
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/2884a1-c124-4565-b841-e104c982d7a0/1/S5PGoQ0UHwCu-t4BvNNJL3VPToM.mft
File: S5PGoQ0UHwCu-t4BvNNJL3VPToM.mft (raw, json)
Hash identifier: yfvhnQ6XTJ0DRQQPcAMDHc6XFPPyLMJZAkgdAwyxoGI=
Subject key identifier: 49:FD:37:73:51:83:28:7A:6E:D8:52:88:D1:6F:04:A7:AB:9F:78:00
Authority key identifier: 4B:93:C6:A1:0D:14:1F:00:AE:FA:DE:01:BC:D3:49:2F:75:4F:4E:83
Certificate issuer: /CN=4b93c6a10d141f00aefade01bcd3492f754f4e83
Certificate serial: 0194BC3BFC2664F9152E36E95080B048427A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S5PGoQ0UHwCu-t4BvNNJL3VPToM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/2884a1-c124-4565-b841-e104c982d7a0/1/S5PGoQ0UHwCu-t4BvNNJL3VPToM.mft
Manifest number: 1383
Signing time: Fri 31 Jan 2025 12:00:35 +0000
Manifest this update: Fri 31 Jan 2025 12:00:35 +0000
Manifest next update: Sat 01 Feb 2025 12:00:35 +0000
Files and hashes: 1: S5PGoQ0UHwCu-t4BvNNJL3VPToM.crl (hash: 10dy1kOrgq4cxsms593wsZUyOM9LOzry6c+6xpkyftI=)
2: v6SZGiKR24BVvAjZdd8cz7dRNVo.roa (hash: SrmYXvyqUl8YVIgTkfPYRcexlIdDbvR6648X1c8kcVw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:fc:26:64:f9:15:2e:36:e9:50:80:b0:48:42:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b93c6a10d141f00aefade01bcd3492f754f4e83
Validity
Not Before: Jan 31 12:00:35 2025 GMT
Not After : Feb 1 12:00:35 2025 GMT
Subject: CN=49fd37735183287a6ed85288d16f04a7ab9f7800
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:6e:58:75:53:16:b4:6a:42:e6:d8:8c:30:a4:
9a:3e:73:47:3f:77:55:89:a0:79:65:27:c0:e4:78:
d4:38:f6:42:ba:29:3e:5c:05:4c:89:88:1b:b5:cb:
8e:37:5b:d5:f5:1c:19:b6:1a:9b:46:ae:0e:52:bc:
fc:b6:38:a6:cb:fd:16:d8:bc:31:0d:f0:58:42:d8:
a2:5b:d0:40:98:59:63:18:2f:b5:14:b7:df:db:1c:
80:fd:c2:b7:ef:fb:95:06:dd:71:1b:f3:89:ce:88:
08:22:b8:87:78:a5:54:55:de:3b:a0:49:71:96:82:
b3:91:47:50:6d:bf:5a:ac:fc:fb:1f:c3:56:80:8c:
00:2e:c7:ea:1b:e2:4b:b8:ab:ac:00:6c:43:2d:c2:
00:e9:b7:52:31:63:61:89:1d:71:26:0f:b1:67:eb:
dc:c8:f5:af:d6:24:26:90:b4:1b:30:5f:ae:a1:8a:
99:f6:6c:86:7c:eb:35:19:da:69:37:4b:7e:dd:3f:
88:60:21:b7:a9:f5:98:35:ee:77:ec:78:59:50:f4:
25:24:31:b2:0b:81:40:33:c9:f7:0c:ac:e3:9b:2d:
f3:ee:56:14:66:77:b6:f4:f3:13:47:79:77:ea:38:
15:96:13:f4:26:d7:3e:18:49:fc:cc:2e:42:7a:6f:
c6:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:FD:37:73:51:83:28:7A:6E:D8:52:88:D1:6F:04:A7:AB:9F:78:00
X509v3 Authority Key Identifier:
keyid:4B:93:C6:A1:0D:14:1F:00:AE:FA:DE:01:BC:D3:49:2F:75:4F:4E:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S5PGoQ0UHwCu-t4BvNNJL3VPToM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/2884a1-c124-4565-b841-e104c982d7a0/1/S5PGoQ0UHwCu-t4BvNNJL3VPToM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/2884a1-c124-4565-b841-e104c982d7a0/1/S5PGoQ0UHwCu-t4BvNNJL3VPToM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:88:82:35:6a:5f:36:11:eb:66:df:8c:e4:5c:1a:06:8e:70:
13:26:5a:fc:dd:ed:91:f2:86:24:86:e3:aa:43:7b:0f:79:20:
2c:5f:4e:f4:aa:35:00:5d:a8:3c:6a:a5:bd:47:d4:4c:da:80:
2d:8b:68:87:c2:73:7d:b2:13:34:88:b5:20:0e:99:cd:2f:23:
fb:6c:7e:46:66:26:36:ac:d2:11:5d:9e:37:a4:13:a5:d8:5c:
d7:68:05:5e:e4:07:c4:bd:eb:15:cf:39:af:04:7c:e0:dd:48:
65:80:5a:15:25:aa:de:5f:d3:72:3b:4c:c8:c9:77:f8:eb:5c:
8d:bc:82:9f:d9:27:db:26:ed:f0:33:17:eb:15:b4:01:62:50:
97:e4:70:43:b2:22:58:8b:05:e3:ef:1e:a5:b3:be:71:5e:cf:
00:41:35:c9:9b:52:9d:fd:d3:ab:1b:8b:6e:b8:75:6a:ce:3b:
bc:8a:2c:95:ec:a8:16:3d:7e:29:63:a6:c5:ef:26:bd:2d:f5:
97:e8:05:ab:28:88:88:70:bf:40:af:a0:ac:c1:14:8e:85:61:
0a:3b:77:d3:c5:45:01:e3:ca:b4:47:5e:ca:3c:95:37:a7:7e:
54:83:b5:08:8e:12:c3:25:a3:23:14:7d:ff:c5:d8:ba:9f:73:
34:23:b2:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:57:52 2025 by rpki-client