Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/735756-8857-424d-9524-20f531122b57/1/SdA41NOnW7-ev-owZGh7Xjs0b-M.mft
File: SdA41NOnW7-ev-owZGh7Xjs0b-M.mft (raw, json)
Hash identifier: Pfw0SQHr9KaLlYqDrFn16c0EhkhUNe5K0fqQU51MCqM=
Subject key identifier: DA:2A:16:A1:23:3A:79:23:A4:1C:69:6A:6C:BE:87:FC:C7:1E:EB:7B
Authority key identifier: 49:D0:38:D4:D3:A7:5B:BF:9E:BF:EA:30:64:68:7B:5E:3B:34:6F:E3
Certificate issuer: /CN=49d038d4d3a75bbf9ebfea3064687b5e3b346fe3
Certificate serial: 0194BBCEC45FC19C72B109E73B2125BC42E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SdA41NOnW7-ev-owZGh7Xjs0b-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/735756-8857-424d-9524-20f531122b57/1/SdA41NOnW7-ev-owZGh7Xjs0b-M.mft
Manifest number: 0A4B
Signing time: Fri 31 Jan 2025 10:01:17 +0000
Manifest this update: Fri 31 Jan 2025 10:01:17 +0000
Manifest next update: Sat 01 Feb 2025 10:01:17 +0000
Files and hashes: 1: SdA41NOnW7-ev-owZGh7Xjs0b-M.crl (hash: qrf/odVXLUoURCJ/YrlrTmJMxoGyO8SUaI8dmY2dmAg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:c4:5f:c1:9c:72:b1:09:e7:3b:21:25:bc:42:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49d038d4d3a75bbf9ebfea3064687b5e3b346fe3
Validity
Not Before: Jan 31 10:01:17 2025 GMT
Not After : Feb 1 10:01:17 2025 GMT
Subject: CN=da2a16a1233a7923a41c696a6cbe87fcc71eeb7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:68:c1:58:da:f0:7e:6a:05:57:46:74:d0:c5:
29:81:75:7f:29:4f:24:a1:be:09:84:2e:50:ff:c8:
1f:12:37:3a:92:d3:88:cf:b6:fc:d8:7e:35:e4:0f:
e7:91:cd:e0:d5:cb:e8:3e:13:6a:cd:48:de:1b:59:
e8:aa:d4:52:f0:f0:3f:0d:51:e7:41:b0:42:05:45:
30:0b:6f:a7:58:52:5c:59:d9:45:e5:bd:52:b2:c7:
53:de:33:43:41:62:0c:47:9d:eb:f6:e5:0d:b9:9b:
9f:1c:f9:8a:36:ad:d6:b7:a2:f3:a5:cf:94:22:ee:
4f:b8:b3:a1:3b:e4:21:fe:67:82:b8:a8:ba:8c:02:
b3:4c:2d:18:b4:2a:00:3c:dd:b6:ed:61:e7:c4:d9:
96:f1:66:c5:29:b1:e8:3c:19:a3:93:27:07:e4:15:
69:97:e5:db:d8:0d:0f:05:5d:cd:67:0f:4c:10:74:
2f:65:45:5e:a3:15:80:6b:83:fe:8e:85:e4:2c:a3:
53:26:aa:0d:cf:cb:78:de:25:ec:fc:00:74:bb:e6:
ae:5e:ab:d4:c2:28:77:45:bb:96:34:8c:35:ed:c7:
52:9a:8f:dc:31:c1:a5:4e:09:49:bf:45:86:ce:60:
d5:50:9b:f3:2c:9b:b1:c1:ad:d5:7f:db:4f:da:33:
9f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:2A:16:A1:23:3A:79:23:A4:1C:69:6A:6C:BE:87:FC:C7:1E:EB:7B
X509v3 Authority Key Identifier:
keyid:49:D0:38:D4:D3:A7:5B:BF:9E:BF:EA:30:64:68:7B:5E:3B:34:6F:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SdA41NOnW7-ev-owZGh7Xjs0b-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/735756-8857-424d-9524-20f531122b57/1/SdA41NOnW7-ev-owZGh7Xjs0b-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/735756-8857-424d-9524-20f531122b57/1/SdA41NOnW7-ev-owZGh7Xjs0b-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:3f:6c:b3:7f:45:55:68:51:7b:dd:b0:81:b5:10:ba:e9:53:
09:f3:04:ec:2d:30:c9:95:cd:e3:ce:0b:2d:6d:8f:18:f7:46:
67:90:02:2d:bc:64:c3:0b:c2:f0:81:ff:bc:6c:a1:17:1f:a7:
29:80:ab:49:81:11:9d:e0:47:13:43:f0:38:ab:72:2b:28:d8:
79:3f:93:28:fa:42:c1:8e:f3:2d:61:e2:16:22:e9:20:a6:ef:
8d:d9:a6:8f:05:6a:dc:0a:06:53:c9:af:ec:c7:70:da:a0:41:
4e:63:2a:ee:1f:04:0f:ef:e6:94:71:b1:8e:cb:cb:19:b8:49:
2f:52:66:11:4c:68:89:88:0d:05:ad:aa:92:b5:6f:05:71:08:
55:13:b3:ec:7b:0d:95:52:d4:b6:93:d3:88:ce:ad:cc:e7:f7:
1d:3c:b5:b6:05:21:5d:b5:8a:8f:86:36:7e:fb:a2:58:1d:21:
63:9a:5d:ca:8e:8c:f9:8e:63:91:62:fb:8f:fa:4b:57:86:fa:
03:15:09:49:00:db:9f:26:61:b5:4a:9d:4c:a6:85:87:81:5e:
c5:e8:f6:4b:f8:49:b5:00:40:4c:3d:21:9f:37:29:e5:2e:e1:
96:14:37:b5:79:70:63:5b:3f:eb:d4:f4:93:76:aa:42:09:a8:
dd:88:de:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:18:03 2025 by rpki-client