77:88:94:1d:51:6c:17:d0:2b:
e5:99:88:ed:81:8f:25:68:eb:2b:07:5b:cb:da:37:30:e6:fd:
6b:ad:67:4d:6f:c8:77:55:83:38:46:f8:61:43:64:78:e8:7d:
1c:b2:8f:51:18:fb:bb:29:c7:61:eb:79:af:36:54:5f:a3:f0:
ed:07:f4:12:8c:a0:0c:1e:77:f5:0c:f7:0e:59:c3:b7:82:52:
86:f1:93:d9:64:f1:21:cd:b7:d6:7e:8b:eb:7a:31:c3:5d:aa:
b0:5d:de:54:93:f7:93:40:66:6d:38:7d:f9:88:69:00:3e:03:
85:5f:0f:c6:02:b5:e5:00:a2:e3:ab:11:a6:3f:49:82:d4:88:
b7:91:d7:2b:e8:55:fc:5d:c4:ff:24:9e:ec:09:65:3d:3c:f8:
4d:c9:7c:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:25:19 2025 by rpki-client