Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/9e024e-c6e5-4977-b369-1ff9ff192cd7/1/Sq5zjuF4JzWTmk-w1nKmMXt_UkM.mft
File: Sq5zjuF4JzWTmk-w1nKmMXt_UkM.mft (raw, json)
Hash identifier: P4iVtHMi/Ee7mv+v72LWl/hYB+Dn5bJ/ApLbCdit+xE=
Subject key identifier: B7:5D:0A:39:90:00:48:29:53:EE:FB:DB:EE:FE:A5:89:C6:19:88:9D
Authority key identifier: 4A:AE:73:8E:E1:78:27:35:93:9A:4F:B0:D6:72:A6:31:7B:7F:52:43
Certificate issuer: /CN=4aae738ee1782735939a4fb0d672a6317b7f5243
Certificate serial: 0194BCAA3D29840CDDEC84559EDAFCD12FD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sq5zjuF4JzWTmk-w1nKmMXt_UkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/9e024e-c6e5-4977-b369-1ff9ff192cd7/1/Sq5zjuF4JzWTmk-w1nKmMXt_UkM.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 14:01:00 +0000
Manifest this update: Fri 31 Jan 2025 14:01:00 +0000
Manifest next update: Sat 01 Feb 2025 14:01:00 +0000
Files and hashes: 1: Sq5zjuF4JzWTmk-w1nKmMXt_UkM.crl (hash: nKXFJwJXCNClnMQVExHqTMwhz5HarTnE66X9p0IjoNA=)
2: VDDxUy1rUQDxJYT3ATBjI69SbdQ.roa (hash: oF1hkO2cydZ9A84V2XohR++dZN8uh+qMwIFTNO+4W4Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:3d:29:84:0c:dd:ec:84:55:9e:da:fc:d1:2f:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4aae738ee1782735939a4fb0d672a6317b7f5243
Validity
Not Before: Jan 31 14:01:00 2025 GMT
Not After : Feb 1 14:01:00 2025 GMT
Subject: CN=b75d0a399000482953eefbdbeefea589c619889d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:38:69:76:58:07:54:48:2c:aa:26:86:d5:16:
f9:46:5b:a3:8b:cc:6e:ac:3c:83:b5:45:6a:56:f4:
12:46:c7:e6:15:9f:7a:0b:21:76:71:ea:f3:44:e8:
bc:97:c8:2f:60:a5:d1:ed:ec:fa:a4:0b:98:46:ab:
19:aa:13:67:c8:45:3d:a6:d4:8f:8c:da:25:94:c4:
48:f3:a9:bf:35:0e:c4:a9:2e:a3:bb:48:9e:27:0e:
80:af:d4:8f:19:83:fd:8d:c5:2b:e6:d6:d8:95:4a:
d3:7a:5b:d0:35:05:54:a5:c6:1b:83:f3:65:23:13:
a7:ee:b1:18:60:50:48:bb:e5:cc:b0:94:e4:6b:3c:
ac:89:d1:c2:da:01:03:ec:40:0f:58:06:d3:fb:49:
e4:54:d5:3c:4a:a3:89:52:4e:72:8f:3d:3f:53:b7:
cf:e3:9e:50:9c:a0:c8:61:8f:41:5e:11:c2:e4:fb:
6e:17:ee:69:ae:49:31:ce:6f:36:a0:7b:f2:07:3b:
3d:75:56:5b:be:27:d2:66:e7:5b:ff:28:88:fe:4f:
0f:31:7d:de:0f:2e:15:ac:fa:d1:04:92:24:fb:66:
6b:87:85:11:c7:d2:64:92:d3:cc:8d:0e:10:71:a9:
fa:1b:cb:d6:f1:ed:85:ad:8b:df:5c:66:3b:41:4e:
4a:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:5D:0A:39:90:00:48:29:53:EE:FB:DB:EE:FE:A5:89:C6:19:88:9D
X509v3 Authority Key Identifier:
keyid:4A:AE:73:8E:E1:78:27:35:93:9A:4F:B0:D6:72:A6:31:7B:7F:52:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sq5zjuF4JzWTmk-w1nKmMXt_UkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9e024e-c6e5-4977-b369-1ff9ff192cd7/1/Sq5zjuF4JzWTmk-w1nKmMXt_UkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9e024e-c6e5-4977-b369-1ff9ff192cd7/1/Sq5zjuF4JzWTmk-w1nKmMXt_UkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:4b:b6:68:18:95:bb:df:9d:1e:c1:e0:66:e6:b5:a0:3b:5e:
7a:c5:d8:57:72:9a:aa:54:1e:90:0b:dc:7d:ab:ad:eb:9f:8c:
c6:22:d8:a9:5c:12:49:05:b7:38:6d:fa:cb:94:af:3f:ce:ab:
d4:37:fd:34:92:18:45:51:14:70:4c:21:c0:d5:04:c3:37:79:
7d:f4:7e:bb:d1:90:bd:dc:1e:c0:83:4f:78:06:64:a6:f3:97:
27:bc:56:9b:8e:95:ff:22:98:c8:ca:d8:ce:79:e5:87:69:3d:
ca:65:55:d5:26:4d:32:91:22:31:3e:4d:c0:61:49:91:54:dc:
3a:f8:8c:1d:66:4f:e2:ba:3f:5e:43:01:d9:38:87:e5:8e:29:
81:e1:11:42:96:d2:e2:ad:72:76:18:3f:d9:aa:93:fb:f6:99:
a7:25:2e:1b:0f:11:4e:b4:0d:7f:71:bc:2d:96:ca:da:6c:04:
21:09:bd:38:09:1a:75:24:e2:c9:fd:01:e8:21:99:53:69:33:
cb:f5:1a:63:12:3c:bd:b1:bb:86:e5:bc:de:5c:5d:a2:34:e3:
8e:f1:ff:7d:1c:29:2e:dd:7f:56:14:c7:91:c3:7f:e8:92:9a:
6a:c3:cb:28:5c:d5:03:f3:9f:9a:e7:c9:70:65:08:84:4a:9c:
3d:05:a7:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:37:08 2025 by rpki-client